Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/8D6378A0747D11EE96578C20C4F9AE02.roa
File:                     8D6378A0747D11EE96578C20C4F9AE02.roa (raw, json)
Hash identifier:          94bY4dqJ+hKXNY5wzgPDkEiWpyyIl5u/grdGvd98z+Y=
Subject key identifier:   8E:EB:17:7E:78:2A:93:91:0F:A1:DF:F6:E0:7A:4B:4B:26:B5:93:44
Certificate issuer:       /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial:       01C3
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/8D6378A0747D11EE96578C20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:24:30 +0000
ROA not before:           Fri 15 Aug 2025 04:41:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139861
IP address blocks:        103.141.44.0/24 maxlen: 24
                          103.141.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
                          rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
        Validity
            Not Before: Aug 15 04:41:48 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a413de-8beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:29:f0:43:c7:10:31:ef:4c:4c:cd:19:a4:
                    7a:d7:cb:f4:d2:97:c4:c7:7b:a5:14:8f:a1:fa:2b:
                    b1:40:19:53:67:61:54:57:8d:6d:01:9b:49:c1:ee:
                    2a:ad:69:c2:3b:75:ea:c5:aa:3d:17:03:3b:c5:d6:
                    a2:63:be:b8:25:7c:cb:55:99:47:99:ce:8f:9e:48:
                    1c:9f:c9:d3:38:96:ef:f3:48:71:47:17:a2:2b:d6:
                    02:c1:bf:bf:2b:51:b2:70:f2:64:24:b6:68:5d:e6:
                    da:87:dc:71:c3:77:47:e6:74:c4:58:04:63:37:61:
                    a2:45:6b:95:12:4c:39:db:d4:9e:55:86:11:eb:bc:
                    f4:aa:70:fb:26:81:e6:ed:1c:1a:cb:54:bd:06:0a:
                    b6:24:60:9f:a1:dd:96:32:fa:44:c2:e8:0e:ff:83:
                    11:ac:d4:47:60:79:7c:bb:b2:8e:a3:40:26:aa:d2:
                    91:96:94:14:a2:9e:8d:dc:b8:25:06:c1:6a:85:e8:
                    68:b9:c3:2b:d8:19:0d:c8:bd:39:16:2a:fc:1d:91:
                    be:68:72:5a:30:1f:1d:7e:2d:18:42:de:8c:6f:d2:
                    91:90:a0:05:fa:e9:c6:2b:a7:ff:58:98:43:d4:06:
                    6c:82:78:8b:87:cf:13:d9:cd:a4:04:5a:3c:ca:85:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:17:7E:78:2A:93:91:0F:A1:DF:F6:E0:7A:4B:4B:26:B5:93:44
            X509v3 Authority Key Identifier:
                keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/8D6378A0747D11EE96578C20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:77:a3:70:f4:3b:96:ab:d3:53:21:e2:db:c6:3e:d9:a3:
         70:f9:6f:31:ea:df:5b:cc:ad:a2:6c:21:dd:2c:50:bc:5d:98:
         bc:78:9b:35:2a:be:09:04:db:77:7d:6e:d6:d0:d3:c0:0d:aa:
         3c:bc:26:41:d6:bc:21:1b:09:b3:6b:dc:fb:d8:44:7b:86:1f:
         aa:71:37:09:1c:33:09:eb:61:8c:18:45:dc:39:99:df:6c:4b:
         c1:b7:fc:4f:db:f4:94:0b:f2:cf:89:55:a8:f4:f7:cb:59:5a:
         e6:37:55:28:b0:8e:34:d3:b9:ad:81:46:1d:a2:39:13:bc:3c:
         ff:0d:65:60:2f:4e:cc:d9:72:c9:32:26:da:3a:66:9d:de:58:
         2c:1b:1d:ea:7b:30:de:c1:47:8b:52:0a:83:50:f5:6e:41:07:
         56:7a:2b:5b:93:3d:bf:ef:f1:f1:3b:3b:fe:55:39:c2:a0:ec:
         ec:c2:53:f3:87:a3:43:43:73:05:57:99:02:7f:f5:e5:9e:97:
         fc:1c:7f:6f:46:ae:4d:fd:69:c7:d5:a7:c5:69:c9:38:82:1f:
         3c:23:4b:47:95:32:14:09:ab:d7:1c:14:a9:11:a7:f0:f4:3a:
         5a:29:2d:b3:0b:5b:ca:e8:ed:27:c9:7e:fc:8d:77:41:ee:fa:
         60:6f:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:55 2026 by rpki-client