Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa
File:                     3CC77D02EE8811EA9225690DC4F9AE02.roa (raw, json)
Hash identifier:          Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=
Subject key identifier:   5B:70:77:1C:40:B7:88:FC:6B:32:2C:C6:D7:46:53:02:D0:F5:56:DB
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       0872
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:06:33 +0000
ROA not before:           Wed 24 Sep 2025 21:11:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        103.38.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Sep 24 21:11:57 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a447e9-4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:22:95:04:3c:4a:e1:48:69:57:3e:6e:9f:
                    bc:21:38:8c:6c:eb:1a:0f:5c:e2:59:61:4a:3e:c8:
                    bd:00:64:49:87:53:b8:c5:90:9b:2c:a1:98:aa:39:
                    23:2e:64:48:b1:19:bb:14:c0:64:26:3c:5c:47:70:
                    39:68:88:b1:e1:ca:bd:28:a4:e4:60:67:1b:72:e3:
                    1d:d9:ca:ad:3f:87:e5:11:8a:02:e9:e9:db:39:a9:
                    a8:77:b4:45:6e:4e:72:90:86:84:43:46:a6:4c:ff:
                    33:40:8d:26:a6:c8:4d:76:ed:93:ae:f7:63:91:48:
                    30:25:a1:8f:6b:e1:bd:e6:a4:d6:1c:d5:bb:eb:d1:
                    70:1a:c5:d3:6b:82:69:07:82:4c:b2:3d:3a:ff:7c:
                    c4:ad:1e:a1:9c:80:53:b1:58:eb:1c:11:c2:75:47:
                    1f:68:e8:19:a3:9b:0f:59:7f:96:e6:1f:2e:6a:e5:
                    8b:9f:c3:46:91:31:a5:98:67:eb:a5:85:aa:b3:39:
                    57:b0:51:77:ee:f3:32:d9:78:2c:f0:0b:61:cc:06:
                    2a:b1:6a:23:95:d8:58:33:3e:0f:8a:aa:d8:5b:8a:
                    56:eb:be:34:d8:ac:37:36:81:a8:7d:e4:a7:9d:fa:
                    c9:67:d0:e0:8b:16:0b:c0:e1:6f:7a:44:1f:0d:00:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:77:1C:40:B7:88:FC:6B:32:2C:C6:D7:46:53:02:D0:F5:56:DB
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/3CC77D02EE8811EA9225690DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:99:37:45:9f:b5:99:65:4d:88:52:bb:59:6e:89:4d:b1:
         95:19:2f:f5:2a:1f:f7:a3:44:7b:19:6b:b2:63:47:b5:2c:6c:
         67:ed:8e:09:ec:f5:c5:7d:dc:ec:ee:7b:04:21:06:0f:51:ac:
         c7:8b:09:e1:e3:d0:3a:ff:65:25:52:dd:7c:12:96:9b:65:49:
         7c:9b:6a:2f:41:95:03:43:bd:59:8e:9f:5c:e0:9a:14:8d:36:
         2e:38:0e:55:56:b3:a3:38:ea:1d:85:cd:a9:db:25:59:80:9c:
         ae:17:18:72:d8:2a:3f:f7:6b:ed:10:a5:fb:fa:00:8b:79:17:
         f7:86:1f:5e:95:42:fa:49:0b:07:40:50:3a:6d:33:02:38:35:
         1e:75:81:26:72:5b:f3:ee:08:dd:ae:3a:81:58:af:a8:a4:d8:
         32:a6:02:56:0c:03:32:09:a8:4c:27:da:c3:5a:15:25:1d:36:
         5d:54:df:23:f4:a9:27:c8:b6:4f:1f:ab:5d:72:73:53:d6:05:
         79:dd:5f:e4:d3:56:f9:74:2f:49:24:2e:35:85:ad:93:33:c4:
         d9:e9:2f:22:ae:69:9b:cc:9e:11:89:17:d1:8a:45:d3:fb:e6:
         94:cf:77:c9:b2:37:26:94:fc:aa:1a:55:ba:65:f0:ed:47:e2:
         7e:1f:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:51 2026 by rpki-client