Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa
File:                     360B9954512711ED89B40324C4F9AE02.roa (raw, json)
Hash identifier:          vcVh1wsla7Xl8FUkVPC0Qr7DRHmFmX//UdgUHofhL0o=
Subject key identifier:   11:9A:1D:AE:25:3E:7E:D3:A1:D7:CD:77:06:9F:0C:6B:41:73:D1:E6
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BEB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:26 +0000
ROA not before:           Thu 28 Aug 2025 14:57:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38253
IP address blocks:        103.5.208.0/22 maxlen: 24
                          103.9.208.0/22 maxlen: 24
                          103.17.140.0/23 maxlen: 24
                          103.172.236.0/23 maxlen: 24
                          116.118.68.0/22 maxlen: 24
                          2400:b520::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27627 (0x6beb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61dce-92e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:ba:bc:18:77:2d:b8:ef:ea:3b:54:d7:96:
                    a2:db:e8:7a:54:f1:64:de:9a:4e:ce:42:23:9f:dd:
                    b4:22:ff:f7:4e:c0:79:7c:c9:0e:ae:75:41:ec:17:
                    a0:84:32:e2:65:d7:ec:ce:e4:3b:34:ec:37:0c:dd:
                    71:2f:bd:17:83:56:91:56:a9:d3:d2:71:1d:d3:11:
                    f3:59:d9:31:f0:7f:e1:55:7b:7a:05:c1:07:37:83:
                    07:21:69:a1:fb:31:c6:7c:2e:a7:f1:6d:b3:2c:f3:
                    d5:68:52:2e:e5:2d:5b:60:c8:50:ff:8b:1c:d6:7e:
                    ed:71:9b:b5:48:bb:08:87:27:c3:29:2a:d5:1e:e6:
                    f1:05:09:51:1d:f3:f3:ba:9d:79:8c:84:29:95:f7:
                    f4:c9:62:ff:88:7d:14:fc:bf:14:98:07:49:f3:87:
                    c5:a1:c1:ea:d9:d7:32:79:10:ad:2c:ee:95:b0:05:
                    86:65:db:59:8b:b4:34:82:92:9a:71:c4:a2:33:72:
                    f9:ba:1d:31:83:64:67:e0:88:6b:38:7b:87:35:e7:
                    5e:52:b1:c5:79:ef:07:fe:6e:dd:0a:ef:98:f0:1d:
                    6f:23:fd:7c:49:c1:52:18:ff:e3:56:c1:87:eb:c5:
                    e0:74:e5:8d:df:b6:00:56:b9:8b:0c:63:2f:fd:63:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9A:1D:AE:25:3E:7E:D3:A1:D7:CD:77:06:9F:0C:6B:41:73:D1:E6
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.208.0/22
                  103.9.208.0/22
                  103.17.140.0/23
                  103.172.236.0/23
                  116.118.68.0/22
                IPv6:
                  2400:b520::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:77:2a:d5:47:d5:a9:62:a5:ff:11:a1:0c:c3:78:d6:8a:
         a9:ba:63:d7:3a:1d:69:5c:78:df:60:e4:d8:8d:25:fc:92:65:
         93:9a:b2:05:c1:bf:d9:83:00:d3:25:74:22:26:fa:3c:99:60:
         e2:c9:06:a7:f9:90:17:77:ac:0f:9d:92:53:96:4f:c3:60:c9:
         82:6b:cd:bd:7f:f6:9c:eb:3d:b0:fe:7c:ad:a0:9a:b1:ab:a0:
         3b:39:e3:23:e3:ef:dc:df:48:20:8e:22:d8:3c:ca:33:e3:07:
         17:56:24:ae:96:b2:07:19:2b:de:6e:41:62:5b:d7:10:a3:20:
         29:ed:2b:47:54:23:8c:3b:8d:95:d3:aa:e0:90:6e:f0:23:5b:
         4b:bf:08:1b:be:17:ac:e3:52:c8:48:3b:73:a9:f0:ea:2f:c5:
         02:ec:ec:83:f3:bc:aa:b2:e0:d0:88:d4:ac:36:35:a0:38:9a:
         59:17:e2:e5:9a:6e:2b:cb:40:43:06:e6:ba:93:dc:12:14:86:
         61:0b:4d:fe:b9:c1:a6:fc:7f:88:a2:26:ff:8c:95:03:69:97:
         67:7b:02:af:a3:83:dc:ac:6c:af:ee:93:90:36:bb:3e:33:b3:
         55:cd:aa:0e:80:a5:32:31:62:df:12:fe:52:93:cd:11:8a:61:
         44:fc:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:07 2026 by rpki-client