Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CD748A00A03111ECADA0802DC4F9AE02.roa
File:                     CD748A00A03111ECADA0802DC4F9AE02.roa (raw, json)
Hash identifier:          ttCc0jUjplMUc+HC0GfYqLzDpLZghiCd7SvCI1G1du0=
Subject key identifier:   9D:AA:1A:3C:3E:BA:6E:18:C1:5B:02:89:4B:6A:7C:55:AC:CF:1D:6D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DE5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CD748A00A03111ECADA0802DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:15:54 +0000
ROA not before:           Thu 28 Aug 2025 14:53:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135926
IP address blocks:        103.100.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24037 (0x5de5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c1a-f38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:9e:dd:71:d3:ca:62:24:dc:f4:22:cd:ae:
                    ec:3c:e5:45:43:fd:71:e4:52:49:89:32:f8:be:49:
                    c3:6e:f3:ab:83:90:a2:6d:a1:11:09:e8:75:1f:f8:
                    7e:63:e1:b2:bd:de:38:66:3d:7d:16:64:61:d7:48:
                    0d:c2:fb:3f:4a:d3:30:84:ed:d9:e4:83:7c:e4:45:
                    aa:5a:74:23:98:3a:24:d6:1d:55:d4:fd:7c:f4:fb:
                    d6:f3:d1:0b:b9:df:51:ba:c8:69:b3:02:cf:54:ae:
                    26:0e:49:a2:0c:78:ab:25:d5:db:46:bc:80:df:e8:
                    99:19:c4:39:1c:87:37:7d:b8:d4:35:c2:8c:d4:0a:
                    b6:61:08:9a:03:e0:0c:d7:08:63:48:a2:14:22:76:
                    b9:0f:6b:18:c9:75:95:31:d4:99:0e:14:db:12:dd:
                    d1:16:ea:1e:81:85:7a:3f:a8:43:08:43:f5:de:c9:
                    49:92:38:25:df:16:7d:e2:e7:5e:a0:d8:e8:35:8e:
                    c6:10:f4:56:6f:77:fe:ad:b7:8e:2e:89:17:ed:e7:
                    f4:21:02:23:4a:0a:f6:c3:8c:73:4d:13:d8:b3:6d:
                    31:9c:ff:65:5e:3a:cb:ca:82:e0:60:21:83:3c:87:
                    09:77:5c:3a:6f:4f:8f:18:31:b8:7c:2a:2d:19:21:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:1A:3C:3E:BA:6E:18:C1:5B:02:89:4B:6A:7C:55:AC:CF:1D:6D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CD748A00A03111ECADA0802DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:06:2b:ee:52:2d:8a:26:a6:6c:bc:b9:1d:5d:4b:c7:2e:
         c5:69:50:eb:6c:47:24:98:4b:11:d9:36:f1:9f:ba:a7:1b:fc:
         b3:61:d4:ff:f6:5c:91:b7:7c:78:a6:df:d6:c8:90:26:e6:db:
         47:b5:bc:c0:ca:82:f3:e4:ce:b9:ee:d8:04:bc:6c:54:f6:b1:
         85:5f:fb:8a:eb:c8:a3:78:29:02:ce:ab:42:ca:82:fe:e2:de:
         4c:e2:15:29:9e:ca:b2:61:94:c8:64:3c:17:33:b3:1d:4d:c4:
         2e:bc:7f:63:fc:37:b5:83:03:2d:46:b6:f8:39:b0:3b:07:a2:
         9f:33:54:2d:38:4a:a0:61:7d:77:95:20:94:2c:a9:85:38:e3:
         87:b2:06:48:02:43:c4:4f:42:d3:21:f5:01:c5:6b:dc:dc:40:
         03:b1:21:db:6e:61:a0:cf:ab:1c:94:5b:89:40:c2:d2:71:a3:
         12:4d:84:c9:11:f8:4b:28:16:4f:e7:88:74:de:b8:0c:9a:11:
         63:a5:3c:39:0a:ec:07:10:a1:45:c7:35:67:40:b0:39:c6:25:
         7d:e2:b5:81:0d:ae:b6:05:09:a5:fd:3d:69:51:af:8c:ea:86:
         bd:a8:b7:0e:8c:5c:88:93:04:b4:7c:1d:b8:b6:a3:9a:c8:2e:
         0a:2b:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:51 2026 by rpki-client