Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa
File:                     41C7DA1E037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          rDc5KNR21qJ2rdTXhEQEh0NUIwJvwWvZkNqQHC+OY9w=
Subject key identifier:   4D:F6:40:6E:82:DE:D9:AC:98:A1:26:DB:06:54:B9:AE:BF:5E:CE:12
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E3A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:17:17 +0000
ROA not before:           Thu 28 Aug 2025 14:54:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149089
IP address blocks:        103.82.36.0/22 maxlen: 24
                          103.82.132.0/22 maxlen: 24
                          103.82.192.0/22 maxlen: 24
                          2407:5b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24122 (0x5e3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:31 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c6d-5bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:ca:ac:40:9d:e1:ee:0c:13:d7:60:f7:9c:
                    6c:96:22:b8:7a:b0:60:f1:5c:61:74:98:95:c9:58:
                    3d:05:23:36:a4:c7:4f:28:02:65:ea:da:a7:ed:49:
                    68:f4:7e:4b:79:ee:03:5a:89:14:a6:00:f9:a2:73:
                    aa:07:15:f5:ce:4a:f0:db:75:b6:17:04:3f:bd:3c:
                    d3:33:02:dd:c0:c6:65:f4:03:75:0c:40:38:b9:be:
                    c2:4b:e9:8a:e2:51:64:32:2c:4f:5d:7c:17:66:46:
                    94:45:d4:d5:e8:68:d6:6b:4a:49:01:26:a2:bd:b3:
                    6a:71:24:ad:d8:ff:28:8b:af:d1:04:4c:d8:c9:91:
                    9d:85:f1:cf:ed:54:1b:dd:39:f4:ea:44:a2:a6:aa:
                    65:a3:49:11:94:53:bf:81:66:d3:b4:52:08:50:92:
                    04:93:f6:b3:e9:cd:3f:3f:ec:e8:e5:69:12:d0:a6:
                    38:79:3a:26:f2:b3:9b:e3:22:41:b4:1b:e4:f0:f4:
                    7c:cf:38:d3:3f:ce:3f:88:bd:5d:77:9a:4c:0c:f1:
                    3b:23:c7:26:b0:37:c2:59:da:9d:85:d3:8b:c6:a1:
                    87:46:69:c3:7b:ba:ef:4d:ae:b2:58:fd:13:4e:3e:
                    25:52:33:eb:ac:14:91:41:8e:47:c7:e5:17:21:8d:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:40:6E:82:DE:D9:AC:98:A1:26:DB:06:54:B9:AE:BF:5E:CE:12
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.36.0/22
                  103.82.132.0/22
                  103.82.192.0/22
                IPv6:
                  2407:5b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:e7:be:9d:f8:fd:ac:83:60:22:b1:06:8f:dc:23:2c:99:3c:
         ec:06:ca:2b:d7:bb:9e:72:ec:f0:d6:d0:4a:e5:ba:07:e0:a0:
         eb:10:14:f0:d6:84:90:1e:2e:3e:d0:3c:d0:c1:f0:10:ed:42:
         a5:97:68:9c:e5:ea:cd:0a:2a:9a:2a:fb:49:d8:82:de:cf:df:
         29:ba:fd:36:1c:06:24:f3:7c:53:74:c7:13:7a:e5:7b:75:10:
         52:6c:e5:3b:dc:ae:db:58:9e:87:b7:15:d0:25:73:4f:bf:36:
         2d:99:66:f6:a3:0f:3a:cd:fe:a0:ec:38:67:1c:41:55:d3:6d:
         f8:28:2d:e5:95:f3:b2:d4:f2:25:06:4d:15:be:e8:31:96:05:
         48:99:26:1a:68:f8:0c:ff:7c:a7:ca:61:f2:f7:d7:49:84:f2:
         db:fd:21:62:e1:ba:7b:da:58:59:81:dd:c4:09:02:d4:2e:14:
         e3:c9:cc:59:f9:45:c7:c2:c0:1d:ac:21:a1:96:a2:68:f5:f5:
         ae:63:2d:45:46:6d:ab:a8:05:d7:5d:58:7d:66:88:3e:59:e3:
         00:e8:03:a3:bd:d1:cd:7f:55:44:0f:72:e4:14:93:95:36:2b:
         9f:d3:0e:9c:17:d3:a8:2f:ca:7a:7d:66:d7:8f:46:f9:37:84:
         5d:52:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:58 2026 by rpki-client