Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa
File:                     3E8D43BA770611EEB95C4412C4F9AE02.roa (raw, json)
Hash identifier:          +UvQyL7Yi3rgMIlvqkvaOP5/na1Dj/H7OYrTDxzW19M=
Subject key identifier:   03:36:A9:40:8D:A2:BB:F3:14:CD:F7:57:D3:9E:F3:A6:95:D7:CC:F5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E83
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:33 +0000
ROA not before:           Thu 28 Aug 2025 14:55:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150896
IP address blocks:        103.77.182.0/23 maxlen: 23
                          2401:35a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24195 (0x5e83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:38 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cb9-6ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:5b:4d:7f:8a:d6:7e:bf:1d:41:4d:02:70:
                    ac:68:bd:01:ac:e2:c8:93:cb:29:07:17:c9:fd:a5:
                    de:e4:eb:03:4f:38:57:fb:81:f6:18:1d:65:08:4a:
                    25:22:ae:bc:d7:89:46:fe:ed:aa:30:2f:a4:57:70:
                    a4:47:8d:b6:eb:eb:66:ff:73:3d:79:a4:21:e5:0b:
                    08:ce:ab:6b:8f:4e:bd:c6:59:86:97:26:a3:07:6c:
                    4e:c1:96:32:a3:ac:13:4a:12:64:64:58:c2:ee:d7:
                    5d:6d:8f:4c:61:a8:3b:55:16:70:04:a7:cc:b7:4b:
                    c6:53:a0:01:03:58:d4:5e:d8:5c:78:58:2c:76:6f:
                    bb:61:83:0f:6b:0a:35:26:2c:b9:69:fd:e4:2f:39:
                    46:f1:a7:0c:d3:8f:a4:e2:84:21:3d:cd:b4:4a:5e:
                    50:22:a8:59:e9:0d:20:e3:49:90:ae:20:cc:6f:3a:
                    56:e9:79:b6:36:c5:40:21:9a:3b:72:93:4d:66:76:
                    e3:17:2f:ac:39:59:01:9e:77:71:a4:53:92:70:47:
                    1b:fc:55:5a:db:7a:20:9a:85:7d:a9:b6:a7:f7:bf:
                    bf:3b:04:04:da:25:e0:07:0d:f0:ef:8d:1d:2f:93:
                    a3:65:60:48:ef:e5:71:79:0f:8d:ff:7d:a1:86:f1:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:A9:40:8D:A2:BB:F3:14:CD:F7:57:D3:9E:F3:A6:95:D7:CC:F5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3E8D43BA770611EEB95C4412C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.182.0/23
                IPv6:
                  2401:35a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:78:75:0e:25:7c:80:7e:2a:64:c5:df:39:4d:2a:ad:06:
         14:b8:ea:ed:56:25:af:cc:0e:d2:2c:bc:26:e8:82:04:a7:59:
         35:02:89:48:bd:f6:ce:3d:99:3e:43:22:79:6b:34:0e:6a:3e:
         9f:38:07:b8:94:d7:1b:2c:6e:d4:91:9b:79:f4:9f:3e:17:db:
         1b:f2:a8:90:41:3c:fe:ad:a4:3d:a2:5d:a5:fc:4f:6a:e8:60:
         bd:24:90:fc:13:51:86:cf:b0:98:45:46:35:c7:2b:c7:33:7e:
         dc:f1:bb:0f:7e:7a:16:f1:f4:d8:0e:17:11:9b:0e:e8:e1:92:
         9d:d4:78:0c:e6:f1:d6:9d:b0:86:15:c0:fa:e0:34:ae:38:81:
         b9:8f:71:89:31:a6:c1:cb:d0:41:be:48:01:fd:1c:ff:1d:b4:
         7c:d8:b6:29:41:d1:3b:b1:72:af:fa:53:99:0f:4e:c0:1c:e8:
         ed:7c:2f:9f:91:bf:48:fa:3d:d9:4f:3f:93:37:2d:79:71:30:
         89:70:9d:3e:df:c0:a1:82:05:33:65:b2:ee:8c:d9:3a:23:4a:
         01:bf:b1:4a:c3:ab:24:31:41:a4:72:af:87:93:0c:21:2e:b2:
         b4:2c:39:60:c3:b1:90:3c:15:bf:45:22:76:1d:41:0b:a4:07:
         41:b5:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:09 2026 by rpki-client