Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
File:                     B3394AE0D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier:          fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=
Subject key identifier:   C4:CF:8B:72:2C:98:A5:FF:96:E6:82:E5:A9:73:4E:BB:24:13:23:53
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0637
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:38:15 +0000
ROA not before:           Wed 02 Jul 2025 23:35:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132374
IP address blocks:        103.230.13.0/24 maxlen: 24
                          103.230.14.0/24 maxlen: 24
                          103.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Jul  2 23:35:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a584b6-be45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:10:67:b2:10:a2:cd:fb:d4:55:2d:8c:60:
                    6e:1f:df:cd:3b:e8:24:8e:e4:82:0d:6a:5d:b6:99:
                    a6:50:35:84:c3:f6:48:10:2c:3e:22:b1:9a:cd:8e:
                    f4:6b:81:b7:5f:dc:b8:c2:cf:75:04:7f:73:50:86:
                    21:22:92:58:39:55:e8:81:8a:e4:da:bb:e5:19:b9:
                    cd:46:99:e8:5d:92:82:21:33:22:00:66:ae:31:d5:
                    be:a8:0f:b9:f9:e1:dc:2f:5a:a0:a7:48:35:97:f9:
                    ce:4a:27:9b:de:5d:22:47:e0:0c:08:43:20:60:a2:
                    e3:b0:9d:52:b0:9c:ee:d0:d1:94:40:c3:6a:e3:f0:
                    28:a2:d0:3d:0a:bb:09:2d:52:31:5e:b1:f5:07:46:
                    22:85:47:ad:a9:cd:15:f1:f8:fb:bf:41:70:da:3f:
                    54:f9:1c:94:61:61:7f:b3:3b:f2:0d:a5:4a:bb:7a:
                    15:b3:a9:00:2e:4d:46:cf:af:ab:25:ff:22:a4:5f:
                    a1:da:09:3e:65:ef:7b:ab:72:f0:a6:c9:e3:80:67:
                    8c:2d:b8:7f:f8:f2:5b:d3:1a:78:79:45:f3:5c:46:
                    3f:7a:40:21:80:b0:49:6d:35:d6:59:76:43:b3:9e:
                    b6:87:ae:eb:58:52:92:cd:cf:45:f4:e7:cb:df:84:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:8B:72:2C:98:A5:FF:96:E6:82:E5:A9:73:4E:BB:24:13:23:53
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.13.0-103.230.15.255

    Signature Algorithm: sha256WithRSAEncryption
         19:41:aa:b2:41:20:b7:1b:de:24:9d:bc:22:06:8b:82:c4:21:
         f6:06:0b:76:f3:f5:06:19:df:ec:4e:67:a5:c3:9d:3a:e0:2c:
         be:19:05:56:3c:3f:3e:1a:ca:61:61:d3:f4:09:45:74:80:84:
         6d:50:dc:f2:83:86:02:92:d8:24:6a:f0:79:f3:4f:7c:31:41:
         8d:e0:1c:eb:47:94:e4:4c:d5:2f:52:a9:12:6e:3c:d3:6f:f8:
         33:0e:0c:af:f5:b8:ca:20:b9:ac:21:68:62:67:ce:ba:d2:46:
         c1:17:6b:2e:30:3b:fc:01:1d:85:7a:e2:a5:cb:d3:db:e6:62:
         51:b2:6f:37:c0:a6:8e:25:28:85:d4:fe:83:f0:99:92:b0:2e:
         a9:a3:66:b8:8e:1f:8b:43:b3:bd:0c:05:b4:e6:18:b1:58:79:
         02:8e:39:3d:df:59:41:2b:96:e6:50:18:07:8a:b9:aa:24:ac:
         01:3f:29:4f:ab:9b:ef:f9:38:94:12:47:3f:3c:42:fb:8c:d1:
         7e:0d:76:b4:03:88:0f:1f:74:02:67:82:b5:a0:5a:66:7b:8d:
         8b:a4:90:d7:7b:2a:07:96:b6:31:21:3c:12:c0:3a:2b:87:4f:
         7a:fd:5d:4f:d8:f9:3c:0e:46:b1:30:ab:46:4d:fc:16:a2:e7:
         a4:80:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 20:11:46 2026 by rpki-client