Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
File:                     B412DC700EC011EE8C18290AC4F9AE02.roa (raw, json)
Hash identifier:          3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=
Subject key identifier:   48:8A:81:AB:97:7E:62:56:B5:4A:31:12:0E:A4:D0:7B:5E:4C:E5:B6
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       0257
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:07:03 +0000
ROA not before:           Fri 09 Jan 2026 02:21:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     54600
IP address blocks:        103.104.172.0/22 maxlen: 22
                          103.116.20.0/22 maxlen: 22
                          103.124.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 01:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Jan  9 02:21:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45617-90b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:f9:27:eb:0f:ef:3d:e6:32:9a:2d:48:f6:
                    e9:d8:d8:8b:bf:ae:4c:b6:8e:ed:49:51:03:9d:41:
                    21:11:7a:11:90:16:9e:17:2c:95:be:86:11:db:1e:
                    25:53:fc:74:47:20:dc:34:18:f4:8f:df:12:9c:a1:
                    eb:10:8c:84:52:23:ba:16:6a:58:63:b9:3b:6f:08:
                    dd:54:f7:36:7d:8d:bc:c5:91:a0:f1:ae:18:fc:1f:
                    89:83:e7:e8:54:1d:d4:a1:92:eb:a3:c7:61:74:14:
                    38:56:99:2a:ac:ed:96:59:54:1b:c2:39:b2:2d:25:
                    a9:52:99:cf:a0:e1:b7:bf:0e:34:49:0b:1d:fb:2e:
                    db:a4:7d:d6:f1:26:eb:80:f1:c3:5f:42:cc:32:fb:
                    4e:db:ee:c6:84:ae:d5:c4:ae:e7:e1:cf:e4:e6:cc:
                    28:e2:ca:09:c9:91:79:58:34:b2:2c:bb:87:c2:7c:
                    3d:63:c3:3a:0d:6b:e7:3f:83:a7:2c:d0:08:c5:48:
                    cd:84:60:b4:e1:a2:b6:ff:17:c5:6b:25:6e:85:03:
                    cd:10:22:ec:39:17:5e:75:95:5d:8c:03:5a:53:25:
                    b6:34:d7:60:3a:3d:1b:4e:22:08:bf:27:07:aa:7f:
                    c5:00:98:8b:35:94:8b:10:b8:04:9f:57:76:7f:6d:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:81:AB:97:7E:62:56:B5:4A:31:12:0E:A4:D0:7B:5E:4C:E5:B6
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.172.0/22
                  103.116.20.0/22
                  103.124.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:7b:f7:6f:b7:b4:69:13:e4:4f:d1:06:12:f0:34:b9:37:62:
         6e:ce:e8:d6:8f:e0:da:a9:15:ba:3f:4e:9a:0e:2f:b5:9e:b6:
         d3:70:bd:5b:8e:cb:b0:91:ad:86:67:cd:f9:8e:5a:b0:33:59:
         79:a2:74:8a:26:ae:42:d0:be:3d:17:88:62:13:97:b3:60:b2:
         18:3c:a5:4a:d1:ee:ab:f4:7d:bc:16:96:2e:a8:10:41:63:cb:
         13:67:46:75:d8:34:fa:15:da:22:3c:c4:cb:7a:ef:bd:2a:67:
         57:a6:6e:47:61:58:af:ea:2b:f3:08:58:83:93:7a:5f:05:66:
         24:39:fd:65:74:27:1f:77:34:0d:01:6c:42:f1:dc:2f:4a:e7:
         82:79:6a:6b:aa:cc:ef:8b:c9:0b:c2:8f:cd:fb:b5:79:68:a4:
         47:eb:54:0f:64:0c:8b:b2:4c:62:18:7d:55:96:99:ae:09:02:
         a6:85:a6:51:ea:0f:2b:b6:f9:b4:b0:04:67:f2:f4:b9:75:8c:
         dc:84:99:b2:0e:37:60:d7:d8:b3:92:49:59:13:ab:d9:ab:7c:
         68:85:43:7e:fb:11:3a:33:be:c3:83:35:68:e3:ab:be:3b:2a:
         7a:be:16:9d:29:18:de:bb:ea:47:4f:ec:8a:0e:99:68:e4:07:
         ce:3a:0e:18
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz
QTdBRDE3NTcwHhcNMjYwMTA5MDIyMTQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTYxNy05MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulP5J+sP7z3mMpotSPbp2NiLv65Mto7tSVEDnUEhEXoRkBaeFyyVvoYR2x4l
U/x0RyDcNBj0j98SnKHrEIyEUiO6FmpYY7k7bwjdVPc2fY28xZGg8a4Y/B+Jg+fo
VB3UoZLro8dhdBQ4VpkqrO2WWVQbwjmyLSWpUpnPoOG3vw40SQsd+y7bpH3W8Sbr
gPHDX0LMMvtO2+7GhK7VxK7n4c/k5swo4soJyZF5WDSyLLuHwnw9Y8M6DWvnP4On
LNAIxUjNhGC04aK2/xfFayVuhQPNECLsORdedZVdjANaUyW2NNdgOj0bTiIIvycH
qn/FAJiLNZSLELgEn1d2f217+wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEiKgauX
fmJWtUoxEg6k0HteTOW2MB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0
NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUYyQ0QvNEZDQkFDMDBENDRDMTFFRDg2MjcxNTgyQzRGOUFFMDIvQjQxMkRDNzAw
RUMwMTFFRThDMTgyOTBBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCZ2isAwQCZ3QUAwQCZ3zAMA0GCSqGSIb3DQEBCwUAA4IBAQDIe/dv
t7RpE+RP0QYS8DS5N2JuzujWj+DaqRW6P06aDi+1nrbTcL1bjsuwka2GZ835jlqw
M1l5onSKJq5C0L49F4hiE5ezYLIYPKVK0e6r9H28FpYuqBBBY8sTZ0Z12DT6Fdoi
PMTLeu+9KmdXpm5HYViv6ivzCFiDk3pfBWYkOf1ldCcfdzQNAWxC8dwvSueCeWpr
qszvi8kLwo/N+7V5aKRH61QPZAyLskxiGH1VlpmuCQKmhaZR6g8rtvm0sARn8vS5
dYzchJmyDjdg19izkklZE6vZq3xohUN++xE6M77DgzVo46u+Oyp6vhadKRjeu+pH
T+yKDplo5AfOOg4Y
-----END CERTIFICATE-----
Generated at Sun Mar 22 01:43:53 2026 by rpki-client