Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa
File:                     3712E24075D911E8A722EC33C4F9AE02.roa (raw, json)
Hash identifier:          0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=
Subject key identifier:   48:5D:92:31:B2:42:B4:6A:3B:6C:18:CA:1A:2B:4C:5A:C1:39:BA:5A
Certificate issuer:       /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial:       3560
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:52:05 +0000
ROA not before:           Wed 28 Jan 2026 15:10:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131584
IP address blocks:        103.226.212.0/23 maxlen: 24
                          103.226.214.0/24 maxlen: 24
                          103.226.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
                          rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
        Validity
            Not Before: Jan 28 15:10:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a460a5-11c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:81:9f:90:56:69:7f:a8:4d:93:b6:29:ca:
                    8d:73:05:6c:89:b9:5d:8d:89:f9:a1:32:c8:3f:2f:
                    83:62:9f:b2:56:5c:59:fd:55:ea:c7:18:e7:7e:6d:
                    06:6a:3a:6f:f4:26:eb:7e:e4:44:9e:97:a5:cd:79:
                    36:ca:8e:11:10:2c:02:2e:b7:da:e0:0f:55:d1:98:
                    fc:1e:cc:b9:a2:1b:39:91:44:fe:86:f1:b8:f2:e1:
                    7c:2a:76:f2:51:8b:86:10:df:13:b8:a7:f1:9b:4d:
                    be:75:ca:83:2e:bc:41:da:9b:56:4d:aa:7a:02:41:
                    b3:da:43:50:24:b9:f4:3c:52:ef:a1:c7:85:2e:7f:
                    2f:ce:32:09:73:e3:97:aa:35:06:68:5b:d3:0a:95:
                    d2:29:60:67:2f:c2:83:19:da:e3:6e:67:08:f6:fc:
                    99:e0:07:d3:05:db:e4:9f:98:12:84:3d:e8:8f:cd:
                    6e:14:54:4e:d4:fa:10:4f:f2:47:9c:6e:a6:8a:ba:
                    f4:f0:93:15:f0:2d:4c:23:37:08:5f:ae:a6:d4:28:
                    2f:ea:52:22:95:99:4b:4a:ce:a3:5d:b5:d7:55:1e:
                    33:cb:35:db:17:73:36:61:bf:aa:92:10:3e:3f:bb:
                    1b:b6:5f:cb:ad:9e:48:fe:c9:39:a1:dd:8a:3a:52:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:92:31:B2:42:B4:6A:3B:6C:18:CA:1A:2B:4C:5A:C1:39:BA:5A
            X509v3 Authority Key Identifier:
                keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/3712E24075D911E8A722EC33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:00:7d:ae:f0:65:c4:e6:3d:6d:b9:e9:dd:64:be:c5:a1:2e:
         80:32:dd:2b:3a:d7:bb:a9:60:32:49:a3:9e:f2:b9:4d:c7:c2:
         62:b5:e5:6e:1e:99:c6:27:dc:a1:f1:ca:69:ab:ad:66:ab:f8:
         38:a1:18:bd:48:63:37:67:76:ee:95:61:fa:5f:37:e1:12:be:
         12:f3:5c:65:9d:8c:df:6e:91:6a:3e:90:ad:74:bb:b7:e7:37:
         80:88:b8:ac:83:1f:4c:eb:b1:c4:56:98:99:e7:8c:9f:62:ba:
         86:f4:17:f8:85:e3:7d:ed:b5:b1:b4:b4:21:24:ce:2f:09:8d:
         9a:5b:db:51:6d:1f:a6:2e:fd:0c:c7:7a:45:97:a6:be:f9:f6:
         61:76:6e:d5:c7:d7:59:ee:bc:11:35:b9:83:d1:92:63:3e:6a:
         61:ae:6d:56:1d:b1:1e:da:3e:e2:83:bc:70:9e:69:12:08:2e:
         3d:db:f6:5f:cb:e6:44:d1:11:bc:85:19:fa:a9:9f:62:f7:c7:
         d8:35:8d:fe:54:3b:d8:fa:ab:94:2e:26:d7:25:d8:02:e9:87:
         ff:cb:e2:54:95:6d:20:69:27:dc:8c:49:18:9a:dc:31:48:75:
         95:13:42:56:99:e9:52:c5:5e:95:fe:3b:30:12:45:80:54:92:
         f7:e5:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:24 2026 by rpki-client