Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa
File:                     09534036847011F0A17FCE63C4F9AE02.roa (raw, json)
Hash identifier:          +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=
Subject key identifier:   E2:9D:8B:5E:7A:F4:BC:53:F0:E5:5E:9A:17:4D:D6:A4:03:76:37:EF
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C1D
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:29 +0000
ROA not before:           Tue 02 Dec 2025 18:50:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142622
IP address blocks:        103.244.220.0/24 maxlen: 24
                          103.244.222.0/24 maxlen: 24
                          103.244.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Dec  2 18:50:30 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a489fc-c96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:c9:1e:bc:5c:b9:18:25:9c:9f:11:0b:1d:
                    13:d5:52:c0:61:21:61:7d:1c:a7:ec:6e:e4:a2:c4:
                    c3:99:e6:db:ab:0d:19:29:f1:3a:5d:2b:08:2e:bd:
                    52:38:a1:94:eb:b7:12:d0:a9:27:b9:24:b8:cb:6f:
                    54:1d:76:03:e4:be:a9:de:f4:33:1d:49:84:0b:49:
                    04:45:d4:74:53:e3:17:09:12:17:76:43:c0:87:a4:
                    8f:03:a6:fc:71:37:8e:41:62:ff:54:b4:c3:f1:8e:
                    17:09:cf:05:ed:6f:c1:e6:1d:27:5e:47:91:7e:64:
                    85:2b:fd:3c:d1:88:16:6b:23:4e:7c:ad:42:48:38:
                    69:ac:c8:55:de:0b:56:10:56:14:ea:4a:1f:ea:8f:
                    3c:3b:c0:a2:2f:85:e5:8e:a8:f3:8f:a6:f6:40:e2:
                    c4:78:8e:06:35:60:b7:82:83:15:2b:24:8c:48:39:
                    2b:cc:c3:b9:71:da:ff:9b:37:6a:51:01:39:41:8a:
                    5a:cd:9e:f7:c2:00:64:cc:2d:88:e2:1c:13:fc:6b:
                    bc:69:9d:87:78:7d:67:c8:8f:34:4d:0a:cd:60:9b:
                    7f:cd:35:af:8c:8f:44:8b:cd:23:da:7c:d2:55:82:
                    ec:d4:a5:cf:34:be:fb:80:0f:cb:b1:65:1c:17:c0:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:8B:5E:7A:F4:BC:53:F0:E5:5E:9A:17:4D:D6:A4:03:76:37:EF
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.220.0/24
                  103.244.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:47:de:6c:92:c0:d8:97:32:ad:2f:0a:9d:b7:6b:0f:ce:
         d7:ee:08:4c:bf:af:6b:c2:da:7c:8c:9e:8b:96:be:58:ba:a3:
         8f:fc:3d:29:89:f3:bb:67:61:8e:63:04:ee:28:36:c9:d9:30:
         ae:19:5a:c7:bc:a9:37:95:7f:e6:0b:84:84:3d:b7:9d:c9:8a:
         10:e7:e8:3c:0c:cf:96:09:24:9d:c1:42:15:d5:67:5c:4d:b6:
         9c:68:37:d7:c4:32:ce:d1:cd:57:b4:2b:ce:ab:c1:6f:22:06:
         eb:15:19:0c:eb:6b:ae:fa:6b:ed:e4:4e:e8:45:52:fe:24:19:
         31:73:68:17:2e:97:e7:bf:a3:c9:65:a2:57:f7:cd:eb:08:32:
         f1:4c:a1:eb:14:13:df:40:d6:46:32:23:a7:b5:76:92:03:f0:
         88:4a:32:79:96:25:b2:5f:2d:cd:05:86:9d:cc:c9:d2:96:ff:
         cb:5f:9d:fb:7d:7e:6f:fa:3c:d9:20:39:7a:39:cb:1f:46:fc:
         95:90:d4:02:62:e3:f7:37:6d:85:9e:81:9f:be:bb:5a:f3:52:
         4a:fc:5b:8b:63:77:08:40:fb:1d:b8:ad:88:61:c1:50:22:fa:
         b8:43:87:04:66:0c:c4:a5:8d:24:75:74:87:ac:a1:81:cf:49:
         d9:5f:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:33:28 2026 by rpki-client