Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa
File:                     DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa (raw, json)
Hash identifier:          u23FB+guonR/g8Bs9AVntNN8XZjIlu0ZJiya6lu6OcA=
Subject key identifier:   F0:42:9D:61:3E:39:FA:E0:22:20:57:F2:AE:F6:09:C8:B3:A5:CC:4A
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       012F
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:10:08 +0000
ROA not before:           Thu 15 Jan 2026 05:23:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.21.8.0/22 maxlen: 24
                          111.92.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Jan 15 05:23:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a58c30-6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:1d:c4:11:51:6f:08:e9:9e:81:a3:59:5e:
                    14:62:f2:1c:62:5e:63:e3:28:ef:04:d1:e7:c5:db:
                    2e:88:2a:38:ea:0b:43:c6:b6:c3:49:4c:c3:c8:a1:
                    a6:18:29:0a:c7:14:1c:db:e5:5f:3c:e0:e9:8e:7f:
                    5d:6f:52:96:d2:3d:4a:19:95:11:c9:aa:6e:43:be:
                    28:25:21:41:42:74:68:5e:38:3f:6f:87:5a:82:5c:
                    f8:32:3f:9c:4f:b9:e4:08:78:6a:32:09:5b:08:1c:
                    ce:00:64:5c:8c:b8:29:75:91:a3:4c:34:81:36:89:
                    40:87:0f:c3:c9:9f:3a:e5:c2:47:85:67:ab:ce:f3:
                    b8:d4:0d:17:05:f9:39:42:6e:80:b3:1d:48:d5:fe:
                    3f:d0:9d:60:7c:ec:68:9b:c7:87:f3:2e:9a:81:1b:
                    20:61:e4:d1:bc:46:35:4f:ed:59:c9:3d:0c:bf:d0:
                    21:66:aa:97:77:af:36:28:98:5a:23:84:61:fc:cb:
                    77:bb:1e:b1:d1:74:6d:8c:5d:3b:cf:3c:91:20:22:
                    2e:31:87:b1:a0:ad:3f:55:c2:10:29:2d:bf:a0:b2:
                    a0:85:e0:c1:cf:56:ca:86:bb:4f:67:d6:45:56:5a:
                    be:54:73:87:77:02:5c:49:22:03:8c:3a:0c:9b:c7:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:9D:61:3E:39:FA:E0:22:20:57:F2:AE:F6:09:C8:B3:A5:CC:4A
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.8.0/22
                  111.92.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:46:3a:60:c7:da:98:c4:40:5e:87:85:2c:c2:76:41:19:ae:
         7d:f9:43:f9:00:b0:e4:0a:d6:04:42:47:ec:ff:ec:95:54:0a:
         6b:d8:2e:fb:e1:a5:b4:0e:e4:c2:f3:84:fe:7f:ac:31:56:5d:
         27:3b:2e:b8:98:6e:a0:05:19:51:5c:fd:d2:96:87:82:54:22:
         75:ea:4f:1e:c2:5a:1c:90:63:20:ea:62:e4:9e:f2:b7:00:53:
         70:75:a1:62:9d:72:8f:90:cf:df:11:77:86:0f:6c:19:de:1d:
         0c:f6:85:af:0d:6d:b3:91:a7:45:04:1e:51:70:6c:55:77:f8:
         0a:9a:0c:9c:91:3b:b7:44:cc:b8:08:4e:34:42:0b:74:21:b4:
         3c:54:75:67:28:a7:f2:31:79:bf:ef:15:8a:c5:f9:25:c4:6e:
         1f:87:79:7f:aa:d3:70:ea:0c:12:e8:a2:ea:68:11:40:0c:65:
         d4:b5:5b:23:36:da:af:3c:6d:43:06:12:00:9c:4a:fb:bc:11:
         7b:95:76:a6:6a:0d:28:04:26:d3:72:a0:f9:60:73:b4:c8:ae:
         c6:17:4d:8e:65:a2:da:cb:a6:73:40:3d:f9:8c:bf:6a:3b:b1:
         f9:e9:dc:e2:3c:3a:17:49:ac:c1:10:28:d6:92:8a:cd:81:23:
         02:bb:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:25:36 2026 by rpki-client