Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa
File:                     CA1A46101A5B11EE89B07267C4F9AE02.roa (raw, json)
Hash identifier:          2rNOWeXpsmPPeo00gkw3XFog2FCfRkn+qinn6OJcsSU=
Subject key identifier:   AB:76:9A:BE:0C:87:B5:A9:5D:70:5A:8F:82:E1:F4:0D:94:65:60:9F
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       03D6
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:41 +0000
ROA not before:           Wed 03 Sep 2025 03:20:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     207990
IP address blocks:        103.109.80.0/23 maxlen: 24
                          103.192.206.0/24 maxlen: 24
                          103.194.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Sep  3 03:20:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a481d4-84dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:7f:96:a2:b7:6d:e5:99:e5:59:06:b9:56:
                    90:30:4c:7d:73:bf:17:f8:d1:5f:4a:d7:b6:66:aa:
                    97:dc:be:ac:47:cb:89:df:ec:5f:d9:bc:02:da:8e:
                    a7:30:bd:93:37:2d:7d:37:08:25:01:6c:11:50:53:
                    1f:e7:60:0c:a5:c1:3d:13:f4:73:ab:a1:b6:64:30:
                    52:96:f8:18:29:e7:12:68:d5:21:b6:c2:43:46:e0:
                    4e:6e:a4:65:a9:7a:79:37:be:84:bf:b1:fc:fa:4f:
                    cc:3f:44:b5:f5:d7:fb:67:bc:be:9d:e5:da:77:90:
                    0f:be:cc:c9:61:04:48:b4:62:7a:e8:21:e4:2d:be:
                    91:f3:86:0f:23:ea:5d:a2:1d:73:bb:e3:f6:b8:9d:
                    2d:b0:dd:5d:3a:de:96:2d:b4:b7:e8:83:a5:7d:f7:
                    6f:a2:b0:94:da:0b:30:45:34:2d:af:c5:3f:28:db:
                    c4:04:58:fa:ad:0d:d1:3c:3e:e7:17:a9:56:ec:07:
                    a2:f7:b6:5a:39:1d:16:74:9a:a8:c0:5b:d3:c8:de:
                    61:7d:cc:d7:b4:bd:e4:ad:6d:ce:24:8b:be:8f:40:
                    4f:e4:92:2e:52:d1:36:04:3a:be:66:8f:60:e9:34:
                    7d:4b:d9:ac:76:ac:be:89:24:87:f9:56:3c:53:91:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:9A:BE:0C:87:B5:A9:5D:70:5A:8F:82:E1:F4:0D:94:65:60:9F
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.80.0/23
                  103.192.206.0/24
                  103.194.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:00:61:c4:91:94:29:91:d5:60:a8:55:84:30:68:96:cd:
         eb:b6:48:c4:57:0b:be:95:f9:76:b6:46:8d:81:d7:64:cb:f3:
         e9:6e:62:6e:e2:34:9e:8b:38:72:a5:b8:9f:c0:9a:d1:09:10:
         7a:08:94:fd:9f:62:57:51:d1:d8:b5:90:a3:8c:df:b2:db:21:
         99:90:2e:cd:97:90:44:9e:01:1d:c9:c6:7a:a0:69:57:d9:3d:
         82:dc:41:0b:ca:72:63:9f:81:89:9f:0c:76:57:a8:72:d8:d6:
         6f:f7:91:25:95:3d:58:df:4e:be:4a:07:10:7b:53:57:05:13:
         66:e7:1a:77:38:57:01:fd:6e:02:1d:41:25:ce:fb:a1:c6:48:
         c3:6d:88:e9:41:0e:32:d0:6e:ac:d2:aa:09:22:35:68:80:db:
         3b:b1:74:38:df:39:23:3f:ea:de:8e:62:86:b3:50:31:86:53:
         36:18:24:8c:28:2b:fb:91:55:0b:ec:23:c9:36:e6:e7:dc:3c:
         6f:aa:59:77:82:67:66:f1:0c:c5:91:6e:18:18:dd:d8:f7:83:
         ea:0a:48:f6:d0:5f:81:b7:1b:c4:3f:b4:bd:b9:21:e8:23:24:
         1f:c2:8b:da:73:74:8d:67:0b:e6:69:65:c9:de:99:ab:90:1e:
         c1:23:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:50 2026 by rpki-client