Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
File:                     4A20B66AA5FF11F08004B67CC4F9AE02.roa (raw, json)
Hash identifier:          3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=
Subject key identifier:   BA:C2:C9:1A:C5:AA:43:E5:30:7A:CD:C3:F3:90:D6:0E:CA:77:3D:0B
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       053E
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:36:51 +0000
ROA not before:           Tue 18 Nov 2025 22:44:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     53766
IP address blocks:        103.48.252.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Nov 18 22:44:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47932-05c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:49:10:20:dd:ca:74:16:05:e2:22:d9:13:
                    63:3d:d2:2f:13:ff:8b:2f:ed:5d:a4:21:ed:3e:24:
                    46:4c:7d:c7:d3:c6:00:a7:2e:e2:4e:cb:93:c8:c5:
                    fe:da:79:c1:2a:af:69:dc:de:85:e0:5c:ce:a4:53:
                    41:9c:7c:fe:02:e5:d7:9a:be:ce:5f:f0:24:18:f1:
                    c7:ea:9a:94:9c:7b:bc:d1:11:88:a8:6c:24:d5:8f:
                    78:50:0d:90:82:eb:24:4c:f8:e2:1d:ae:c6:3f:42:
                    c6:81:c6:2d:23:5e:fd:bf:28:d5:2b:78:4c:41:58:
                    92:ef:5c:7b:62:61:88:45:2a:03:0c:24:0a:bf:db:
                    a4:cd:b6:52:0c:49:2f:24:94:1d:6c:9e:01:70:d7:
                    5a:09:15:d4:f9:f1:71:14:9b:00:a5:19:96:cc:e4:
                    76:9c:92:5f:88:73:5e:24:ac:c1:a7:44:c0:17:89:
                    30:08:0c:e2:88:6c:66:86:cd:4a:aa:b6:50:ce:3b:
                    1e:d8:c2:bc:9b:d0:0b:c2:92:c6:d0:a9:21:49:52:
                    71:19:dd:12:14:f2:3f:b9:45:64:06:98:c3:20:bd:
                    49:c9:7c:30:2b:0a:72:d5:88:8c:8f:c3:85:da:28:
                    16:a7:b2:3b:5e:cc:1c:37:23:ff:df:4f:ac:e0:90:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:C9:1A:C5:AA:43:E5:30:7A:CD:C3:F3:90:D6:0E:CA:77:3D:0B
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:df:e1:f3:15:09:63:05:51:0a:3e:2c:22:4d:a6:a8:6e:
         80:f5:ab:14:0b:a2:a0:d5:78:63:2e:af:0a:63:01:46:0f:15:
         8d:cb:44:a2:25:45:19:a7:7e:ec:0c:80:05:aa:5a:2d:08:70:
         9f:3a:82:8e:5b:19:00:25:f8:fe:36:bb:0e:1e:7b:64:8f:d2:
         32:39:c1:0d:8f:c3:03:c0:b7:a8:c8:e7:d9:2d:e7:56:fb:dd:
         e1:13:e9:64:b0:b8:3d:cb:4a:1a:98:d9:24:7d:86:5e:f3:c1:
         a6:b9:a5:12:5e:59:a2:1e:9e:ce:38:e7:10:54:d6:41:98:35:
         54:d3:a7:2c:ec:f4:6d:74:57:88:21:76:0b:07:71:b0:81:bb:
         49:87:c3:d1:69:c1:ca:3c:22:b6:0e:bb:28:37:a0:aa:74:e3:
         60:ab:06:a0:29:7b:60:89:85:e9:27:26:a7:a5:a3:0e:84:24:
         73:f6:c3:77:14:76:15:a2:50:10:c3:ac:5d:7c:bb:4d:2a:99:
         28:33:f4:fd:d8:6a:6c:cb:d3:4a:3d:37:ee:d3:a7:cc:63:71:
         18:1c:66:4b:fb:9c:fe:15:fe:58:c2:ac:df:db:d2:af:c3:78:
         36:04:be:a6:ff:cb:b9:a2:f5:33:e8:8a:e9:03:aa:ae:ce:05:
         fc:b3:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:23 2026 by rpki-client