Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F2F59366E93211F0977E0D6F386F56BC.roa
File:                     F2F59366E93211F0977E0D6F386F56BC.roa (raw, json)
Hash identifier:          mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=
Subject key identifier:   EB:CD:C8:75:89:3B:4F:8A:35:8A:27:40:02:A5:9B:D5:86:2E:37:53
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03F9
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F2F59366E93211F0977E0D6F386F56BC.roa
Signing time:             Sun 01 Mar 2026 18:46:21 +0000
ROA not before:           Sun 04 Jan 2026 06:02:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135380
IP address blocks:        103.243.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jan  4 06:02:28 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4897d-82d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:60:cd:2c:cd:d1:cc:48:ff:e7:38:46:6e:
                    b8:2b:4d:8e:cc:9b:ea:aa:6f:2b:c9:a3:fb:41:8d:
                    5a:cc:15:a7:ed:88:ae:e4:66:9c:25:8d:cb:de:13:
                    29:bb:a5:bc:ec:c9:a3:b6:ed:a4:70:6a:0b:0d:6c:
                    69:73:d9:ac:41:57:a3:74:14:54:d9:98:5f:01:a3:
                    64:d5:f4:eb:a0:3f:c5:a6:8b:f9:09:df:a4:3e:14:
                    fe:d1:fc:d2:68:20:a7:70:cd:29:29:c6:8b:98:84:
                    14:58:70:ac:4b:fb:34:11:82:00:fa:78:0a:a1:49:
                    be:b7:fe:f6:23:6a:bd:2a:41:3c:8e:3a:67:62:23:
                    7a:40:5b:03:19:5a:97:a7:71:68:05:f3:70:33:14:
                    27:ea:f1:3b:93:0c:4c:45:b1:61:65:d2:01:08:e7:
                    59:60:95:a3:ad:ac:91:3c:72:78:58:cd:3e:b4:7c:
                    c0:ce:e1:b3:ba:51:10:12:44:64:38:6f:34:9f:99:
                    91:9b:bb:48:53:f9:04:ad:af:53:00:7e:ae:86:59:
                    db:c5:14:8c:5e:a0:2a:a7:01:65:70:3c:b6:40:0d:
                    e4:d7:50:73:f0:84:25:cb:00:cc:20:36:16:01:3f:
                    97:e3:3a:90:0e:28:4e:30:36:e3:8f:de:e3:2e:60:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:C8:75:89:3B:4F:8A:35:8A:27:40:02:A5:9B:D5:86:2E:37:53
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F2F59366E93211F0977E0D6F386F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:12:e8:5d:3f:c6:27:a0:40:3e:db:7a:88:c4:c0:d6:60:
         36:35:d1:c7:b3:e5:5c:0b:26:1f:06:02:39:0e:2f:a6:b5:2b:
         c5:8c:fa:c3:81:d7:d5:e8:8e:77:6c:7e:56:79:a7:c7:ba:8c:
         f4:f2:eb:21:c4:d1:03:a4:82:17:96:f0:29:d5:e8:4a:bb:84:
         be:17:39:b4:7c:a5:d9:54:3b:91:f2:92:3b:40:cb:b3:83:91:
         00:8a:56:85:e3:fd:37:ab:46:75:b7:73:2e:77:67:bc:ee:5a:
         ac:30:62:ae:88:1a:45:72:41:17:2e:73:44:0f:7a:1c:3b:6f:
         93:fa:b0:d2:92:fb:26:4f:18:e3:03:88:80:8e:ed:f6:87:98:
         02:ae:82:2a:70:08:2c:4e:43:5a:70:a1:46:70:a0:84:aa:c1:
         d7:74:2e:0d:2e:fc:d3:8d:11:3c:0b:e4:64:d3:c9:2d:87:a5:
         d0:a4:ac:55:43:dc:3b:ee:06:2f:8b:86:af:22:3d:af:73:a6:
         19:a8:fe:d0:82:99:7d:8a:41:12:50:35:ee:47:a5:71:43:56:
         ad:7d:13:fa:de:dc:da:12:e9:7d:b3:ac:38:a2:ba:c1:11:d7:
         4c:29:08:e5:33:16:ac:b8:6b:32:ba:e4:26:22:ec:8d:48:28:
         e1:2a:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:26 2026 by rpki-client