Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
File:                     AECDA1B0448F11EDACC30815C4F9AE02.roa (raw, json)
Hash identifier:          FqhmTiuHqY8gw1t5J7HJvzNjKMgTbM9279JGx7rvFLY=
Subject key identifier:   C4:94:99:89:08:21:39:E2:09:FD:39:42:33:83:D0:DB:CB:3B:C0:FB
Certificate issuer:       /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Certificate serial:       0ED5
Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:21:05 +0000
ROA not before:           Fri 28 Mar 2025 17:59:00 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     35280
IP address blocks:        103.135.56.0/22 maxlen: 24
                          2404:75c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
                          rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3797 (0xed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
        Validity
            Not Before: Mar 28 17:59:00 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40501-282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:84:7b:fa:ad:0f:bc:17:af:5a:2f:ee:35:
                    0c:bb:5f:70:db:70:4a:d0:f7:d8:dc:75:3b:43:fc:
                    6e:6e:cc:c0:2a:c4:a8:b5:8d:7b:47:95:f6:3f:26:
                    37:05:5e:fd:fd:a6:b6:5c:28:75:96:f6:b5:91:4a:
                    2d:b5:8b:b6:72:5a:9e:35:b4:1a:f9:d4:da:49:cf:
                    ad:95:17:5f:e1:ab:ec:ec:29:7e:c3:cb:4b:5c:cd:
                    d1:3a:63:c7:94:98:d6:15:4d:da:b5:4f:92:9d:04:
                    80:22:b1:fe:75:ea:ae:8d:67:73:d6:d0:e7:9b:d5:
                    63:ef:22:2d:16:32:87:43:65:91:29:12:3a:a1:e1:
                    43:37:3f:54:51:fe:cc:fb:b3:4b:cc:02:b7:f4:3c:
                    e6:35:22:99:63:3a:db:4e:f9:d2:82:b3:d5:a4:46:
                    8e:88:f7:e1:6f:83:cd:ea:9a:58:21:be:98:af:dd:
                    f6:20:9b:11:5e:8e:54:ca:02:b5:e3:19:7c:9d:19:
                    64:e5:bf:6c:d1:b4:8f:e4:1e:6c:c7:97:91:58:a6:
                    48:28:5c:ce:98:41:6e:78:06:ef:3f:ae:50:94:62:
                    61:6f:f5:20:85:a6:04:f8:8b:87:dc:1e:e7:c6:ba:
                    f1:12:c2:48:e4:06:e9:de:e1:c4:d3:97:db:ce:4e:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:99:89:08:21:39:E2:09:FD:39:42:33:83:D0:DB:CB:3B:C0:FB
            X509v3 Authority Key Identifier:
                keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.56.0/22
                IPv6:
                  2404:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:e7:3a:67:7e:60:6e:47:2b:3b:cd:15:e8:e6:da:d6:2b:cb:
         2a:c3:8e:4e:91:2c:eb:62:22:71:07:77:2b:5e:35:7e:68:3c:
         a2:8d:ef:db:ff:85:21:07:9e:34:3c:09:62:8e:3d:62:3d:c5:
         cd:7c:e1:70:54:64:aa:b6:bc:23:46:ea:07:ef:bb:b0:38:77:
         6a:ed:aa:c7:e5:87:38:a1:2c:a8:4e:0e:93:a4:e0:93:72:6d:
         1d:45:45:1a:5b:86:18:fd:fa:d1:c6:b7:62:88:0f:08:62:d0:
         95:65:1a:68:f9:49:25:73:f5:5f:ec:2e:84:44:8b:4c:07:93:
         e0:10:c4:cd:01:35:00:4d:ac:e8:fc:7e:d1:dd:36:ea:69:3c:
         da:cb:04:03:aa:af:c1:df:c6:48:6e:48:b3:44:29:70:55:31:
         b3:c2:b9:7c:2d:99:70:e8:d0:71:0c:ff:af:87:1f:e4:3d:01:
         1f:6e:9d:da:0b:00:18:54:3c:84:8f:1d:76:bd:d0:71:3d:eb:
         8d:ad:06:1c:c2:16:de:64:91:f0:5b:b2:b6:29:19:6f:5c:ab:
         35:c8:94:a0:3a:52:38:26:fc:41:91:fb:87:f4:bc:e2:59:57:
         da:54:c6:b5:c6:5a:61:65:4c:6e:cf:0b:96:21:d9:f6:06:2d:
         30:4a:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:48 2026 by rpki-client