Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa
File:                     838096CA3BD311EE84056461C4F9AE02.roa (raw, json)
Hash identifier:          cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=
Subject key identifier:   80:25:7A:B3:44:AB:C9:9A:31:6C:6F:F2:75:DD:13:1D:C5:FF:CB:74
Certificate issuer:       /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Certificate serial:       01FA
Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:08:35 +0000
ROA not before:           Fri 31 Oct 2025 03:47:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134688
IP address blocks:        103.126.80.0/24 maxlen: 24
                          103.243.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
        Validity
            Not Before: Oct 31 03:47:27 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45673-af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b3:2f:6a:86:61:e3:a1:66:fd:88:30:c1:70:
                    67:c1:e0:ef:b4:42:41:3d:48:52:a0:b1:bf:e3:73:
                    f8:5f:7a:8f:b6:00:20:9a:71:5b:34:10:6e:eb:ef:
                    19:0a:42:a0:07:5b:1f:50:cc:a4:d0:ac:60:f2:54:
                    b9:cc:f4:74:a2:e0:af:86:8a:4a:56:8e:9e:df:9f:
                    65:83:91:50:9c:ab:78:f2:ce:75:21:ec:bd:fa:2c:
                    3d:76:7f:03:d1:93:83:4f:8b:b6:b9:d8:4b:fb:52:
                    10:0e:5e:2e:2c:c5:71:f0:14:50:0f:58:81:bb:67:
                    35:34:c0:06:01:d5:a2:23:4d:8b:b3:cd:8b:45:5f:
                    d9:bb:90:71:be:5e:7c:6c:66:ac:98:70:b9:3d:79:
                    6d:d5:68:db:40:26:c9:93:e8:53:02:66:21:10:f2:
                    1c:b4:ce:32:94:9a:7f:8d:7c:d8:01:50:e3:1f:1d:
                    38:e0:9b:1f:1f:4c:4f:9c:c5:3e:22:c8:46:71:cc:
                    2d:25:f0:af:8c:e2:73:a9:bd:46:7b:4b:ee:ee:0a:
                    90:11:c0:64:22:7c:f1:fb:9d:47:a5:90:53:9b:65:
                    d7:cb:56:b3:1a:ff:a6:ff:eb:cf:da:9e:9a:5d:42:
                    ed:c9:7e:9e:47:66:f1:46:8b:d1:51:4a:6d:6d:21:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:7A:B3:44:AB:C9:9A:31:6C:6F:F2:75:DD:13:1D:C5:FF:CB:74
            X509v3 Authority Key Identifier:
                keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.80.0/24
                  103.243.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:10:84:17:21:72:f7:d4:d9:09:d3:d8:79:37:f7:56:4b:19:
         0b:48:13:09:83:53:d7:04:57:cd:53:7d:7b:2b:37:6e:92:5f:
         21:55:85:bf:69:fb:5a:97:10:b8:b8:83:af:72:da:1d:7a:a4:
         a9:b8:91:88:b7:3e:76:b5:59:4d:0a:db:c5:6f:40:90:a0:4b:
         42:fd:1d:86:cd:e0:d2:8e:98:26:9b:fc:76:b1:a6:3b:db:71:
         65:1a:48:8d:27:dd:37:2d:cd:b7:74:26:01:5d:bf:29:28:bb:
         5f:73:78:d4:c4:98:a1:f3:46:9e:b4:e2:93:b9:f4:e5:0e:c9:
         f5:67:ab:87:cb:f8:06:e7:23:30:db:89:b4:64:7a:90:60:d6:
         c4:65:29:0f:95:6b:70:25:68:b4:00:ea:42:45:9d:2f:57:71:
         71:51:9f:76:18:ad:76:f4:c5:4d:91:4c:38:8b:e4:06:85:a3:
         69:90:60:3c:fe:5a:0b:65:10:f2:eb:0a:37:79:db:e8:01:fe:
         0d:62:96:ee:16:eb:5d:1c:49:4f:5d:cb:97:8d:9c:4d:2c:92:
         20:9c:af:fe:78:9b:d9:36:50:93:1f:a9:cd:61:1a:9c:50:c1:
         e9:e7:c1:42:e8:ef:6a:04:be:50:6c:61:e5:37:36:21:c6:cc:
         be:9d:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:20 2026 by rpki-client