Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa
File:                     F396DA1468A211ED9525A86CC4F9AE02.roa (raw, json)
Hash identifier:          KkRg7bEKwnHuBm+Yd+/J88cAG/SeruIhl6B9YZ5p9Ak=
Subject key identifier:   27:39:46:BF:9C:19:DC:8A:19:F8:54:FA:42:D6:A4:19:72:1F:F0:93
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       026B
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:57:39 +0000
ROA not before:           Thu 23 Oct 2025 03:46:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150330
IP address blocks:        103.6.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Oct 23 03:46:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a41ba3-5643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2f:e8:43:59:96:25:fa:20:05:83:50:2e:86:
                    2f:85:66:84:0b:09:2b:41:82:75:64:45:ea:cb:31:
                    25:0e:ac:8b:39:a2:98:f7:dc:54:b5:fd:0d:98:6e:
                    3e:21:45:c2:c3:47:ff:23:d4:97:68:6a:1c:35:1f:
                    c8:7e:d7:20:95:c7:01:b1:2f:61:9f:aa:5a:55:9c:
                    2e:d6:42:ac:15:7d:57:4f:1a:47:85:2c:2f:36:d9:
                    31:df:46:40:67:65:18:21:04:98:68:35:12:d6:04:
                    61:7d:85:f3:fe:6d:5d:69:0c:1f:2e:27:87:d0:c8:
                    11:7a:91:39:e3:9e:09:fe:c2:2f:de:5f:63:f6:f0:
                    44:1f:71:f1:98:78:af:9d:68:99:d8:4d:cc:2b:e1:
                    43:c1:f4:80:58:f3:d4:ea:8a:bb:8b:ed:3f:4e:40:
                    bd:ca:57:99:82:a4:c2:25:3b:14:e2:94:38:fa:96:
                    56:14:7f:3c:45:8c:c7:16:02:6b:01:57:f7:27:cc:
                    41:ac:19:de:e7:b7:80:ec:68:1b:fa:80:9a:b9:7c:
                    c3:4f:e0:9f:51:22:bb:f6:de:69:c5:c9:ae:cc:bd:
                    4e:08:30:42:f7:01:6d:91:8f:51:d0:32:e0:7a:5f:
                    83:d6:3e:37:87:c4:4e:81:60:34:c3:52:7d:74:24:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:39:46:BF:9C:19:DC:8A:19:F8:54:FA:42:D6:A4:19:72:1F:F0:93
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/F396DA1468A211ED9525A86CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:3c:c3:17:0a:e9:55:10:6d:0b:bc:6f:86:e0:6b:1e:27:
         d9:68:88:bc:de:8e:ea:a8:16:02:66:b1:f5:f6:25:b4:fa:70:
         a5:54:e8:e8:e3:cb:78:2a:c7:51:66:82:5c:76:58:7e:7e:a1:
         4b:9e:0b:40:79:7d:ad:16:b4:5b:53:58:6e:84:3b:21:c0:b6:
         72:f4:26:da:18:18:4a:c6:86:e3:b1:5b:9e:f6:34:7b:51:d7:
         13:30:bb:e8:a9:ab:60:8f:79:97:00:4a:de:d3:49:bf:b6:3e:
         59:9b:73:cd:a9:d1:86:14:a7:57:fb:b7:e2:0a:bf:9b:06:72:
         32:2c:8d:f1:a1:71:d5:a6:f6:90:d3:df:36:e9:2b:87:ee:94:
         50:58:da:8c:c9:ca:aa:2d:55:d7:62:69:a9:4b:2d:30:1b:33:
         de:42:0c:87:79:05:67:7a:ff:1c:f4:a8:0e:14:73:d0:14:5a:
         42:3f:d8:97:2f:c2:e7:65:ab:03:09:f5:63:1c:94:c4:1b:be:
         b6:e8:34:99:26:74:db:1b:00:e7:2e:40:41:3c:58:94:47:48:
         2f:17:9d:ae:c9:2b:66:02:ce:63:0d:fa:7d:28:d9:69:2d:87:
         f7:2e:d5:4e:82:38:98:3f:70:cf:d4:02:af:44:26:ae:c2:f9:
         e7:bc:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:32:21 2026 by rpki-client