Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
File:                     1489D376FB2611EFBA3F0167C4F9AE02.roa (raw, json)
Hash identifier:          wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=
Subject key identifier:   32:ED:AF:2D:1A:A9:5C:62:CB:DE:25:24:FD:C1:84:E2:C0:DA:71:E0
Certificate issuer:       /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial:       BE
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:00:33 +0000
ROA not before:           Thu 03 Apr 2025 07:35:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135357
IP address blocks:        103.212.228.0/22 maxlen: 22
                          103.212.228.0/24 maxlen: 24
                          103.212.229.0/24 maxlen: 24
                          103.212.230.0/24 maxlen: 24
                          103.212.231.0/24 maxlen: 24
                          160.202.168.0/22 maxlen: 22
                          160.202.168.0/24 maxlen: 24
                          160.202.169.0/24 maxlen: 24
                          160.202.170.0/24 maxlen: 24
                          160.202.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
        Validity
            Not Before: Apr  3 07:35:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e410-68a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:fa:8e:09:b8:02:67:af:b6:23:33:40:bb:
                    f7:18:44:fe:bc:12:ba:f4:45:67:ce:4a:0e:82:93:
                    fe:f9:50:c9:e5:39:dd:7c:02:e6:e1:6e:44:76:36:
                    33:32:e3:29:ec:51:df:26:38:81:22:c5:eb:9b:de:
                    2b:f7:58:b5:fe:b5:5c:43:99:90:6a:ed:b5:7e:4f:
                    07:61:5e:d1:5f:bd:28:0f:ec:59:d9:34:96:a4:70:
                    0d:42:25:29:0c:8e:3a:43:59:9b:39:f2:79:cb:92:
                    e8:f1:7d:bb:0b:b4:75:50:0a:39:40:f7:1a:d8:76:
                    d4:0c:de:37:ae:56:d1:0a:fe:a1:db:41:12:db:e4:
                    04:9e:8a:86:14:fc:84:6c:73:26:24:19:13:74:78:
                    c6:81:2c:a3:e7:ad:94:ab:e6:00:3e:43:00:cc:3b:
                    a1:68:58:a1:2a:d0:63:f6:a2:3a:0b:74:cf:d4:b1:
                    31:2d:76:01:87:e4:d7:02:db:ff:3d:b4:5c:a8:b3:
                    32:f2:ea:85:47:f9:66:5c:07:91:47:62:49:e0:9f:
                    ae:69:ab:df:eb:e7:62:c4:e9:f6:9d:d6:1c:76:58:
                    e7:8c:63:7a:e4:e1:39:ad:dd:81:bc:b2:d1:fa:d5:
                    ed:70:0d:87:4a:f2:35:e1:ff:3e:b6:67:20:92:92:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:AF:2D:1A:A9:5C:62:CB:DE:25:24:FD:C1:84:E2:C0:DA:71:E0
            X509v3 Authority Key Identifier:
                keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.228.0/22
                  160.202.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:0e:6e:cc:85:4a:96:e0:9e:80:2f:fd:ec:01:3c:a3:71:
         e2:05:32:91:56:eb:fb:7b:a2:55:bd:5e:3a:d9:d6:f0:50:77:
         93:7d:e4:a3:c1:d3:64:4a:f2:56:87:ad:1d:c7:ac:5e:17:93:
         6f:f8:77:3b:5f:5f:c4:9b:dc:f2:a5:c8:3d:0b:14:4a:9d:1e:
         b7:dd:3b:68:89:d2:2b:29:dc:36:2d:b7:29:74:e0:f2:c3:d6:
         77:3f:5f:24:61:59:83:b5:1d:3b:81:a7:e5:57:ae:e1:e0:50:
         25:2f:bd:35:85:0d:49:02:e2:5b:77:f6:06:51:fb:bb:14:5d:
         5e:1c:88:c7:89:e7:76:fa:a7:0e:19:44:90:bf:ab:fe:6d:ca:
         a1:4e:c6:ab:e6:35:43:e1:f1:76:6a:cc:eb:b0:e5:91:ba:b9:
         45:24:1d:21:c0:aa:c8:aa:12:57:17:10:6f:31:36:b0:32:8a:
         81:ac:5b:f8:b7:3c:fa:ed:2f:01:a3:37:24:d7:ab:d4:e0:6f:
         46:9d:55:c3:5e:89:83:d5:78:da:5e:be:37:b4:2d:25:e0:88:
         ce:9d:68:d1:ce:5e:e1:2d:78:b0:e4:89:b9:f4:0f:d4:a7:fb:
         14:9e:0f:6c:63:b9:93:6e:f5:e3:27:27:65:f6:c6:1f:f9:56:
         64:10:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:23 2026 by rpki-client