Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa
File:                     3791632A030011EB909C3244C4F9AE02.roa (raw, json)
Hash identifier:          XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=
Subject key identifier:   C8:46:93:AC:B6:B0:03:F1:41:F9:8F:B6:5E:64:0A:4E:0B:7D:52:91
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       084B
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:44:09 +0000
ROA not before:           Wed 31 Dec 2025 21:16:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23838
IP address blocks:        103.254.194.0/23 maxlen: 23
                          103.254.194.0/24 maxlen: 24
                          103.254.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Dec 31 21:16:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45ec9-1009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:ae:f4:e9:0e:22:82:a4:a7:df:f2:0d:00:
                    87:8f:34:f3:81:17:33:db:0c:57:2a:b1:73:63:13:
                    d3:66:5b:bc:7b:09:22:38:9f:c5:1b:1a:41:d7:33:
                    9c:07:ae:16:b1:45:4b:17:8f:78:ad:a2:d5:1c:67:
                    dc:6f:f2:f8:86:94:9a:30:03:20:7a:0f:72:84:77:
                    12:44:d5:ca:49:9b:c5:0e:bb:39:b6:ad:df:98:7b:
                    37:42:2c:57:70:df:18:d0:5b:fa:72:3c:79:7c:33:
                    0b:7e:d5:54:50:6c:3d:eb:7b:b8:af:f7:0a:9d:cd:
                    e2:53:4f:97:f7:2f:15:f7:9c:1d:c8:34:10:af:f5:
                    2c:2d:31:95:bf:8f:aa:e9:d0:0c:14:1d:20:4f:e2:
                    29:3d:d4:13:20:8b:50:b3:34:84:0d:c6:19:0c:48:
                    4c:ba:84:8c:25:d3:e9:4d:1e:96:dd:4b:4a:b3:c6:
                    e0:e3:de:94:14:8a:bf:d6:dc:91:da:a7:8b:52:0f:
                    65:57:e7:04:6e:d1:7c:fc:35:8f:25:80:0a:9d:f6:
                    e7:f5:34:d1:6f:ed:20:4f:53:ff:37:03:b1:b0:42:
                    b7:7b:87:50:90:e1:81:da:6b:f7:9a:27:ff:08:61:
                    f7:54:73:75:01:71:c8:68:83:4d:29:d4:b8:a3:84:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:93:AC:B6:B0:03:F1:41:F9:8F:B6:5E:64:0A:4E:0B:7D:52:91
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:29:bf:90:ea:a8:bb:44:d0:af:d5:7b:95:3d:dd:cf:74:
         e8:fa:c7:c7:0f:00:68:bd:d5:72:81:67:e6:c8:99:a2:42:43:
         b4:36:00:c6:b1:fb:5c:99:7a:2a:1a:7c:b2:f3:ef:58:cd:62:
         77:61:9a:b7:01:61:7e:a7:7a:65:a4:f7:88:13:88:e4:5b:54:
         53:00:ad:03:bd:b3:b3:72:79:5f:3b:2b:04:be:6b:84:b9:89:
         12:f3:42:de:80:ee:ea:4b:e1:fb:69:ee:80:65:37:e0:1d:58:
         13:66:04:65:62:f9:dd:67:0f:36:c7:36:bc:ad:61:6a:bf:69:
         05:9c:4e:a9:e7:ed:5f:a4:4b:e8:da:1e:50:f2:e6:66:54:5f:
         17:c7:d2:f5:ff:e6:21:a6:31:7a:cc:0e:5d:8b:5a:66:e9:33:
         1d:07:0c:0d:f2:fb:e2:1b:26:b9:11:84:4d:76:68:70:dc:53:
         08:d1:38:b5:47:70:40:83:04:6a:55:5d:2e:71:8d:73:14:41:
         40:f1:0a:c9:dc:a9:53:15:34:73:8a:8b:12:f0:c6:69:65:d9:
         29:33:d7:28:66:6d:2a:17:13:d4:c7:27:c0:ef:a8:5c:97:3f:
         61:bf:34:14:74:2f:0f:60:18:69:a6:8a:b1:85:6d:25:4e:b0:
         2b:c6:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:57 2026 by rpki-client