Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
File:                     306CD346148D11F19BFA55B13D3D8C67.roa (raw, json)
Hash identifier:          gLaB+fKDnvweZ6AaZLKmuMDi7NFZc4fv0OUHFLnUbr8=
Subject key identifier:   D2:C9:65:85:91:E9:63:CB:3F:08:3C:04:F0:4B:DB:D2:91:48:6E:89
Certificate issuer:       /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial:       093E
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
Signing time:             Sun 01 Mar 2026 19:11:41 +0000
ROA not before:           Sat 28 Feb 2026 10:06:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135310
IP address blocks:        103.111.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
                          rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
        Validity
            Not Before: Feb 28 10:06:46 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48f6d-0181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:91:d9:bb:fa:3e:8a:72:98:eb:f1:7f:aa:e1:
                    c1:8a:0e:27:f0:11:ae:94:3e:01:fb:ec:52:46:44:
                    91:28:cf:fd:af:35:7f:c9:de:4a:58:e2:13:30:a9:
                    cb:6f:9e:e5:38:6d:d1:60:fa:96:98:95:01:5d:76:
                    11:ad:bc:24:8c:d3:2b:56:45:81:b6:a3:a3:08:d5:
                    68:a2:e5:64:ae:fa:20:4b:80:c9:cc:43:bd:18:2d:
                    aa:60:a3:22:23:df:54:a7:dd:5f:2d:56:98:d0:d8:
                    4b:8a:b4:2e:b8:62:88:7a:56:5c:12:85:18:e8:0c:
                    92:6a:17:0a:08:58:a8:7a:42:20:e0:70:94:dc:ee:
                    16:89:a7:7b:8b:1f:6f:6a:ff:5a:e2:64:7a:91:57:
                    7a:9a:22:d1:6e:34:00:76:ff:e8:fe:c1:b7:41:d9:
                    6f:1b:1b:99:59:f9:28:bd:76:d1:4d:42:bb:2f:57:
                    77:b2:ab:1d:ba:16:e2:09:76:53:28:ef:17:d9:2a:
                    f1:79:9e:3e:1a:c9:97:96:a0:52:94:1d:8c:df:d9:
                    16:95:7f:0f:d1:a6:33:f8:74:24:d3:6d:73:ef:3b:
                    e0:26:49:1e:b6:fe:05:8d:b8:52:13:64:ba:4f:47:
                    ce:c5:51:16:30:10:8a:9b:21:76:15:ad:2f:87:c1:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:65:85:91:E9:63:CB:3F:08:3C:04:F0:4B:DB:D2:91:48:6E:89
            X509v3 Authority Key Identifier:
                keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:54:f8:b4:84:3b:bd:b4:31:0f:a4:2b:65:3b:60:f6:8c:77:
         5e:04:7d:31:dc:16:98:05:a3:a2:cd:4a:de:1b:cf:0f:8a:54:
         cf:3e:c7:6e:c6:6e:83:b7:24:a8:6e:0c:58:08:18:e3:38:dd:
         ad:8f:0a:fb:83:a4:e1:d3:47:2a:37:14:75:4c:69:d8:8b:18:
         2e:c6:f7:c3:53:fc:0b:fb:f5:c7:1a:6d:fa:9a:82:44:8b:77:
         b3:08:2c:d7:6c:b0:f9:51:3f:e8:f2:db:f4:99:d4:8d:56:a9:
         70:e5:b2:1e:60:ad:3d:40:e8:3a:de:96:03:29:b1:fe:85:2c:
         f5:7b:26:45:fe:2d:6c:a1:c5:20:67:21:a6:2a:35:df:f2:01:
         8b:d5:6b:e3:4f:41:7c:53:3a:d6:6a:9b:75:7a:0a:33:e1:94:
         0f:da:35:d5:3f:a3:03:00:3d:27:e7:b8:a6:7a:f1:0f:63:71:
         b2:aa:d4:0c:2a:4a:5e:6a:7f:97:c5:d7:ae:e8:09:42:e3:9d:
         4e:89:17:17:aa:34:c5:f3:22:26:9b:58:96:d7:7a:d7:98:51:
         4b:6f:86:f9:c6:00:1d:6e:bb:2b:54:ed:37:f3:10:1d:a6:86:
         86:f3:21:1a:cc:45:47:f4:54:b9:3a:a4:98:ac:90:9f:5a:08:
         0d:77:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:50 2026 by rpki-client