Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa
File:                     3520A4C0DDA711EBA436967CC4F9AE02.roa (raw, json)
Hash identifier:          ZTo5SEv/ESfrPoVSh5u2zaa5o6F1qItIFD1q81cLNus=
Subject key identifier:   F7:8E:4C:35:78:74:51:BD:B9:91:B1:51:36:C9:79:30:46:24:94:E8
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       06F5
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa
Signing time:             Wed 22 Apr 2026 22:28:05 +0000
ROA not before:           Wed 22 Apr 2026 22:28:05 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141731
IP address blocks:        103.162.228.0/23 maxlen: 24
                          2001:df6:180::/48 maxlen: 56
                          2001:df6:180:fffe::/64 maxlen: 64
                          2001:df6:180:ffff::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Apr 22 22:28:05 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e94b75-7f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:9a:8d:b7:0f:b0:02:bf:64:13:d9:f1:06:
                    19:f6:78:70:1f:25:93:5d:82:48:dc:e7:a0:ca:69:
                    69:b3:00:94:7c:0c:84:4c:63:a6:fb:de:f6:af:7a:
                    b4:13:de:f1:79:39:24:b1:49:13:f1:85:59:0a:25:
                    9e:25:9d:4c:a7:27:7a:d3:d4:a4:3f:ab:b9:40:4d:
                    fd:26:4f:2a:02:01:97:3b:f1:26:22:4f:29:55:a4:
                    da:83:b1:3b:ca:19:cc:e8:a8:9e:af:50:07:5e:3f:
                    f4:a1:2d:bf:a2:40:2a:ee:22:54:64:f7:d6:80:6a:
                    77:93:ec:fd:e7:46:1d:db:0d:93:b3:16:0f:eb:a2:
                    1b:72:be:89:d8:91:2e:71:36:18:c9:05:bd:42:f9:
                    f4:01:4f:bd:89:c3:0c:b6:e3:72:16:85:5c:04:c9:
                    fa:2b:5e:c1:00:ad:0f:f6:8e:33:5b:dc:2c:79:49:
                    27:c8:eb:c9:6a:d8:53:02:d3:6b:0d:33:a6:38:03:
                    c2:0e:1e:53:74:b7:5d:f8:8b:d6:30:73:c1:81:80:
                    61:4e:5a:18:77:46:0f:16:5a:d3:2f:26:4e:cd:ba:
                    45:79:98:40:b4:6d:70:e5:88:ec:15:f4:08:73:e2:
                    43:eb:c3:df:09:de:b4:de:7d:55:12:81:88:77:a4:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:4C:35:78:74:51:BD:B9:91:B1:51:36:C9:79:30:46:24:94:E8
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.228.0/23
                IPv6:
                  2001:df6:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:03:f6:c6:97:a6:1f:07:44:37:b3:2e:a3:98:eb:f5:4c:ed:
         c7:49:39:dc:47:85:55:0b:33:1d:d7:1e:86:6d:12:53:45:37:
         91:c3:f6:3b:ea:79:c1:e8:77:96:8f:9b:1e:f5:1d:a8:92:9c:
         96:6d:97:92:d0:8f:41:ed:01:88:8b:26:bb:d4:a3:14:83:77:
         06:c4:8a:f8:52:dd:5c:88:20:d8:53:3b:0e:93:30:6f:18:e0:
         75:f8:b2:12:87:e4:47:5e:4f:d9:5b:3b:c7:b4:f6:3f:a8:22:
         1b:5c:15:42:58:e3:72:47:d8:fa:c6:61:6f:2b:08:92:9d:8c:
         ae:f5:2e:89:b5:d4:0d:4f:16:d6:63:f0:dd:71:34:61:27:26:
         01:2c:17:88:54:19:f4:26:39:56:1f:89:a7:6a:1b:63:40:f6:
         59:11:98:3d:75:1c:a6:51:fb:cb:2f:9e:03:2a:23:74:d5:52:
         1d:be:47:f4:b9:22:a3:4e:5e:71:b9:17:59:89:37:75:bd:46:
         f0:2b:ba:cd:63:b7:fb:a5:5d:aa:77:80:ff:66:25:dd:af:ac:
         cb:bd:1e:3b:5e:d5:90:a7:0c:cc:77:d9:68:12:c6:91:98:b9:
         ae:e0:03:67:24:40:26:9d:a9:b1:58:bf:6d:6b:18:d6:36:bc:
         36:3c:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:07 2026 by rpki-client