Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa
File:                     0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (raw, json)
Hash identifier:          Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=
Subject key identifier:   13:BF:75:3C:EE:B1:68:23:E5:E7:B8:21:7C:5E:68:80:05:0D:AA:D8
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C26
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:36 +0000
ROA not before:           Wed 21 Jan 2026 07:34:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        43.239.106.0/23 maxlen: 23
                          103.23.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 18:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3110 (0xc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Jan 21 07:34:04 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48a04-2674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:91:75:57:a5:25:55:6c:25:9b:0d:6c:ea:
                    cb:ee:c9:ac:05:0c:a8:8b:56:7a:30:1b:05:bc:2c:
                    2d:82:77:17:d2:4a:21:0b:7a:95:24:ce:11:52:f6:
                    04:55:32:63:65:54:50:96:08:d8:51:0e:d9:7f:cd:
                    af:b4:d7:99:c8:84:85:f3:ab:57:a9:0f:fc:a4:f2:
                    a0:43:2c:fc:e5:2c:d2:4e:50:05:2b:b9:cd:3e:55:
                    19:a4:ef:8b:3e:63:17:7a:8d:7d:7f:fa:3c:f6:da:
                    03:a1:c5:aa:90:da:0d:ae:8d:7f:c8:65:28:08:6b:
                    dd:44:22:f6:df:9b:76:97:25:54:e0:de:72:27:c3:
                    16:f9:a9:11:01:14:11:a0:b8:45:98:86:cc:fb:8a:
                    ec:05:61:7e:3e:73:fa:9f:32:8b:a0:b6:19:bb:48:
                    44:2e:78:0e:7f:ad:9c:f1:d3:9a:65:70:67:fc:7f:
                    4c:c7:a9:2f:1c:44:7c:82:78:d6:46:1a:13:d8:78:
                    ae:fe:81:99:24:9b:6a:83:92:9f:a6:11:f8:99:56:
                    ce:8c:3b:60:c5:fc:7b:db:1c:44:e6:d0:66:eb:b4:
                    b8:8f:06:f2:cc:56:4c:c3:ed:ea:eb:b7:04:51:5b:
                    9d:d6:b9:cb:0d:5e:12:bf:7a:4d:4e:bc:c0:ad:6a:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:75:3C:EE:B1:68:23:E5:E7:B8:21:7C:5E:68:80:05:0D:AA:D8
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.106.0/23
                  103.23.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:53:c3:54:d5:55:a4:75:b1:9f:b7:22:c3:b8:da:eb:21:
         b2:31:4b:8d:e6:8d:17:a7:89:85:4a:23:e7:46:a4:8f:37:db:
         41:dd:3d:c7:f4:5c:0e:82:68:af:39:07:20:46:85:bd:e0:29:
         61:b8:72:6c:e2:f0:d1:3f:65:05:af:96:a0:52:d8:a4:c9:b6:
         88:39:85:47:99:fa:9d:e0:88:ac:34:75:78:41:46:ac:9f:53:
         60:12:bc:d3:18:73:c9:21:c1:8f:16:b1:63:9e:79:fb:2d:95:
         7f:f0:d3:25:dd:59:09:ed:0e:53:fc:86:0f:6c:81:50:a2:52:
         fc:d8:21:0c:13:39:4d:98:79:65:5b:97:0d:d6:78:81:2e:aa:
         7f:90:e9:cd:71:6d:a4:43:5b:bd:0a:68:ae:a9:19:9e:a0:b5:
         e9:37:af:b7:41:3c:a3:14:51:fc:7f:ea:f9:a3:ff:a3:79:8e:
         64:84:41:f2:22:96:d9:04:b1:9e:6e:af:8e:c6:00:11:00:a9:
         b5:c1:da:11:48:6a:08:d4:13:60:9a:08:40:af:a3:1a:f3:21:
         70:f6:aa:56:be:d8:e2:6f:81:e8:a6:de:70:24:04:b5:7d:25:
         7d:b8:46:c3:90:3c:70:62:9d:6f:0e:e4:ce:c0:b9:da:ee:0c:
         12:e3:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:02:57 2026 by rpki-client