Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
File:                     B3695572FD9E11F087EE26735F6F56BC.roa (raw, json)
Hash identifier:          rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=
Subject key identifier:   98:1D:7B:65:27:71:F6:D8:F4:E6:3B:09:6A:EE:67:F0:07:33:B6:EA
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       14
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:39:36 +0000
ROA not before:           Fri 30 Jan 2026 05:44:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18126
IP address blocks:        103.64.132.0/23 maxlen: 23
                          103.64.134.0/24 maxlen: 24
                          103.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Jan 30 05:44:11 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3d118-2a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:5b:fe:48:74:3b:03:3e:77:47:d3:fc:59:
                    45:d9:bf:a8:b0:85:55:88:87:e3:60:0f:0d:9c:dd:
                    04:9f:84:47:2a:a8:72:c7:c4:27:b1:ad:95:05:df:
                    1a:0b:07:b6:8a:ba:8f:82:59:70:49:1b:2e:31:6d:
                    a9:70:63:6c:36:0d:49:54:f9:1e:ec:1e:a4:38:f1:
                    34:60:56:67:cd:96:8c:46:fa:e5:ff:87:cb:0f:11:
                    a6:14:77:a2:0d:b0:4c:f0:a4:b2:c5:4d:d3:be:9d:
                    74:83:52:9c:5a:d6:88:40:97:5c:80:ff:0d:66:7c:
                    59:43:89:56:ef:6c:cf:1d:c0:6c:0d:88:72:a9:92:
                    a6:6c:ff:f6:8b:51:1d:13:80:43:1f:08:83:a0:9c:
                    b0:af:c9:2b:41:a0:ea:5b:2a:49:4b:75:fe:8a:0c:
                    f4:62:10:d9:1f:25:2c:b5:c9:9a:bb:91:a8:9c:18:
                    3e:ee:03:c2:fb:b6:41:ea:82:52:0a:a9:bc:99:07:
                    0e:e3:63:da:a6:6a:14:ab:27:02:6d:fd:65:a9:d5:
                    8f:91:0a:f7:63:90:ce:db:f5:ea:86:51:38:4a:88:
                    27:be:0a:1d:5a:7c:f7:70:30:27:96:55:5a:36:90:
                    49:8e:b4:93:b7:7d:9e:51:0b:5d:39:6c:84:8e:27:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1D:7B:65:27:71:F6:D8:F4:E6:3B:09:6A:EE:67:F0:07:33:B6:EA
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:81:cd:7d:51:47:97:44:eb:14:ac:69:e6:a5:3e:80:07:b6:
         9a:95:99:a0:87:c0:42:12:88:6b:47:7f:59:61:97:0f:03:e0:
         62:10:b4:b5:4c:0d:20:c3:11:cb:09:dc:9f:27:ed:01:70:1b:
         fa:2d:fb:25:bf:4a:c4:f5:64:0b:57:c7:89:1f:dd:38:24:d7:
         17:11:29:71:da:80:17:2b:97:fa:d3:29:c4:e1:fc:29:39:60:
         dc:0a:9a:6e:9e:b5:a3:6d:80:73:97:18:89:3e:9f:ec:e4:35:
         62:2d:20:67:4b:e3:cb:97:68:47:44:c9:57:e9:b5:41:90:df:
         0a:18:0b:e7:97:0f:44:d2:29:b5:1c:0b:c3:72:29:85:05:e2:
         d6:e7:af:66:04:6c:20:a9:f0:38:08:ad:a8:88:dd:2d:21:56:
         9a:e6:69:28:01:22:be:83:5e:b4:8a:18:db:c8:4f:7e:67:85:
         77:01:f5:12:b7:99:69:ab:79:f2:64:8d:9f:86:48:00:89:21:
         77:0a:8f:50:5e:fd:b2:a7:a4:1e:1b:69:2d:99:9b:96:44:67:
         a6:2a:47:6b:f1:14:c7:01:41:e0:21:f2:a4:e3:da:65:48:d4:
         f2:65:26:56:23:9f:b6:e6:d6:a7:f5:df:88:f6:ce:08:e4:3e:
         6c:dd:08:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:51:44 2026 by rpki-client