Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa
File:                     C820C000061E11EFA13A0F4AC4F9AE02.roa (raw, json)
Hash identifier:          IfKXWhz6BtlqXS4ZRTDW0QIaX9aSYbpCsE5E8gvqrc0=
Subject key identifier:   33:62:01:A2:8F:63:37:85:AD:51:3C:79:47:57:73:AE:3A:F9:17:EA
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       0163
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:05:50 +0000
ROA not before:           Fri 13 Feb 2026 04:23:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132386
IP address blocks:        103.162.41.0/24 maxlen: 24
                          2001:df4:d1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: Feb 13 04:23:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41d8e-c342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:14:02:74:8a:78:c6:11:00:23:d1:e5:e4:
                    9a:85:fd:dd:5a:a0:7b:e6:65:b8:f2:03:b4:48:7e:
                    57:c7:9f:73:b5:3e:c5:50:ff:cc:49:a3:a5:82:6c:
                    49:2c:70:70:55:d9:48:86:f0:8a:e1:14:04:ff:c3:
                    f0:60:d5:14:ab:d7:11:ed:4c:0c:26:58:02:96:34:
                    e3:6d:9f:b2:53:3c:0e:ee:f6:fd:bb:5b:c8:47:37:
                    7e:20:b9:28:a0:89:6c:19:ad:e4:1d:a1:69:fa:bf:
                    e2:85:4b:a7:77:ea:50:7a:c9:a7:28:9a:f9:54:34:
                    ba:12:8f:2f:97:ae:29:94:9f:f5:b1:34:cd:4d:28:
                    1c:4c:fb:46:58:7e:7c:e5:29:ca:d7:24:df:3a:3a:
                    2e:ce:3a:da:69:0e:75:2d:bb:e1:54:d7:40:bd:16:
                    fb:f5:fa:d5:6b:66:99:5b:36:84:c0:19:57:2f:48:
                    d0:54:8e:a8:0a:11:25:0a:4b:49:41:dc:e3:4c:21:
                    7f:ff:c7:91:a9:b0:19:9d:db:ff:b4:83:83:a1:4d:
                    3d:06:3d:07:e1:9a:93:d9:73:40:16:f3:d1:a1:a6:
                    8a:fd:3c:4a:8f:f1:d0:c1:69:29:ec:d9:c5:5b:63:
                    f6:b5:fe:93:e0:6e:76:43:58:14:56:a7:ab:73:bd:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:01:A2:8F:63:37:85:AD:51:3C:79:47:57:73:AE:3A:F9:17:EA
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.41.0/24
                IPv6:
                  2001:df4:d1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:92:fc:43:c8:3f:e8:56:eb:40:76:20:f7:e7:21:6d:cc:e9:
         b4:19:11:26:39:86:ca:83:b9:b4:10:41:65:20:c6:9a:21:89:
         bf:7c:02:17:b3:3f:90:84:9e:dc:6e:59:f4:f7:00:39:44:3f:
         55:5c:00:d8:f1:41:45:d4:30:97:0c:a4:30:ae:ac:dd:b2:dd:
         0c:0a:c3:3b:c0:d6:d0:40:ab:7d:e1:a4:46:5d:78:f4:f2:c7:
         58:b9:b8:d4:16:df:02:9e:bc:14:9c:ba:52:c1:ab:f2:48:b8:
         e2:dc:c7:6a:c4:be:b9:c6:b0:b2:13:17:54:24:86:39:c3:fd:
         cf:fb:62:f0:03:34:91:93:47:9a:bd:76:a8:02:b0:92:1a:c0:
         55:68:68:0b:21:cf:88:3f:80:bb:74:b0:4b:25:73:ae:b6:a4:
         ee:a7:c3:31:1f:27:a4:9a:83:35:a4:a6:5c:43:92:72:69:5a:
         e6:1f:e5:eb:a3:79:be:ef:df:19:54:6c:90:36:9d:ce:44:1e:
         34:41:17:4e:a7:9b:ce:93:53:00:9d:36:c8:50:30:89:b7:cb:
         37:5f:7f:29:98:8b:de:37:42:7f:99:b8:0d:a3:45:3f:f2:59:
         ac:a9:02:17:bd:32:92:7f:32:29:4d:79:7d:b6:9c:19:18:36:
         4d:76:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:52 2026 by rpki-client