Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa
File:                     D78EA2DE44ED11EEA6685324C4F9AE02.roa (raw, json)
Hash identifier:          l+wLTHIqrekcKTj0QKuQF0Rx57+DsEFBlDvziPYrkC0=
Subject key identifier:   ED:1B:FB:36:1A:82:58:B2:0E:25:AD:BB:D8:4B:AA:36:63:F2:DB:2C
Certificate issuer:       /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial:       0224
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:21:12 +0000
ROA not before:           Fri 17 Oct 2025 13:39:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140443
IP address blocks:        103.215.228.0/23 maxlen: 24
                          2401:920:123::/48 maxlen: 48
                          2401:920:a31::/48 maxlen: 48
                          2401:920:1001::/48 maxlen: 48
                          2401:920:1002::/48 maxlen: 48
                          2401:920:1003::/48 maxlen: 48
                          2401:920:1004::/48 maxlen: 48
                          2401:920:1005::/48 maxlen: 48
                          2401:920:1006::/48 maxlen: 48
                          2401:920:1007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
        Validity
            Not Before: Oct 17 13:39:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43d48-a777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:bb:30:dc:d0:f5:ae:c2:aa:a9:2f:1f:fd:
                    ce:8a:9e:61:25:70:ed:3b:a9:0b:cd:74:ac:49:fe:
                    4a:33:ab:53:24:bc:09:8e:f8:68:88:2d:a1:0e:0e:
                    91:52:48:71:82:68:ac:d7:9b:9c:4e:68:83:d5:71:
                    49:65:79:e1:f3:6a:e4:e2:d0:46:6b:48:5d:a5:3d:
                    cc:ef:8d:ad:a9:59:bc:56:86:6c:67:cc:7e:e5:e8:
                    f5:5b:88:95:5b:55:98:78:ec:df:50:b8:ed:a2:f2:
                    68:5b:ee:61:19:16:2f:77:33:52:43:01:93:32:0c:
                    1a:81:36:5f:1e:db:95:24:cf:5c:c7:0d:55:85:2f:
                    37:f2:c3:ea:6d:83:fb:0f:e8:10:19:2e:7f:c5:d3:
                    5b:91:47:53:ba:28:96:97:ae:fc:29:a6:1f:58:db:
                    52:b8:9c:f9:5a:d1:8b:03:7b:f2:6a:fd:9d:31:d6:
                    a4:28:17:da:42:e0:cb:c1:ce:00:28:2e:23:01:13:
                    a5:b4:31:f2:10:70:17:9e:97:96:30:c6:28:93:9a:
                    5d:a0:e1:72:b5:10:6a:9a:08:86:ad:c3:cd:f5:b9:
                    c5:0f:f5:ad:82:6a:ac:c1:9b:2e:64:5b:01:5c:2e:
                    c1:71:ae:ba:d2:ee:c8:d6:ce:48:a8:d0:38:17:c9:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:FB:36:1A:82:58:B2:0E:25:AD:BB:D8:4B:AA:36:63:F2:DB:2C
            X509v3 Authority Key Identifier:
                keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.228.0/23
                IPv6:
                  2401:920:123::/48
                  2401:920:a31::/48
                  2401:920:1001::-2401:920:1007:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:c9:e2:33:29:36:f6:a9:88:03:16:e1:6a:e1:68:b2:c4:
         60:25:24:6b:b1:be:72:a6:54:47:2d:cc:d2:52:b0:e1:bd:4e:
         6d:2c:05:02:1b:f8:33:37:d2:ba:10:ee:93:52:bb:21:1f:b5:
         09:5a:9a:7c:5a:5d:4b:e1:e1:7c:ec:1c:f5:d7:94:0f:51:16:
         24:8c:6b:bb:1d:01:6e:32:54:0e:f8:7f:3d:3f:dd:3d:eb:6d:
         0e:bc:97:69:b0:35:63:15:62:61:49:42:63:36:44:35:e6:87:
         3e:e1:7e:59:3b:a2:66:0f:d5:53:28:1e:28:c8:43:23:72:0e:
         99:d6:bd:02:91:e9:de:b4:10:9f:08:eb:6e:29:9d:f9:c8:32:
         b0:35:7b:bc:52:f6:65:c6:a8:46:b3:ea:43:ad:ac:67:22:4b:
         eb:b7:b1:c2:69:e6:c1:f8:30:80:0d:47:cb:59:94:41:2c:ca:
         cd:b2:a9:e4:dd:89:39:2a:fc:c9:70:19:a2:ea:88:e5:08:99:
         77:72:e4:41:5f:02:a4:af:84:69:77:2d:56:52:cc:ff:c2:f9:
         f7:b2:80:fd:31:e9:94:94:89:68:f5:44:00:5c:18:ac:d8:04:
         bb:96:29:50:60:80:00:1b:93:12:80:37:d5:51:45:84:29:e9:
         98:e7:75:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:37 2026 by rpki-client