Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
File:                     C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier:          w2w/WVRtl1Kh21X+m1EoeEabxFNo/w6sA81dza82xA0=
Subject key identifier:   76:D4:AB:53:BA:60:0B:3E:97:72:AD:EA:CB:71:BE:7B:03:0D:8C:70
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F1B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:21:05 +0000
ROA not before:           Thu 28 Aug 2025 14:57:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63736
IP address blocks:        103.207.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24347 (0x5f1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d50-5460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:9e:53:be:bc:e4:43:ae:4b:98:8c:05:6b:
                    8c:a2:2d:ec:59:18:97:ee:45:6e:9b:c4:5e:55:b0:
                    10:33:2e:b7:35:90:84:0e:df:37:64:2a:ef:9b:6a:
                    22:47:94:fa:28:e9:0b:cc:21:dc:15:75:c5:4c:0e:
                    bc:c0:0e:f2:70:b1:19:4a:ea:1a:64:ce:be:94:17:
                    b4:d0:75:e3:ca:d5:e5:4c:cd:9a:b8:05:01:00:91:
                    31:e5:b9:91:ef:c3:14:01:6c:44:b4:97:ab:ce:30:
                    e7:59:f1:72:3a:47:42:27:6d:d9:b5:73:5c:13:0e:
                    17:e6:7b:9c:4c:22:86:35:7a:c3:60:e6:6b:e9:82:
                    93:62:58:d7:35:25:41:4d:48:ad:23:d8:0f:54:9b:
                    ac:1a:b7:35:75:58:96:48:90:94:0c:1a:31:77:e8:
                    52:9d:4b:fa:b1:c8:1d:e0:2b:3e:30:d9:fe:0c:f7:
                    12:ff:a7:d6:7b:aa:1b:fd:ce:06:c0:78:56:90:4a:
                    34:1e:b7:a2:78:f3:ce:5c:f2:37:16:72:84:ba:80:
                    29:4f:f4:2e:f8:71:06:41:09:3f:6a:38:b0:e2:8f:
                    64:1b:0c:1b:60:00:bd:66:46:e5:fa:26:31:70:7b:
                    77:8e:d8:64:2b:51:cb:29:93:f8:15:7e:de:b1:2e:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:AB:53:BA:60:0B:3E:97:72:AD:EA:CB:71:BE:7B:03:0D:8C:70
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:49:15:79:7d:9f:85:45:93:0c:3c:c6:9c:b7:b1:9f:d7:
         ae:7b:63:fd:18:d8:4d:9f:b1:c9:2b:6a:90:45:86:a6:bb:be:
         c5:ee:7f:9c:a0:35:c2:0a:97:a3:30:36:9f:de:9f:4a:64:e9:
         cb:4b:f2:4a:f3:86:f6:23:ae:00:03:31:df:f2:d5:b7:76:2d:
         50:1d:e2:6c:fb:5d:2e:13:ad:f7:b5:fd:4f:43:b6:51:fc:d8:
         3c:54:84:76:d9:e4:04:1d:aa:d3:88:94:b8:41:c1:87:9d:5f:
         91:74:2c:bd:03:b5:82:69:ec:3d:44:60:ba:2d:1a:54:64:e4:
         fc:5a:d4:cb:26:7e:7d:02:8b:d4:d7:90:eb:0b:00:12:0b:b7:
         57:2c:55:48:7b:61:ce:9f:fd:9a:7d:28:af:66:84:28:23:3f:
         ff:ec:df:28:40:28:f6:18:dd:03:17:f2:46:50:46:e0:f1:21:
         a8:71:e1:36:7c:e3:61:a1:73:a9:89:aa:f6:b9:c2:5a:19:cd:
         be:39:33:e8:a6:67:7b:d0:27:f2:42:6b:fd:ee:38:dd:bc:be:
         2a:44:76:49:12:19:44:46:c6:7a:e6:e3:86:44:9b:32:07:f4:
         ca:5f:e8:72:b1:8c:c6:b6:65:3d:fa:ce:d8:9b:83:49:48:14:
         b1:0d:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:53 2026 by rpki-client