Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/3E78F3541E2D11EB95754317C4F9AE02.roa
File:                     3E78F3541E2D11EB95754317C4F9AE02.roa (raw, json)
Hash identifier:          SQ6zwcvQ5au49qPHtRFj85d+H63jUBLTmi4VuDL7FV4=
Subject key identifier:   A3:AE:FB:68:D4:1D:1A:2B:57:49:04:23:E0:3F:9D:0D:30:B3:C0:A0
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       080A
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/3E78F3541E2D11EB95754317C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:25:41 +0000
ROA not before:           Mon 28 Jul 2025 22:02:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9268
IP address blocks:        103.139.228.0/24 maxlen: 24
                          103.139.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Jul 28 22:02:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43045-337e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:ae:94:e8:75:49:5b:5e:7a:e6:1d:3d:39:
                    0e:7a:59:8a:71:d7:39:36:3d:da:f1:b0:d1:6a:d7:
                    b3:1d:1d:2b:22:61:3f:72:41:85:59:77:18:ee:0e:
                    29:14:45:1b:d6:8d:7a:93:3a:38:4e:93:a2:6d:81:
                    0e:82:7f:a7:0c:3a:5a:68:8e:f6:f3:42:c0:3a:c2:
                    43:78:76:bb:dd:ee:d1:c0:f1:7b:8d:d1:59:5e:ad:
                    6e:e1:25:29:e2:a0:9c:0f:02:5d:d4:79:fb:cb:3a:
                    f7:2a:d7:20:42:65:fa:ab:2f:f5:97:9c:0d:11:c6:
                    21:ae:54:d7:9f:61:d3:b6:fc:fc:13:b7:6f:43:37:
                    63:2d:b7:b7:34:6c:db:88:42:dd:e6:17:7a:15:1c:
                    88:b8:73:9c:9d:df:c7:c8:9a:8f:c4:1e:84:84:03:
                    7c:91:c0:83:26:1f:66:6e:14:03:bc:08:84:90:ee:
                    12:26:d4:6c:82:46:da:a4:d5:9b:74:6a:62:9f:7c:
                    34:61:5a:14:d6:b5:be:b2:4b:08:76:50:f8:31:00:
                    91:25:f7:0a:cb:13:b7:c4:3f:53:7a:3d:6c:ef:89:
                    cd:20:b0:f2:b0:06:4d:7a:ab:bd:d0:be:3e:4c:97:
                    c5:81:27:b5:6d:db:94:d1:25:82:47:ab:43:60:73:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:FB:68:D4:1D:1A:2B:57:49:04:23:E0:3F:9D:0D:30:B3:C0:A0
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/3E78F3541E2D11EB95754317C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:82:c2:36:26:46:85:41:33:36:01:29:f1:76:24:17:e6:04:
         2e:e8:01:a0:02:b5:1c:18:58:7b:d3:6a:d0:5a:e2:e6:0c:9a:
         68:4d:69:4c:cb:42:65:4b:e9:38:5a:21:de:ee:e2:31:27:0f:
         f5:54:56:48:b3:cb:2d:16:11:a4:fa:97:db:f2:44:11:0a:f1:
         51:06:17:7c:96:0f:56:6e:2b:6d:13:dc:5f:2f:34:db:e7:fc:
         83:a8:6a:5a:01:52:a4:09:6c:09:0d:24:83:91:4f:8b:78:dd:
         5f:72:24:bd:fd:4a:f0:db:86:92:38:d8:50:4d:4c:d8:bc:99:
         98:2a:10:c9:60:bf:6c:d9:4d:30:f6:f2:cd:36:b5:88:bc:1e:
         40:37:1d:34:ff:18:ae:55:4a:5d:12:99:d1:5f:5b:20:dc:5f:
         2e:5d:9f:87:68:bd:05:4a:69:6b:f2:95:fc:fd:f1:99:69:8a:
         d7:2a:15:62:06:e3:92:57:e2:db:b0:39:a8:31:8c:1b:23:99:
         bd:46:16:4b:f0:03:1f:83:3d:cf:e1:13:77:a5:d5:9d:01:45:
         68:42:78:fc:4c:d1:b5:9f:f6:68:b4:af:71:e9:45:b7:b4:50:
         71:a6:ea:2d:63:2d:88:dd:05:ac:0f:31:bf:af:ad:ac:29:85:
         f5:f8:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:15 2026 by rpki-client