Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
File:                     347B37060B7011F0BED04B49C4F9AE02.roa (raw, json)
Hash identifier:          62MhTGD8BryhtrIVmfu99F1DTp5rNTtmsls9/dP8I0Y=
Subject key identifier:   A0:60:ED:93:9A:98:7B:FB:F5:91:F2:08:E4:61:E9:AE:E8:4B:9B:01
Certificate issuer:       /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial:       AF
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 03:48:58 +0000
ROA not before:           Mon 26 Jan 2026 03:48:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138653
IP address blocks:        103.135.231.0/24 maxlen: 24
                          2001:df5:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
                          rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
        Validity
            Not Before: Jan 26 03:48:58 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6976e42a-6e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2e:b1:1a:0d:79:91:26:89:bb:28:80:0d:db:
                    8e:ff:76:dd:09:47:6d:8c:96:a2:a6:3d:77:d1:47:
                    90:c9:d4:f0:ab:52:90:b5:ab:6f:fd:ff:f5:c0:52:
                    06:e8:40:5c:a5:db:39:d8:46:2e:f9:97:e0:6c:56:
                    7a:bd:77:75:32:20:44:d7:b6:ec:b2:23:04:52:78:
                    c4:fc:9a:24:5b:f6:c1:96:a7:48:67:09:35:c8:94:
                    8e:88:25:ca:96:c2:28:a5:ac:b8:b8:5f:15:ab:af:
                    35:d9:a0:5c:1e:94:e3:70:1b:b0:3f:31:12:8b:d4:
                    29:b9:02:a8:c1:73:78:07:11:09:32:a1:6f:89:cb:
                    78:df:ab:12:90:18:01:ba:8b:8c:74:c1:79:c1:3c:
                    db:0d:84:7f:f5:5f:45:64:02:af:10:64:50:6c:5d:
                    a8:73:fb:32:c8:93:85:6d:47:4b:9c:42:81:a7:14:
                    18:35:1a:78:83:98:80:c7:f0:e2:de:54:d1:8a:65:
                    9b:0b:a3:f0:3b:4a:25:69:b8:07:83:be:1b:36:4d:
                    7e:73:af:c0:4d:42:ea:ed:6c:cb:3a:0a:73:04:a2:
                    9e:b3:54:25:7b:fc:fc:84:05:13:98:c9:95:af:c6:
                    24:7b:a2:50:11:0c:eb:91:88:92:c2:0a:d3:88:88:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:60:ED:93:9A:98:7B:FB:F5:91:F2:08:E4:61:E9:AE:E8:4B:9B:01
            X509v3 Authority Key Identifier:
                keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.231.0/24
                IPv6:
                  2001:df5:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:27:80:54:b8:04:81:8c:d8:37:99:7b:c5:b3:c7:a1:b0:
         87:95:c2:37:40:c3:e9:f4:66:13:be:e9:c3:b5:2a:2d:69:53:
         d7:97:b4:53:55:f4:64:a2:50:ad:19:50:7d:9e:d9:8f:6a:e4:
         6e:95:fb:a2:b5:05:d9:20:ca:77:a1:98:8b:8b:e4:d1:0d:76:
         ca:10:7d:e7:d7:49:1d:98:81:0a:69:35:02:50:77:10:91:b0:
         e4:ef:49:61:1a:b7:3e:ba:ac:70:9e:e9:d1:95:51:60:3b:cf:
         4d:b4:44:41:dd:16:8a:52:7b:88:2c:ae:ac:fb:60:19:f6:5f:
         92:f6:af:81:64:0e:42:d7:6f:d8:63:3c:eb:2e:8e:2f:ca:96:
         fe:a6:4f:06:13:0f:c1:05:c9:58:99:4c:43:d7:29:3e:a0:07:
         99:58:0d:68:60:27:d1:21:aa:39:26:58:61:72:f2:e6:88:26:
         72:9c:e4:c4:0d:f4:bd:ef:99:9d:c2:7f:56:97:af:63:63:f0:
         a9:1f:af:ac:4f:a1:98:fe:8e:22:9e:23:59:d7:ab:5c:99:7e:
         e9:79:78:52:94:5a:d5:5d:90:d1:9e:d6:eb:bd:39:72:aa:78:
         49:d3:3e:d7:8a:f0:f1:72:f5:66:21:ea:8d:6c:c7:a7:a1:f0:
         6d:74:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:40 2026 by rpki-client