Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa
File:                     3CB103648C2511EDB64DB410C4F9AE02.roa (raw, json)
Hash identifier:          D4f+/PaMSPI77GLxRMcgsvsBio3FnmZWL1aakcYD4mE=
Subject key identifier:   61:77:AD:FD:6C:A2:15:2F:4D:CA:18:31:7F:44:30:F2:91:06:35:F4
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       024C
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa
Signing time:             Sat 07 Feb 2026 02:21:40 +0000
ROA not before:           Sat 07 Feb 2026 02:21:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        103.178.78.0/24 maxlen: 24
                          103.178.79.0/24 maxlen: 24
                          2001:df0:3740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Feb  7 02:21:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6986a1b4-f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:da:e2:e9:98:11:c9:65:3d:95:fc:5e:48:
                    6f:5c:5c:fb:6d:65:04:95:34:b4:bf:0a:8c:1f:8f:
                    48:0c:44:04:4e:71:f4:65:3c:8b:36:c4:f5:29:88:
                    d6:9f:df:63:af:b4:ea:c7:d6:ab:f8:53:a1:33:f7:
                    f6:96:4b:16:1b:4f:5a:78:22:07:a4:5e:02:25:c9:
                    cd:75:67:01:23:d0:81:09:83:6f:72:e7:6a:bf:1f:
                    5d:81:f1:b3:a8:e9:73:a1:c6:c1:19:48:8b:00:27:
                    3e:ea:ae:0e:99:9c:8f:04:42:b0:06:16:06:d1:15:
                    68:77:34:44:6c:a8:a6:7a:5a:ee:20:b6:71:fc:b4:
                    c2:63:07:1c:31:45:3e:c4:73:1f:ca:ef:e4:cc:fb:
                    4d:88:d7:c7:d0:df:c5:3d:f4:47:20:28:f2:80:f9:
                    7b:84:0e:cd:9f:d0:2d:91:f4:0d:cb:cc:28:e3:c9:
                    30:68:59:3e:91:fa:ea:7a:e6:0e:3e:1a:f6:05:cc:
                    90:52:c1:d0:68:97:f6:ed:85:22:98:ea:ee:c8:e1:
                    6e:0c:85:f7:49:ed:d4:47:39:fb:1e:3c:4b:7b:fc:
                    61:0b:68:8a:ea:8d:e9:a0:01:03:77:5c:90:e6:4f:
                    17:24:81:22:69:a8:88:20:66:ed:72:33:53:4e:57:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:77:AD:FD:6C:A2:15:2F:4D:CA:18:31:7F:44:30:F2:91:06:35:F4
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.78.0/23
                IPv6:
                  2001:df0:3740::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:c4:34:32:a1:05:02:3d:3f:81:79:d5:38:cd:37:b9:07:
         7c:76:f2:63:23:8b:bb:4c:55:91:6b:60:73:22:11:be:df:61:
         73:f3:35:7c:b2:c3:95:6d:02:ba:c2:43:50:9e:5f:17:b6:55:
         74:99:06:9c:6b:03:98:1c:7e:0c:1c:3d:bd:a0:0c:79:55:6e:
         0d:41:cd:bb:af:b8:87:73:81:63:fb:f7:1d:83:42:36:bd:d8:
         78:71:b3:6d:62:fd:e6:fe:63:58:07:70:cb:c2:c2:01:72:ae:
         3e:03:48:93:0e:62:6e:b6:ff:da:7b:e5:5b:03:8e:ed:b8:26:
         3a:ad:0a:b5:ad:47:f2:e7:d1:1b:1d:59:b9:b2:3a:99:e6:37:
         c9:26:ca:6b:11:f9:85:80:4a:98:3b:94:93:ed:8a:6c:96:b1:
         1f:12:8e:89:9a:72:97:db:54:fa:93:23:f1:aa:07:c6:80:59:
         0e:64:8a:12:14:cd:2d:92:8e:11:ec:20:2b:af:fe:7b:0e:12:
         4b:de:53:bc:83:54:c0:23:53:87:9e:8c:5c:4c:8f:41:2d:28:
         05:8f:ee:30:cb:44:66:1e:0d:94:cd:e7:2e:e0:23:bf:e1:ce:
         64:49:02:ac:ae:4c:9f:e9:78:bf:e6:71:b3:0b:74:43:50:e8:
         e6:6c:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:23 2026 by rpki-client