Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
File:                     3FACB1ECAE3911F099A5E452C4F9AE02.roa (raw, json)
Hash identifier:          5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=
Subject key identifier:   0D:B7:C3:46:7D:16:BD:29:D5:BE:E4:76:EF:1E:FA:43:6F:20:78:16
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       48
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:05 +0000
ROA not before:           Tue 21 Oct 2025 04:48:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140896
IP address blocks:        103.153.30.0/24 maxlen: 24
                          2001:df4:2c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: Oct 21 04:48:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48b4c-0a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:61:2c:2e:79:bb:ab:b0:fe:ee:91:b9:1d:
                    9f:b2:ad:2b:a6:41:14:e6:64:6a:77:45:fe:fd:23:
                    9a:82:9f:a2:a1:25:3e:59:83:33:4e:8a:c8:87:ca:
                    23:86:4a:23:a6:a6:ce:0b:ad:38:f9:89:17:c0:67:
                    5d:bf:75:9f:26:75:2d:f4:e5:5f:56:d6:61:34:8d:
                    f3:56:0f:e4:5e:d9:52:97:8d:73:f9:ff:98:99:e8:
                    9c:20:20:9d:c2:4e:6f:81:8b:9e:e2:71:c3:cc:6b:
                    93:a0:e6:b1:7e:6b:1c:cc:cf:f9:b8:94:f7:d6:b9:
                    b1:18:59:89:9a:1e:2b:c3:20:35:ee:ec:ef:bf:ff:
                    a6:5e:28:d6:1e:4b:b5:24:08:a4:d6:7e:ee:9c:77:
                    d3:90:e8:04:eb:86:dc:87:ce:e1:50:54:80:4b:b0:
                    29:f1:46:f5:c6:e1:07:5b:e2:2d:07:0c:a7:07:5a:
                    a6:ee:b4:be:1c:8c:f9:57:72:f5:a3:38:03:30:35:
                    de:b8:8e:7a:ba:33:bb:11:f3:72:10:a1:f4:c4:51:
                    7f:a0:e5:f4:dc:38:5c:d4:b2:5a:f2:5d:82:df:48:
                    3a:ae:89:82:3d:90:f5:03:82:f1:78:10:42:b0:2b:
                    92:a8:ee:50:a3:4a:da:e8:de:7b:96:5a:b2:74:e7:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:C3:46:7D:16:BD:29:D5:BE:E4:76:EF:1E:FA:43:6F:20:78:16
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.30.0/24
                IPv6:
                  2001:df4:2c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:76:73:e9:74:fe:4d:cb:4b:d9:5e:09:3a:61:35:c1:60:c6:
         27:c4:8d:c1:9b:a9:b5:6e:ec:47:c8:98:93:17:93:99:bd:39:
         37:28:2b:be:b4:0d:04:9f:3e:6d:23:94:93:0e:7f:76:68:2b:
         f5:d4:09:7d:cd:a6:75:ac:1d:c8:12:ea:e9:0c:de:9a:f5:97:
         07:9e:1a:75:df:85:8a:eb:f2:57:a0:12:40:73:4a:e0:99:d5:
         a0:a7:93:8a:45:ca:9c:17:16:48:0d:2c:ea:30:fc:f0:99:27:
         b3:cc:f0:c4:07:ea:2b:6e:15:6a:f4:02:47:f6:9f:3f:03:b7:
         bf:6f:03:96:5a:50:68:98:9d:05:8c:b3:9f:35:37:38:b1:31:
         d4:4c:b1:f5:49:44:33:db:ef:94:a6:0a:40:a7:2e:e4:c2:91:
         8e:ae:8c:bd:ce:b2:40:89:0b:70:b9:e0:3b:be:e0:61:07:66:
         67:0e:0d:e9:47:60:b0:fe:7f:98:7c:a5:2b:01:32:2b:04:5b:
         e2:0c:70:c1:1b:e1:34:fb:f0:9b:a9:ea:6f:63:b8:38:a7:3f:
         28:01:06:cb:b3:d6:e2:b6:ec:10:85:a3:28:5f:7a:44:c7:f9:
         31:2d:8e:a1:6d:8f:27:24:3f:dd:64:69:f5:95:c5:6d:3a:95:
         5b:9d:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:27 2026 by rpki-client