Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
File:                     4F7AD592169311EB89C20F1DC4F9AE02.roa (raw, json)
Hash identifier:          UDUMRu2pdSi4EWa916F5NlabyEI2ZDnijsrefio3S+s=
Subject key identifier:   B4:88:29:B0:F8:32:6E:AA:11:92:0E:FE:29:0E:5B:CC:7D:B0:92:8A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       0823
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 21:26:55 +0000
ROA not before:           Tue 31 Mar 2026 21:26:55 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     136986
IP address blocks:        103.149.39.0/24 maxlen: 24
                          103.162.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Mar 31 21:26:55 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cc3c1f-549f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:18:1b:4a:5c:80:f8:16:c9:a9:81:41:dc:
                    70:47:ff:4a:52:4b:86:99:79:b1:f0:2d:c4:b9:09:
                    11:1a:e4:60:f1:1e:f5:ac:9b:92:c1:ff:0d:ad:85:
                    31:d7:bc:a7:b3:16:ff:d8:3e:f2:bc:aa:57:9f:d3:
                    ad:90:3e:ff:8c:b4:3d:d5:99:ea:64:0b:cb:4f:b3:
                    67:a7:48:3f:e0:a9:c8:34:df:a3:d2:43:c3:35:8b:
                    65:02:32:76:08:6f:aa:d5:a4:21:fa:f2:f2:8e:24:
                    2a:48:e0:91:aa:f2:bc:74:89:ae:97:7e:fa:d3:99:
                    e0:20:33:a1:f0:bd:b1:b6:3c:22:30:4b:60:d9:78:
                    a3:36:30:a0:ed:49:c5:58:e5:9e:f0:4f:f6:36:49:
                    0b:a5:7a:ea:ab:3f:83:cf:29:50:6f:2a:10:07:af:
                    71:92:72:9f:d7:6e:97:8f:11:28:07:e1:4d:3d:79:
                    3a:da:99:06:55:ce:b1:c0:20:32:78:c7:35:10:bd:
                    9b:ff:9a:1d:44:16:50:6e:60:87:93:4d:91:2a:71:
                    d5:5e:9e:ba:2e:54:98:5c:2b:90:8a:97:44:3d:6b:
                    bb:32:f8:e6:5e:12:89:f4:5d:65:68:27:f7:90:c6:
                    bd:bc:81:ca:d0:0a:b3:8c:de:54:a7:2a:a4:52:ec:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:88:29:B0:F8:32:6E:AA:11:92:0E:FE:29:0E:5B:CC:7D:B0:92:8A
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.39.0/24
                  103.162.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:13:1f:2c:32:b2:9f:95:18:a9:1d:b3:e1:26:8e:b6:e7:
         c9:e0:69:7f:f8:5f:ec:0c:62:dc:ae:23:03:9c:4f:bc:5f:49:
         05:62:4a:6c:51:90:f1:14:40:dc:16:43:b5:92:9f:3a:89:bd:
         b2:5b:67:6e:ef:3f:18:56:12:fc:b0:0e:7e:42:f4:47:f0:fa:
         7b:c3:93:d6:e8:44:63:22:79:8f:a1:01:c6:c9:27:6f:77:69:
         a8:05:a3:16:0d:b4:5d:5b:ea:c7:b6:26:c1:11:6e:a6:e4:25:
         2b:84:ae:23:09:32:92:85:dd:2c:b8:3a:02:d3:05:b0:64:f2:
         c2:b3:54:fb:01:cb:b6:71:a5:e4:fd:7a:ca:5b:dc:ee:4b:8d:
         13:25:19:11:4f:2f:bc:1c:16:e0:9b:bf:57:44:49:17:54:06:
         c9:fc:8a:42:db:a8:c1:2a:08:ed:b9:6e:27:49:05:22:10:fa:
         0d:9b:b1:22:37:f3:21:d2:dc:db:55:0c:31:50:90:3e:ef:95:
         a1:70:18:ff:47:69:ff:33:f2:98:a1:eb:17:c2:a7:44:93:44:
         79:70:79:a7:09:a0:72:56:08:1f:54:e7:d3:2f:97:1b:5d:ee:
         bc:74:09:9d:b7:1f:56:76:80:70:c4:c2:74:ac:20:63:0e:f3:
         6d:73:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:54 2026 by rpki-client