Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
File:                     C2AB1A10B64411E89321A417C4F9AE02.roa (raw, json)
Hash identifier:          rmM0QcRqjLZ27Q1JJZQYVuOq7Wu8g9V60G3/mrOlm6Y=
Subject key identifier:   64:C9:B8:69:E1:DB:A2:A4:6F:4A:51:65:65:07:72:6F:27:B4:9D:33
Certificate issuer:       /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial:       144F
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:32:59 +0000
ROA not before:           Fri 04 Jul 2025 17:26:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137952
IP address blocks:        103.118.44.0/22 maxlen: 22
                          103.118.44.0/24 maxlen: 24
                          103.118.45.0/24 maxlen: 24
                          103.118.46.0/24 maxlen: 24
                          103.118.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5199 (0x144f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
        Validity
            Not Before: Jul  4 17:26:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a423eb-d2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:d7:3a:02:76:36:85:7f:b6:7a:7b:1d:e9:
                    9f:7f:47:9c:54:5e:74:89:55:d2:7c:53:14:95:e0:
                    75:22:3f:ba:ee:8b:b1:34:58:d8:f4:88:b6:6c:1a:
                    50:22:dc:84:a8:6f:e2:42:b9:3e:99:c9:25:a1:cd:
                    59:bd:3c:96:4c:ed:7a:7d:13:5e:47:50:47:98:8e:
                    d9:41:a2:af:43:b0:c4:2f:6e:e7:f0:22:7c:42:ef:
                    7d:4f:7a:3c:c5:87:2f:34:81:af:8c:18:93:db:bf:
                    33:5e:ce:ae:80:5d:85:ac:75:63:54:9a:05:dc:68:
                    57:cb:06:81:bd:76:80:9a:0f:fa:6c:ef:cf:8c:5c:
                    15:fa:c1:98:7b:e4:73:40:3f:73:03:6d:f7:ce:26:
                    86:b8:bb:36:eb:6c:ab:11:5e:b6:aa:89:75:d4:04:
                    ab:00:0b:7a:6f:89:5a:56:71:d9:f6:8d:d4:98:32:
                    09:99:0c:d2:ff:e2:30:7f:64:e6:64:23:f6:32:52:
                    27:04:4a:15:11:25:1f:88:cd:a4:8d:78:3f:45:81:
                    95:f2:3a:76:dd:d4:35:90:1d:55:bd:59:da:18:28:
                    fa:58:e1:a6:de:40:b7:9d:0d:eb:1c:6d:4b:20:f0:
                    78:49:47:2c:d7:dd:16:2b:55:8a:f8:bd:11:27:44:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:B8:69:E1:DB:A2:A4:6F:4A:51:65:65:07:72:6F:27:B4:9D:33
            X509v3 Authority Key Identifier:
                keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:f8:75:f7:4c:ce:10:92:b7:57:f6:54:eb:33:c5:80:5c:
         70:c8:3d:84:cd:a1:e9:f4:56:f8:c9:3e:5d:65:07:9f:3c:38:
         a4:54:b9:72:8f:b2:70:99:52:24:cd:f1:d5:c2:c7:be:7e:16:
         9e:31:a3:12:8b:e2:67:c1:bd:cf:80:40:56:ea:c8:d2:db:e4:
         36:9e:72:6b:de:a7:43:f1:37:e9:df:90:32:a1:03:92:e3:48:
         55:12:09:57:90:f1:49:ae:5d:b0:27:64:cd:02:6c:b0:04:5f:
         3b:40:5a:4b:af:e2:72:ac:a0:64:ef:69:98:43:ab:a6:39:49:
         a2:ec:35:91:dc:cf:05:8b:25:69:e6:b9:ef:06:0c:80:f8:f0:
         6d:51:70:d2:fa:6c:89:fc:55:89:7a:98:cb:c1:7d:f2:60:bc:
         8f:7d:0b:da:b1:b3:9c:b4:3a:ce:99:5b:0b:b1:3a:78:1e:63:
         93:55:5d:47:fe:e5:9c:d4:79:fc:41:5c:b8:3f:b1:b2:c5:1c:
         c1:12:d9:40:70:07:42:2e:c9:84:09:73:d7:0b:90:09:0f:b9:
         65:4a:a4:42:63:d6:ab:68:07:27:57:31:33:dc:f1:9e:85:e2:
         a3:c3:0b:0d:b1:23:24:00:5e:c7:c6:7f:94:05:9a:76:64:3c:
         fd:af:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:26 2026 by rpki-client