Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/D3258BFA7AE711EFB4F5E235C4F9AE02.roa
File:                     D3258BFA7AE711EFB4F5E235C4F9AE02.roa (raw, json)
Hash identifier:          pwjjrONYryQZDPYL16AJ0YNOVq8g4YjDqBcgaxhvzro=
Subject key identifier:   0F:64:9A:D1:1C:9D:84:82:34:FA:44:84:6F:B3:44:E1:8B:6F:43:00
Certificate issuer:       /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial:       120E
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/D3258BFA7AE711EFB4F5E235C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 17:21:06 +0000
ROA not before:           Mon 02 Mar 2026 17:21:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13444
IP address blocks:        103.127.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4622 (0x120e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
        Validity
            Not Before: Mar  2 17:21:06 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5c702-5818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:d8:3d:2e:c0:c5:23:c6:74:af:1f:1c:a9:
                    60:6e:5e:91:9b:3a:48:3f:38:7b:2b:ac:a4:9e:ab:
                    05:06:f8:98:14:29:04:1c:e1:35:10:92:35:64:3a:
                    65:27:2b:82:58:1a:9d:13:9b:fc:d7:73:c2:02:96:
                    21:77:35:2a:e0:99:de:d0:33:f1:9c:a1:a6:84:57:
                    c3:ca:e8:77:3e:4c:c5:96:aa:47:d6:d6:6a:b9:39:
                    9a:eb:93:24:db:ee:66:7f:97:eb:76:6e:7a:3d:be:
                    5b:56:da:82:02:41:7e:37:4d:ca:14:8a:66:fc:21:
                    e2:9d:87:64:71:7e:f3:7c:ab:c4:93:bb:a0:7e:f0:
                    a2:bf:fd:8b:3c:b6:b6:df:e1:8b:ed:82:40:0f:ef:
                    91:c7:f9:8d:85:c1:2d:0e:49:12:9c:cb:17:d7:a0:
                    45:93:b4:8a:ad:0d:5e:d1:e2:c2:52:cb:2b:5f:c7:
                    1e:0d:51:b0:42:61:f3:6b:f0:09:db:3d:e6:70:7d:
                    7b:c9:12:85:c2:28:be:a9:92:6a:c1:a0:01:60:d2:
                    59:3e:bd:d0:79:77:b7:52:a0:82:41:e6:5d:65:ca:
                    65:e2:ee:b0:a2:a2:82:69:f9:a1:98:43:e3:40:8a:
                    ac:0a:23:87:e6:33:35:fd:3a:b8:eb:6b:8a:a0:b7:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:9A:D1:1C:9D:84:82:34:FA:44:84:6F:B3:44:E1:8B:6F:43:00
            X509v3 Authority Key Identifier:
                keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/D3258BFA7AE711EFB4F5E235C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:54:5d:48:ad:b9:f8:b3:af:89:86:56:c5:5f:d9:23:17:
         95:91:71:5b:8b:1a:f1:d1:b8:cc:e0:d7:27:86:a8:bf:c7:bb:
         c2:89:44:af:94:be:f8:89:c1:4c:be:ec:f8:bc:fc:b0:5a:b6:
         65:2b:19:74:dd:d7:cb:f7:55:32:d3:1b:0e:67:d2:aa:77:a5:
         90:77:ec:d3:0c:d1:89:44:97:41:0f:b9:79:4a:84:88:9c:e3:
         2f:aa:f9:5b:ad:4c:14:11:23:e9:f8:56:b1:2e:31:cc:ed:39:
         7b:0e:ec:0f:be:9b:c5:58:37:0b:44:d3:f9:ee:7b:8d:33:dc:
         cd:81:cb:c8:bf:54:7a:09:e6:cd:1b:6b:f2:c5:11:42:0a:b9:
         30:1f:53:13:fa:1d:a8:1e:9b:d3:6f:cd:77:cc:a9:0d:d4:5e:
         fb:32:69:ef:61:85:1e:43:ee:ae:0f:17:6d:a2:f0:8f:86:8c:
         16:3a:76:7f:0a:b5:0d:40:e0:16:7c:43:53:90:59:8b:a5:34:
         af:5d:cd:da:99:22:7e:0d:ef:bc:df:f2:d0:4c:45:78:a5:03:
         49:98:e7:35:ae:11:fa:fd:24:38:31:f6:41:c3:5c:5a:cc:cf:
         b4:3d:47:67:3f:a8:d8:b0:16:bf:dd:b9:27:8c:64:02:b7:11:
         82:d0:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:20:58 2026 by rpki-client