Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa
File:                     A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (raw, json)
Hash identifier:          M18r22Dfi6nMP8Zm1Hu9fqPiSXgEwNJEQtY8GIZmgdA=
Subject key identifier:   96:F5:0F:8A:82:1F:D9:F0:D7:71:BA:10:91:F7:54:F8:06:C8:85:17
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       03F4
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:44 +0000
ROA not before:           Fri 27 Jun 2025 00:56:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133523
IP address blocks:        103.73.115.0/24 maxlen: 24
                          103.232.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jun 27 00:56:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42a6c-3437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:e6:09:bf:72:af:eb:0e:05:26:9c:c2:68:
                    d7:1c:9c:3e:fa:8a:44:a4:cf:f9:23:8f:b1:dc:9e:
                    97:0f:f3:e2:40:4a:36:ee:50:c3:f1:d4:df:43:23:
                    35:8a:bc:b6:ad:2d:31:59:ea:83:c1:7b:34:3d:11:
                    b1:87:d0:ff:93:82:ec:56:d5:47:bc:f4:8b:07:6b:
                    e0:78:53:36:f2:b7:dd:90:c4:74:d4:91:5b:f3:c8:
                    79:00:b3:a9:71:7b:34:ee:78:3c:ff:bf:9f:e8:dc:
                    cc:3d:ad:a0:3d:c9:20:af:ab:9e:42:13:ad:f2:4c:
                    53:54:6a:35:40:f2:04:ca:00:af:26:a1:79:a0:c5:
                    51:5b:38:59:fa:7a:5b:4f:28:47:c9:fc:e3:5d:30:
                    5b:79:0f:38:c0:6a:de:38:75:97:b5:cc:13:04:3d:
                    24:e6:74:d3:98:37:b6:11:33:59:c8:d6:bb:f4:42:
                    1d:dd:38:5a:7f:0c:44:24:d4:7e:6b:72:0e:85:60:
                    9e:7b:93:c6:30:ff:e7:75:fb:d1:2a:1a:a8:e6:45:
                    8f:84:07:6a:f3:fa:19:c2:16:77:79:85:58:6c:81:
                    df:aa:ab:1b:b2:6d:c6:8d:60:65:d8:ae:ae:23:f2:
                    34:c9:21:52:83:f7:c6:ff:99:1d:cb:f4:39:fd:6f:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F5:0F:8A:82:1F:D9:F0:D7:71:BA:10:91:F7:54:F8:06:C8:85:17
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A8E34E9CB66611ECAF76DA4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.115.0/24
                  103.232.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:18:40:50:86:31:8f:76:a0:8b:da:5f:5a:d8:69:97:7c:03:
         6c:74:62:ec:26:aa:f5:0e:9a:46:bd:25:c7:d3:11:87:b9:9b:
         5e:76:3a:9f:71:34:b7:58:a7:71:8a:8c:f9:5c:df:cc:0f:bb:
         f3:75:91:c1:17:14:1f:57:2c:2d:c2:a4:9f:dd:e5:e0:d3:c3:
         07:07:42:7b:42:32:35:a6:f0:87:c6:3d:f7:11:2d:ed:a0:18:
         f5:a5:88:da:10:1e:a3:32:b5:df:1e:08:0d:b9:65:b7:67:be:
         46:56:70:c3:57:7f:46:0c:9a:98:cd:15:0e:aa:e2:7a:04:ac:
         ae:88:4b:95:a3:9f:e7:c7:5b:38:25:a7:f8:99:45:e5:96:ad:
         13:1e:1b:f1:94:39:c4:1f:3f:e4:0f:cb:45:b8:28:e8:55:ce:
         d6:85:f6:38:89:46:a5:37:09:45:10:2e:d1:64:89:8b:84:15:
         6b:1a:0c:7c:d2:f5:5b:0a:88:01:93:60:dc:10:16:f3:22:0b:
         c0:11:d5:4d:58:61:89:36:f6:ec:6c:94:80:af:78:8a:49:48:
         9c:a0:ec:94:b1:ac:92:82:2d:43:16:28:a8:f2:70:b8:01:e0:
         31:30:24:8f:d2:dd:7b:63:4d:74:9b:64:fb:a4:be:5c:00:44:
         1e:78:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:20 2026 by rpki-client