Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
File:                     2601F1CEEB7111F0839E97F34E6F56BC.roa (raw, json)
Hash identifier:          E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=
Subject key identifier:   B8:68:3D:21:EB:1F:5B:D4:66:22:00:23:8F:C1:F5:04:A0:F1:19:FB
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       41
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
Signing time:             Sun 01 Mar 2026 06:07:31 +0000
ROA not before:           Wed 07 Jan 2026 02:32:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136203
IP address blocks:        103.83.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: Jan  7 02:32:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d7a3-e102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:f8:b5:eb:e7:c9:a6:aa:db:df:1c:08:e9:
                    21:69:7c:25:bd:4e:94:a7:6d:78:38:67:03:11:6a:
                    71:63:45:f4:fb:bf:90:4b:ff:ef:2c:d6:1e:f0:90:
                    29:34:0f:3a:d5:65:ba:28:58:00:c0:32:28:d8:bb:
                    4a:c0:a8:88:a8:51:7b:43:2a:44:4e:66:01:b3:4f:
                    98:d7:73:f4:ee:f4:e6:80:f8:4f:7a:64:23:fc:67:
                    6e:4c:6c:3d:d3:b9:4f:60:2c:5e:37:71:d6:3c:6d:
                    df:7b:c4:f4:85:41:e4:f6:17:8e:d9:65:b6:fd:44:
                    94:3d:ec:f7:9d:6c:e1:aa:bc:c4:be:43:0b:10:36:
                    0a:69:27:c6:d8:34:75:da:82:e2:26:e4:6f:ae:6c:
                    fe:7a:15:44:92:1e:70:9c:0c:08:5d:22:c6:86:96:
                    36:d8:6e:b8:42:fe:2a:63:74:f8:6b:7f:56:57:a4:
                    3c:de:68:56:c0:3e:b9:ca:de:89:f1:a5:24:51:9b:
                    9d:36:49:77:8b:9f:dd:bc:a6:0a:bd:d9:fe:a8:33:
                    ef:4c:d8:97:12:bc:24:72:8c:41:da:1a:be:5f:ae:
                    f8:7b:a3:f5:95:4a:e3:04:42:c3:aa:4d:42:d1:d4:
                    16:4b:0d:f1:6d:61:67:ae:84:0c:91:2d:cc:f6:6e:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:3D:21:EB:1F:5B:D4:66:22:00:23:8F:C1:F5:04:A0:F1:19:FB
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:20:0d:e7:26:d6:4b:9b:88:31:d2:91:14:28:6f:26:c5:
         40:10:95:30:a1:11:66:e9:42:d0:37:12:bf:13:41:b4:a2:9c:
         3b:40:96:2a:63:9b:4b:77:2b:d9:11:e0:06:9f:55:ea:33:a7:
         71:2b:da:51:bf:d4:45:28:06:89:9d:6f:d7:ba:d7:b6:56:e2:
         e6:6e:17:55:1d:7b:f8:0b:63:57:d2:d1:41:d3:c2:78:ba:a2:
         47:93:57:24:22:9b:68:bc:da:78:a1:58:83:db:55:4b:98:22:
         93:1e:f8:89:83:6c:a5:bc:99:33:30:6a:78:59:c8:a4:08:f8:
         ac:46:52:0c:1a:ce:58:b6:9a:4d:e3:13:b9:38:f2:6c:f6:4f:
         8a:f2:4f:19:c6:b3:02:ba:16:94:ed:ca:1b:10:42:42:6a:38:
         e8:2e:ef:8a:3c:08:f2:9a:b6:4b:a1:56:d0:19:10:6f:54:2c:
         24:2d:83:0c:47:e2:d3:49:5f:d6:1d:ab:d7:d2:b3:04:71:94:
         21:51:fe:5f:23:5f:98:79:73:43:14:24:f5:f8:2b:2f:19:1b:
         d6:cf:94:39:1e:1f:5f:b7:31:22:ba:b4:2e:09:ae:2a:a6:2b:
         9a:54:78:14:40:35:9b:82:05:45:81:df:01:b6:d3:7e:cf:d0:
         94:87:7e:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:15 2026 by rpki-client