Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa
File:                     624086E2E99611EA930A5B74C4F9AE02.roa (raw, json)
Hash identifier:          yoPYCY1fM21+7AqVRLPZiW+toWsjChvY3tJwVudYO0s=
Subject key identifier:   30:8C:0F:E1:EB:F8:25:87:15:8F:09:C0:1A:E6:73:4A:48:7F:7A:E4
Certificate issuer:       /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial:       0883
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa
Signing time:             Mon 29 Dec 2025 07:34:29 +0000
ROA not before:           Mon 29 Dec 2025 07:34:29 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138005
IP address blocks:        103.30.234.0/24 maxlen: 24
                          103.30.235.0/24 maxlen: 24
                          103.244.56.0/24 maxlen: 24
                          103.244.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
        Validity
            Not Before: Dec 29 07:34:29 2025 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69522f05-f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:d4:1f:c2:14:c9:d3:45:6d:5f:71:0d:c7:
                    b2:f1:6d:1e:96:d0:61:b2:ac:d5:21:b5:72:5e:7e:
                    e9:56:3a:80:8b:ca:65:c7:12:dd:5c:52:e7:28:7f:
                    7f:3a:7f:99:e8:d3:ef:36:a8:50:c0:0b:c1:98:49:
                    43:90:ec:a4:c5:a7:3f:91:b0:fa:18:b3:83:42:54:
                    9e:bf:83:d5:69:00:44:52:5c:96:37:b0:6b:a6:37:
                    c6:3b:e7:8c:27:1b:99:51:c9:81:6c:c8:c2:ad:3b:
                    27:0f:18:72:4a:8c:3f:1a:c7:94:c6:77:41:92:25:
                    e9:6c:d1:6d:2f:22:66:a4:5d:6c:f1:9b:3d:93:52:
                    56:c9:48:78:59:2d:d1:01:e7:d7:1f:89:13:d9:36:
                    47:f7:fb:fb:d8:c9:a4:62:7f:65:75:78:4d:2d:17:
                    31:dc:2f:a4:61:f8:0a:c6:13:08:ff:5b:70:c2:42:
                    26:be:c2:b0:86:8e:71:c4:52:f5:3b:47:ee:b1:bd:
                    e2:89:de:64:af:c5:97:e6:c3:62:84:88:7a:14:5f:
                    1a:cd:20:7e:13:a6:f6:f4:78:8c:68:b4:9d:2f:79:
                    9e:38:d8:80:ec:91:ff:b2:c9:1a:18:78:74:d3:d3:
                    80:68:6c:db:7d:eb:95:ba:ae:2c:18:ee:f6:67:46:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:0F:E1:EB:F8:25:87:15:8F:09:C0:1A:E6:73:4A:48:7F:7A:E4
            X509v3 Authority Key Identifier:
                keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.234.0/23
                  103.244.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:22:e2:87:51:34:1e:c4:df:c3:6a:79:b4:76:b9:26:b5:a5:
         51:f7:79:2a:e2:90:77:d1:bb:70:6c:3e:f2:d2:77:06:71:e5:
         3e:19:09:84:28:30:34:d4:00:b1:49:76:fb:fe:c6:b2:5d:60:
         8f:20:ca:8c:c3:19:fb:c5:df:09:76:a8:fc:93:ba:ed:d9:15:
         16:ed:a6:25:70:ca:e3:fe:a5:6c:d5:bc:fc:cb:f9:d8:40:7c:
         b2:40:f8:64:55:10:ad:76:84:36:eb:0d:67:23:b5:80:37:e7:
         19:61:80:79:69:dc:98:c6:77:5c:b8:0c:99:24:f0:71:00:56:
         04:b0:61:ec:3b:51:ec:6e:c0:b0:28:ed:95:b0:b6:19:1d:25:
         3e:fb:86:fa:17:85:eb:e7:fa:cf:a0:4f:c7:d2:9e:6e:bf:af:
         dd:1c:40:8a:2f:42:31:0b:31:fa:e5:72:cf:e3:9d:4f:4c:52:
         a5:c3:13:1d:72:3d:59:03:8f:f9:5b:61:fd:3d:4c:3c:02:38:
         25:9f:01:38:58:de:46:68:2d:28:e8:eb:76:c4:85:92:67:0e:
         f8:13:cb:d1:1e:7b:53:86:7c:6d:d3:dc:db:ef:ca:0a:c7:66:
         2a:c8:1c:ec:29:bb:30:f5:ee:6b:d2:7c:27:0a:3c:c3:bb:c0:
         d5:b7:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:15 2026 by rpki-client