Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa
File:                     14B312EC3AE711EDBF700472C4F9AE02.roa (raw, json)
Hash identifier:          yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=
Subject key identifier:   FD:90:D9:4C:46:0B:4C:81:F7:8B:C9:6D:70:54:07:8E:ED:6B:E0:62
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       02C8
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:29:00 +0000
ROA not before:           Wed 01 Oct 2025 02:28:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.99.4.0/24 maxlen: 24
                          103.99.6.0/24 maxlen: 24
                          103.196.140.0/24 maxlen: 24
                          103.196.141.0/24 maxlen: 24
                          103.196.142.0/24 maxlen: 24
                          103.196.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Oct  1 02:28:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44d2c-79c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:a6:4e:35:0f:64:7d:bd:6a:9f:16:9d:3a:
                    a2:59:ff:61:c9:56:ba:e0:a7:0f:0a:8e:1f:1f:31:
                    eb:69:a0:e4:87:b5:83:38:47:9f:70:6b:b9:54:eb:
                    99:de:5c:13:8c:c4:37:9f:09:d1:af:72:c8:f2:71:
                    a3:6c:dc:38:00:46:97:d8:b5:7b:d2:20:89:41:d3:
                    f6:80:50:e4:d9:8a:cc:69:a3:88:12:30:ca:85:b8:
                    45:48:31:59:42:29:b2:3e:31:d2:7f:0e:83:fa:75:
                    d2:ae:23:05:5f:6a:c7:30:26:32:1c:08:4c:c6:e9:
                    00:72:fc:5a:6a:65:e1:28:14:f1:97:b3:d5:90:ae:
                    2a:9e:d4:fb:77:dc:c0:e9:98:17:31:6c:4e:52:e4:
                    f9:ba:2a:09:cf:5e:14:b5:94:3b:05:48:2b:62:90:
                    c5:a3:d5:7c:9b:23:2c:bd:1f:07:d3:d9:0c:1b:da:
                    17:ae:8e:a2:04:0c:f6:10:a4:a0:54:44:32:f8:16:
                    d5:36:bb:a0:de:d3:9f:5a:27:1e:e1:05:54:02:33:
                    9b:f3:e0:8c:b1:6b:dd:ca:30:e6:91:7e:27:26:1b:
                    78:45:a1:10:a9:ce:44:18:9b:dc:1b:e1:02:ea:8a:
                    51:6b:6c:f0:93:9b:23:5f:71:37:2b:4a:6e:7e:43:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:90:D9:4C:46:0B:4C:81:F7:8B:C9:6D:70:54:07:8E:ED:6B:E0:62
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.4.0/24
                  103.99.6.0/24
                  103.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:67:a1:37:35:80:af:71:7a:02:a3:31:28:1a:4b:52:e1:72:
         cd:29:cf:4c:bc:b1:6b:fc:1a:e1:13:5a:58:ae:69:e8:a3:53:
         22:e0:15:ca:30:f6:be:bb:ea:08:9f:32:84:e0:34:9a:02:df:
         61:ae:5d:54:00:12:1f:33:82:3b:d2:8f:b0:05:d8:6a:18:23:
         8d:7b:0c:10:36:21:98:60:bf:5b:47:c6:9d:c2:36:6e:af:80:
         72:ed:7d:9a:47:f7:88:15:c8:f6:2c:e5:83:6a:67:8c:96:be:
         7f:f4:61:d8:3b:0c:3f:d3:9e:e8:a4:76:3a:e4:a4:e1:f5:c4:
         1f:df:1b:56:fb:ea:e4:cf:00:55:56:89:d2:c8:82:f3:ab:c2:
         4d:33:32:9d:64:55:43:59:d1:97:86:fa:dc:ac:16:45:f4:44:
         84:1d:ec:e9:ec:58:3e:87:81:55:7b:4b:10:4b:6a:04:93:cf:
         ec:6e:91:a3:87:d5:c7:21:b6:af:59:24:bf:05:03:06:9c:20:
         05:28:00:db:f3:bc:fd:ff:99:b2:0f:fe:e4:6c:d2:c0:60:b1:
         57:bb:02:68:47:ab:ce:f4:ba:5d:9b:fe:1e:7a:ee:5f:0f:b5:
         df:d3:21:2a:8c:ba:c3:9b:32:9b:1b:1a:7d:7c:d8:7d:49:f5:
         c8:93:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:52 2026 by rpki-client