Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa
File:                     EA18D5547D8F11EC8E894A1DC4F9AE02.roa (raw, json)
Hash identifier:          XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=
Subject key identifier:   F0:F0:10:DB:82:08:FA:26:51:88:D9:D0:4D:CC:12:20:8B:58:01:CD
Certificate issuer:       /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial:       0D39
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:39:44 +0000
ROA not before:           Fri 20 Feb 2026 18:15:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58795
IP address blocks:        103.244.246.0/24 maxlen: 24
                          2001:df0:44f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
                          rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
        Validity
            Not Before: Feb 20 18:15:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44fb0-f6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:46:a3:07:36:26:a2:73:f3:b2:3b:06:b2:
                    80:93:49:97:78:34:24:6c:8a:39:f4:ee:2c:9d:5a:
                    de:9b:57:11:dc:0c:86:8f:bc:1f:b7:25:50:4e:98:
                    40:9e:d5:11:ea:0d:30:e0:89:9c:c7:1b:28:69:3b:
                    f3:25:51:c0:03:13:84:cb:26:c8:c1:e2:16:bc:42:
                    85:77:64:02:7c:3e:cc:b7:4e:23:47:55:a5:13:bd:
                    58:66:56:61:c9:98:01:f4:27:18:7a:6c:c0:84:cf:
                    fd:73:e9:ca:4f:02:ee:99:53:e3:e1:66:e6:f4:d6:
                    91:34:e1:6c:94:0d:8d:0a:9c:98:58:15:fd:b0:08:
                    be:f5:f3:86:bc:51:da:62:5a:f3:e0:a3:41:2f:ba:
                    10:d4:af:95:3e:ca:e4:b9:82:1f:6f:5c:e4:62:e9:
                    f7:43:0b:df:05:26:ef:7a:8b:e7:08:0c:9d:ed:e0:
                    b0:f6:6a:78:90:85:f3:d1:03:91:e8:2a:2d:65:98:
                    33:19:1d:8e:8e:21:f2:ec:3f:3c:1e:54:48:59:38:
                    07:39:87:6f:5a:23:a6:6c:24:92:f1:eb:c9:d2:bf:
                    1c:c7:d6:6b:49:b2:89:97:17:de:63:f5:3b:77:12:
                    46:d2:12:42:0b:1e:c8:2c:97:cc:4c:19:d3:5e:a2:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:10:DB:82:08:FA:26:51:88:D9:D0:4D:CC:12:20:8B:58:01:CD
            X509v3 Authority Key Identifier:
                keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.246.0/24
                IPv6:
                  2001:df0:44f::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:3d:cd:89:01:da:60:d5:73:5d:97:a7:82:bc:32:b3:a0:
         54:f4:a6:61:b5:1d:5e:ea:8a:63:ab:c7:49:23:fb:5b:d3:50:
         6d:82:8a:0b:a1:a9:cd:22:39:c5:49:56:43:71:52:65:e9:49:
         8a:63:1a:5f:2b:49:74:9b:eb:27:d1:e3:6a:d9:76:fc:51:55:
         d0:96:58:ca:4e:89:32:4b:5d:e3:c8:1d:dd:c9:73:6f:b3:85:
         65:8a:59:93:fd:8e:38:88:bb:e4:26:d8:f7:9f:49:13:cf:32:
         64:63:d6:7a:26:07:6f:bc:3e:ae:35:de:91:7e:c3:97:e0:0d:
         84:be:40:6e:23:38:95:74:0c:d7:dd:20:25:30:38:d1:0c:5d:
         3a:19:dd:67:4e:61:52:a2:cc:09:3d:f9:f5:dd:a8:5c:be:49:
         fa:fa:30:35:1e:20:ef:07:ca:dc:5e:64:22:d5:f2:7b:75:19:
         ea:b2:f4:f8:4a:cf:dc:28:2d:09:2c:62:83:b8:ff:5e:3d:4a:
         35:bb:31:28:56:38:51:2b:50:51:d1:71:a4:17:d0:87:03:07:
         ba:84:5a:43:e2:0e:59:9a:dc:08:35:58:2b:23:ee:49:77:0a:
         68:f5:7d:34:5c:91:24:26:8f:93:1f:5a:59:57:5a:6a:7a:4c:
         5e:e2:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:42 2026 by rpki-client