Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa
File:                     E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (raw, json)
Hash identifier:          GPaqYcUqr0zbxlmQ0X0FP4TsXC+N0CSQMz7aMm/NDOs=
Subject key identifier:   19:54:EE:A4:1F:10:A2:17:6A:AA:C3:20:80:36:D7:D5:54:A3:3D:BD
Certificate issuer:       /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial:       025D
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:46:55 +0000
ROA not before:           Sun 01 Mar 2026 03:22:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150701
IP address blocks:        103.61.18.0/23 maxlen: 23
                          103.61.18.0/24 maxlen: 24
                          103.61.19.0/24 maxlen: 24
                          2001:df1:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
        Validity
            Not Before: Mar  1 03:22:30 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3eeee-8e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:f5:b0:5e:d3:9c:04:51:eb:58:64:2b:3f:
                    35:e3:82:68:0e:05:79:2d:87:5d:41:c2:35:aa:44:
                    da:75:88:89:e9:6c:1b:60:14:32:b1:fd:0c:be:84:
                    0f:c8:60:49:24:40:e3:40:17:7b:1a:32:ae:05:be:
                    54:14:d6:95:c5:d8:de:20:47:6e:13:4a:6b:ed:8f:
                    2a:81:5a:1e:5a:1a:6a:6a:33:a7:d6:df:fd:ed:4d:
                    60:a0:1d:ac:bc:5f:01:30:3e:33:8d:bb:8c:f3:a7:
                    2c:11:f1:f0:a3:9b:c9:4e:c8:8f:3d:39:40:fb:7c:
                    01:a4:1f:be:90:19:ef:47:bf:23:29:e3:6c:6a:f0:
                    cb:c7:47:85:47:de:06:fe:75:67:78:cc:6c:04:fa:
                    72:43:4e:88:55:06:97:84:8c:df:72:93:18:ce:f7:
                    ca:a7:31:c5:fd:42:d8:5d:3c:0c:dd:ff:61:3d:33:
                    0b:5f:93:1f:eb:70:cb:fa:68:44:06:53:64:c4:b3:
                    ef:86:f6:b6:58:89:41:41:39:bf:57:95:6b:d0:03:
                    5d:a8:54:d0:3c:bb:92:cd:e0:67:fd:bc:3f:fc:0f:
                    29:10:3d:30:21:ad:ea:f8:d4:21:7e:14:26:13:ef:
                    98:4c:63:d9:67:a1:a1:ea:69:78:39:f7:2b:66:80:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:EE:A4:1F:10:A2:17:6A:AA:C3:20:80:36:D7:D5:54:A3:3D:BD
            X509v3 Authority Key Identifier:
                keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.18.0/23
                IPv6:
                  2001:df1:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:24:15:48:e6:03:e1:45:ef:ed:1d:f4:88:a2:09:ed:cf:39:
         14:63:94:ef:1a:44:51:ed:a7:00:0e:42:61:36:7d:ed:8b:b9:
         29:8a:13:c1:d6:a0:6a:6a:1a:ba:87:17:f8:7b:49:8f:75:48:
         59:ca:16:45:19:43:42:61:3b:00:1d:08:dd:e5:27:42:69:ca:
         a6:2c:81:d5:3e:a0:48:31:a7:2e:21:bb:2d:26:64:a3:3e:6c:
         28:03:4a:59:1f:7a:b0:ab:ce:05:34:f6:91:e2:48:e7:c3:b6:
         56:cf:3d:f5:02:a5:e2:94:58:13:ef:29:89:4f:08:47:df:3e:
         fc:4e:14:aa:38:8c:df:7d:f6:b2:d0:9e:6b:2f:50:b5:f5:fc:
         63:76:ce:37:f1:4b:c8:7b:fe:95:81:97:26:85:74:ef:1d:90:
         07:66:d9:8e:19:31:27:b6:93:36:6e:db:dd:27:f4:11:66:80:
         ea:f9:c6:93:85:ab:d9:41:42:d8:06:e2:9d:e4:b5:5e:64:cd:
         c2:0d:ec:70:1b:ae:7f:b8:b4:c3:f4:f0:86:3c:2e:67:0f:a4:
         ee:b8:e4:0c:42:dd:38:ec:e3:63:2e:9c:bc:02:09:e3:14:b6:
         6d:c0:52:67:e8:c9:0a:c3:09:05:6e:3f:87:18:39:de:f3:07:
         8d:9a:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:07 2026 by rpki-client