Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
File:                     52636904771911F083181320C4F9AE02.roa (raw, json)
Hash identifier:          UAiNELXH70OL86XaWxZjrYCNqtPx4ilCRQebJzTfN3c=
Subject key identifier:   EA:56:F6:81:F4:06:86:6E:7C:71:3C:A7:D4:B6:DA:F0:7C:E8:69:78
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D31
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 19:23:48 +0000
ROA not before:           Mon 02 Mar 2026 19:23:48 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.7.208.0/24 maxlen: 24
                          103.7.211.0/24 maxlen: 24
                          160.20.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 18:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Mar  2 19:23:48 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5e3c4-5268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:f0:dd:49:32:4e:fc:c1:ce:c5:20:6c:a2:
                    50:9e:55:11:d0:40:50:38:98:38:bd:a1:70:34:f5:
                    50:1a:3c:8f:2b:cf:88:06:de:88:7f:c9:e1:bd:64:
                    59:d6:37:14:34:8c:e8:e7:9a:54:49:18:3c:05:a7:
                    c4:bb:6a:ed:d1:80:33:fb:54:d9:0e:fb:49:5c:a7:
                    5f:76:c7:75:d1:61:20:dd:91:c3:06:f3:1f:33:a9:
                    75:9f:24:00:96:cb:67:dc:d5:a9:85:51:68:48:26:
                    0e:ad:af:31:a6:25:5a:32:8e:21:99:b3:8e:ac:4f:
                    bc:ca:e1:ac:99:e8:11:26:cc:50:ae:58:f7:46:c3:
                    3d:2a:8e:11:55:0a:16:07:f3:ea:07:94:6a:d0:66:
                    8b:2c:57:f6:4e:3a:3d:e9:18:b0:30:ae:4a:e8:e7:
                    e6:7e:87:16:cc:d3:c5:7b:f9:1a:d6:21:e6:19:30:
                    0f:97:a5:1e:d0:0a:d8:c4:28:dc:0f:27:f6:0d:d7:
                    17:75:7a:35:a1:c6:98:bc:14:9c:4e:73:3f:af:a2:
                    dc:ff:a6:0c:eb:60:52:ae:26:ae:42:58:a6:ec:7c:
                    a5:80:f4:88:5d:d2:99:35:0c:59:0a:a7:8e:a4:5f:
                    60:4f:75:5d:70:6e:3f:59:4f:c4:49:72:a7:99:b0:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:F6:81:F4:06:86:6E:7C:71:3C:A7:D4:B6:DA:F0:7C:E8:69:78
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.208.0/24
                  103.7.211.0/24
                  160.20.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:99:1f:80:97:82:d3:98:a3:d6:e2:25:e1:c7:d2:4b:ef:
         73:aa:26:d8:9f:ce:16:4c:10:43:39:77:da:3b:ef:ae:ef:54:
         04:95:cc:ae:c5:4a:4b:50:fe:a1:3d:28:70:e3:3e:1e:a2:d9:
         69:d5:46:52:1f:15:79:6e:d0:d2:af:66:1b:5d:0f:61:81:60:
         87:d7:ee:4b:82:17:19:27:ce:ee:a2:98:12:eb:39:0d:f2:6d:
         84:ae:7f:ca:ef:18:d2:1d:61:08:6e:96:22:09:70:f7:89:b3:
         de:4a:5b:c8:06:4a:c6:3c:f6:13:c8:e5:21:09:c2:13:ae:d6:
         4d:7a:4b:da:7d:09:9e:eb:3f:1b:de:39:06:45:bb:71:2e:27:
         82:21:41:4b:35:ab:4e:ed:b9:8b:87:3b:9b:28:6b:20:ac:ec:
         bd:22:bd:22:6a:8e:80:f0:91:1d:c9:1a:0b:7c:1f:99:f5:7f:
         6f:52:66:d9:d4:b9:b1:c7:c1:52:b1:63:4a:25:12:ed:27:e7:
         08:07:ce:ff:21:b7:db:f4:84:a4:79:13:4f:b4:b6:f6:c1:a2:
         2d:9d:44:04:c1:a0:9e:1c:f1:79:64:13:34:7c:8e:64:38:82:
         9c:76:e4:ad:b7:2a:6b:e7:0f:cb:69:90:70:ca:18:b9:3f:c3:
         33:1b:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:17 2026 by rpki-client