Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa
File:                     F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (raw, json)
Hash identifier:          X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=
Subject key identifier:   63:7C:CF:34:55:CD:FD:48:9A:37:DB:46:77:4C:E2:97:E1:95:3F:00
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D25
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 19:23:26 +0000
ROA not before:           Mon 02 Mar 2026 19:23:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139076
IP address blocks:        43.246.199.0/24 maxlen: 24
                          103.244.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Mar  2 19:23:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5e3ae-17fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:b8:7e:7c:16:b2:35:aa:53:b9:38:78:32:
                    d5:f7:f7:66:a1:63:72:8b:de:2d:1c:be:43:fd:ba:
                    45:8e:82:e4:27:67:9f:af:01:6e:35:a7:d2:5c:62:
                    f3:1d:08:36:47:58:96:25:96:75:e4:d3:ec:d7:94:
                    10:61:b0:26:63:1e:b9:d1:aa:84:ef:df:74:b7:9f:
                    34:20:44:5f:9d:b2:a9:b5:04:fb:b4:af:86:80:ff:
                    b0:7b:62:1d:96:33:48:7f:89:67:b5:d9:cd:79:f6:
                    ed:e2:7e:35:b9:64:76:37:32:a4:1b:99:90:55:d2:
                    98:8c:f7:c7:8a:c9:a7:a6:eb:e4:bf:ff:72:50:32:
                    ac:30:33:37:38:b5:d6:9e:f2:5d:a2:52:ae:f7:b6:
                    99:0c:48:76:90:2a:00:f3:6b:9f:f4:43:f5:4b:6e:
                    9a:41:8e:a9:d3:ec:6d:85:9b:21:76:c5:9d:02:1d:
                    43:1b:b7:c3:b7:f9:cf:b0:41:c4:21:89:57:f6:8f:
                    b1:bf:26:f0:e5:8e:6a:59:c8:b3:fb:7c:80:fb:9b:
                    34:33:71:17:a7:25:da:f5:95:5f:28:9e:3b:24:40:
                    b6:2c:34:30:5c:a8:26:cc:d7:6d:54:96:26:36:af:
                    e8:fa:68:8f:7a:f5:a3:5f:22:4c:2d:2d:46:9d:ac:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7C:CF:34:55:CD:FD:48:9A:37:DB:46:77:4C:E2:97:E1:95:3F:00
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.199.0/24
                  103.244.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0f:17:f4:23:33:e5:91:59:0b:57:1e:69:5d:be:2d:51:dd:
         7d:7d:63:d7:06:58:cc:80:90:7d:d2:90:6b:f7:b3:b8:20:22:
         aa:48:e5:fc:26:47:49:3f:a6:17:a3:07:22:31:d4:b8:52:c5:
         b2:e9:d7:36:ed:26:57:36:66:a2:a8:5a:11:1d:d3:03:8c:a5:
         f0:3d:ef:90:65:1e:73:b3:48:0e:8d:11:87:75:05:fd:20:55:
         d3:c7:e0:97:ad:e5:de:ca:43:2a:1e:50:02:83:0d:58:4c:92:
         a5:8d:f5:09:30:92:0c:a7:e9:21:7e:c2:ed:fa:18:a3:5c:2d:
         22:b8:b0:65:34:c9:85:97:cd:b2:20:c8:a4:ae:c9:93:c7:b5:
         df:66:80:8f:49:ea:29:4f:94:0a:74:6b:a9:fa:ef:06:14:60:
         09:2e:b2:96:85:df:46:51:50:6a:7f:0f:e4:41:ba:16:68:f4:
         a1:9b:2e:aa:7c:64:1f:fc:2b:a2:8f:ab:5f:b6:88:ed:2f:28:
         c7:a0:74:8d:bc:53:18:46:b1:b1:ce:0c:d3:d7:fd:1e:53:2e:
         1c:69:55:f2:c0:b7:ac:67:c5:05:db:16:2e:8c:10:8d:78:8e:
         83:5e:7a:fb:69:34:4a:80:20:7d:cb:e2:69:ef:d9:27:06:3b:
         36:96:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:27:39 2026 by rpki-client