Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
File:                     18C1AED0ABD111F0A1D84812C4F9AE02.roa (raw, json)
Hash identifier:          onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=
Subject key identifier:   5B:66:6F:A5:D8:02:83:94:A8:1A:67:E3:10:25:BB:3A:92:61:5C:3A
Certificate issuer:       /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial:       013A
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:14:48 +0000
ROA not before:           Thu 27 Nov 2025 03:21:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.198.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
                          rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
        Validity
            Not Before: Nov 27 03:21:58 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58d48-c6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:df:06:97:73:21:08:b6:65:52:4e:6e:cb:
                    d7:d1:38:1d:7d:ec:0d:82:5f:06:e1:a5:12:b2:af:
                    33:6a:e7:30:2b:a8:1c:35:6b:14:b2:1f:ea:8b:af:
                    c4:d5:ca:04:15:59:e2:bd:9d:20:51:84:0e:32:fc:
                    dc:57:95:46:d6:8d:d6:0b:0e:ac:ed:82:76:b9:08:
                    43:b0:1d:a8:21:be:41:e5:df:ba:ec:5e:f4:af:42:
                    0b:0d:ca:6a:24:85:d9:35:79:bb:d9:21:54:63:40:
                    d3:6e:fc:ef:a6:e9:63:4f:a5:9b:30:8f:32:1e:05:
                    14:b6:fb:f1:37:90:92:97:5a:e8:9b:c2:9b:74:2d:
                    59:59:ba:99:ea:e4:37:f8:f3:c5:f4:af:88:94:5a:
                    99:d5:4d:9f:66:7e:70:d3:d7:a9:66:7c:22:d9:9c:
                    16:2f:2d:37:92:6f:85:72:7d:51:15:88:06:09:55:
                    26:fd:2b:6b:af:f4:fb:de:83:43:23:3e:09:cd:8d:
                    ea:12:29:99:e0:ca:d5:28:a8:49:76:5e:d3:e8:e6:
                    82:77:81:a7:ee:07:63:4b:7e:a6:91:0d:63:d8:e5:
                    ef:65:6a:7a:27:6e:42:0b:9a:3a:34:15:15:57:ec:
                    4b:71:76:e1:c2:fa:0d:59:95:b3:43:8a:c6:c3:46:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:66:6F:A5:D8:02:83:94:A8:1A:67:E3:10:25:BB:3A:92:61:5C:3A
            X509v3 Authority Key Identifier:
                keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:06:dc:39:42:f3:64:fe:90:d2:03:7a:34:a5:9c:8e:e2:ce:
         11:6b:58:f5:a9:bf:78:93:4f:e8:2e:42:fe:8e:e7:2e:6d:18:
         83:2b:8d:ee:a0:aa:91:b7:c1:dc:34:53:06:9d:e3:f4:5d:d7:
         02:c5:82:95:ae:db:f5:41:ea:e3:df:6e:ce:8e:6c:26:5c:f4:
         28:6b:74:bf:ce:80:24:f2:d2:c3:d1:05:fa:11:74:7a:57:b7:
         f8:a8:5b:6a:ee:aa:79:7c:f6:e2:c9:9a:2b:85:87:2f:c1:22:
         58:86:19:b4:53:7a:78:ab:14:96:0f:1c:fe:4a:70:64:e3:e0:
         1a:d3:55:ca:8e:c7:4c:2c:cf:59:cc:e7:20:71:f3:41:c5:e2:
         0b:14:2a:a4:eb:ff:5f:09:fb:38:38:bc:50:0d:c5:28:06:f9:
         14:6c:9a:9e:6a:cd:6a:a6:37:68:ac:55:5f:88:75:9f:2a:35:
         25:dd:06:e6:c6:68:15:87:70:32:cf:a0:26:b8:79:0d:c4:53:
         80:a3:6e:84:62:dc:8b:fc:fa:08:31:2e:42:09:ae:5d:a7:5e:
         17:20:ed:f1:ac:c2:4a:36:7e:de:e3:d7:fb:47:3f:e6:2d:b1:
         1a:0d:a2:9d:1d:67:15:16:e2:a3:9f:fd:15:2a:3f:5d:07:54:
         87:84:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:24:45 2026 by rpki-client