Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa
File:                     69B0C410EC2411EFBE58C381C4F9AE02.roa (raw, json)
Hash identifier:          jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=
Subject key identifier:   FE:F7:F3:24:A5:F9:C3:F0:4C:CE:81:7C:BB:8E:DA:C7:AD:91:1A:12
Certificate issuer:       /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial:       03DC
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:50:06 +0000
ROA not before:           Fri 28 Nov 2025 23:26:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     36352
IP address blocks:        103.21.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
        Validity
            Not Before: Nov 28 23:26:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4602e-f620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:cd:0a:f6:41:8c:0e:90:a0:ce:d0:21:7f:
                    0a:55:f9:b4:65:b5:ae:3b:e7:e6:26:2a:c3:74:1c:
                    17:61:38:a0:d2:d2:f1:ad:10:41:82:0a:68:d1:50:
                    72:47:94:b1:92:96:71:9d:33:56:09:7b:d6:19:0a:
                    fd:a4:54:6c:50:c6:a2:86:f3:10:b0:de:d8:57:cb:
                    25:fc:5f:42:a2:3b:c6:6e:ab:6d:f3:d9:90:99:ea:
                    04:2e:27:5c:0d:b0:4d:14:25:fc:ba:93:a6:30:f0:
                    ab:bb:3f:28:30:3a:c7:31:b5:c1:a1:6b:94:c8:93:
                    7f:c9:93:c8:70:ac:e5:aa:3e:76:e7:b2:42:dc:1e:
                    76:05:ee:48:ae:00:6f:6e:63:35:1f:c2:41:f6:a8:
                    83:d1:fb:72:cf:da:9a:94:6d:76:37:a0:13:26:61:
                    cd:a1:fb:c0:6f:19:c4:7c:38:fb:d4:00:47:57:bc:
                    2f:a0:8f:9c:1c:08:3a:66:8a:5c:53:2b:64:ac:ed:
                    be:8f:8a:87:c3:a3:aa:05:9d:9c:79:f9:78:91:cf:
                    fc:76:b5:77:be:6d:f2:dc:79:59:b8:62:53:6e:e8:
                    86:c1:62:62:17:59:76:b1:85:13:e9:06:44:cd:e0:
                    5d:28:5c:87:ed:e2:95:ab:61:5d:88:96:3f:c3:b5:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:F3:24:A5:F9:C3:F0:4C:CE:81:7C:BB:8E:DA:C7:AD:91:1A:12
            X509v3 Authority Key Identifier:
                keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:89:1d:26:ae:9d:6d:5a:a2:34:d7:6c:1d:af:0f:f3:03:
         91:45:13:c4:7b:70:71:7c:6c:c2:75:ae:b6:95:02:88:fc:75:
         8a:b5:54:e4:d2:2e:09:cb:f9:1c:52:84:ae:69:b5:38:eb:61:
         17:81:23:32:7b:1a:80:f6:f1:34:2a:ab:6c:34:cf:38:70:b2:
         2d:f8:90:8a:0d:39:f1:e2:4d:a7:4f:95:a4:bc:43:9b:75:df:
         87:e3:57:55:98:4a:84:12:0f:c4:5b:92:84:f4:b6:5d:d4:3a:
         ea:c3:56:27:71:30:b0:3c:0a:0c:09:d3:dc:ca:a7:79:ad:bb:
         33:ea:3b:fa:04:ab:b8:a5:c2:75:66:bd:c4:fc:8d:14:d8:ce:
         1b:0f:7b:64:5b:b4:bc:62:23:8c:1f:45:be:63:c8:45:61:6a:
         bf:6d:d4:84:78:61:22:41:a8:f9:cc:4f:58:3c:93:4d:39:78:
         d3:81:b7:b0:6f:65:88:c2:fc:0e:7c:66:0c:6b:0f:5b:6a:88:
         9e:5f:ec:75:89:ba:49:3a:9e:8d:1a:61:b4:84:fb:e2:2a:bf:
         16:44:60:07:78:5d:18:a1:33:4b:42:79:d4:d5:01:81:37:f4:
         17:d7:0e:40:3d:3f:4d:e8:6f:8f:90:4c:5e:20:b8:fc:77:a8:
         c1:f5:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:30 2026 by rpki-client