Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa
File:                     C598E8DCD0EB11F08228F063C4F9AE02.roa (raw, json)
Hash identifier:          Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=
Subject key identifier:   7C:A6:F8:66:BF:E9:A1:25:C4:C0:8F:A1:7D:A1:0F:BE:95:DF:1A:1D
Certificate issuer:       /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial:       3A
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:03:41 +0000
ROA not before:           Thu 04 Dec 2025 08:32:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149014
IP address blocks:        103.99.23.0/24 maxlen: 24
                          103.108.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
                          rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
        Validity
            Not Before: Dec  4 08:32:30 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3d6bd-c335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:b8:16:45:f6:53:47:f1:43:2d:67:3b:44:
                    53:3f:07:ae:08:c1:04:66:bb:d1:49:d3:4e:bf:e7:
                    e7:ab:ef:5d:aa:66:d0:f4:f5:89:37:33:e6:1a:36:
                    dc:74:61:a2:0e:fd:18:bb:cd:0f:29:b7:07:67:71:
                    6c:a7:c2:0f:c3:b3:36:24:7a:ca:42:b0:8d:fe:10:
                    da:bd:59:6f:bd:57:a2:5e:07:e1:aa:dd:dd:a6:42:
                    04:95:ea:03:a6:84:c5:ef:0f:4c:1a:d5:64:05:ce:
                    18:ef:ea:5f:7c:b1:57:e7:61:c6:ec:20:60:19:6b:
                    98:b4:96:2a:09:93:88:1e:6c:fb:81:95:8e:76:86:
                    78:dd:d3:ff:c5:2b:8b:9b:f1:12:b4:57:bc:f4:9e:
                    11:f7:32:93:75:35:be:8a:8a:0b:ce:88:ea:e4:14:
                    09:fd:48:26:46:ad:8c:8c:22:70:ab:19:40:14:f0:
                    4c:84:2c:27:4a:1b:aa:19:16:3d:11:4a:68:03:36:
                    cf:1e:71:d0:c4:bb:4b:70:fa:3c:b2:7c:c4:a4:4e:
                    69:a1:ff:74:50:6d:65:a5:c1:e1:c6:88:67:13:8d:
                    dd:2c:b3:02:4e:c9:f6:3f:21:00:47:fb:09:da:32:
                    e2:22:c3:92:17:e8:33:93:33:17:c0:1c:00:1f:33:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:F8:66:BF:E9:A1:25:C4:C0:8F:A1:7D:A1:0F:BE:95:DF:1A:1D
            X509v3 Authority Key Identifier:
                keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.23.0/24
                  103.108.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:3f:82:c0:60:5e:78:7b:93:16:82:2e:f0:55:17:d5:73:
         fb:60:89:a7:08:ec:d2:1e:9f:4c:67:d0:0f:10:ef:0e:c1:51:
         aa:ac:f6:c2:a4:25:3c:ea:95:6c:63:30:a2:b9:a4:6b:d7:7a:
         73:fc:be:86:5b:98:46:9c:d3:58:76:f9:03:c3:0e:01:bb:95:
         a5:4f:e1:a0:11:20:57:e5:06:d0:9b:6d:e7:a8:d8:58:65:55:
         f8:35:bd:c7:b4:fe:da:b0:df:1b:52:0f:65:29:2a:91:83:5c:
         5e:87:5a:f5:44:ad:a2:dd:fd:0a:2b:85:d9:2a:db:32:fa:7e:
         20:5f:86:9f:73:4f:ae:26:03:91:45:f0:82:0c:89:52:10:50:
         0e:1b:4d:f6:8d:7b:18:70:fe:db:8b:0f:ee:73:cf:24:9b:55:
         fb:22:01:3f:0f:ae:bc:c9:74:3e:58:22:24:ac:5d:35:f2:b6:
         e3:29:46:d6:d1:54:2a:ed:87:59:02:60:5a:97:70:4f:a5:4c:
         ee:d9:b6:f1:94:3f:3b:d4:f4:e9:78:f7:fb:b6:d9:d6:cd:56:
         51:6f:a5:ce:d4:1c:a3:67:87:ae:91:d5:e5:43:ce:b5:fa:e4:
         16:22:63:20:da:3e:a2:52:72:73:be:9a:77:93:be:2f:7a:30:
         63:33:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:06 2026 by rpki-client