Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
File:                     E27CA57ECA9111EC9F9A7513C4F9AE02.roa (raw, json)
Hash identifier:          2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=
Subject key identifier:   80:40:92:DF:24:5F:C2:3D:F5:E4:AC:22:9E:E7:2D:2D:7C:D5:9C:D6
Certificate issuer:       /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial:       03B8
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:02:02 +0000
ROA not before:           Wed 17 Dec 2025 00:20:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        103.42.19.0/24 maxlen: 24
                          103.157.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
        Validity
            Not Before: Dec 17 00:20:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a42aba-ca74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:eb:44:f1:66:2b:8c:ad:b3:2f:e9:c7:11:
                    97:85:f9:75:c1:7f:66:27:01:13:67:3d:15:d2:c3:
                    fb:02:cb:4b:34:58:2e:82:d8:e7:f5:1e:b9:6a:f9:
                    c4:78:40:09:24:36:96:27:f2:d8:c6:c1:d0:f4:db:
                    3f:e3:78:20:ad:ab:69:65:c4:1e:05:53:ec:22:69:
                    9e:d3:29:a9:59:81:c1:b9:58:18:3b:4b:49:36:b4:
                    b7:44:b6:da:72:49:c3:c7:1a:58:41:22:9c:2b:32:
                    a0:f4:d0:dd:2c:73:e0:16:6f:6b:00:5b:5f:04:b7:
                    1f:4f:80:e7:cb:2a:05:e1:ef:7b:21:0e:23:bb:f8:
                    e7:d5:9a:73:25:eb:dd:04:c9:a9:a3:5d:28:57:cc:
                    1e:8b:83:68:a1:f0:28:d5:9a:cf:10:29:12:68:65:
                    2d:42:cf:0a:55:94:d9:3b:af:7a:5e:80:4e:3b:94:
                    7c:be:cd:ec:44:f7:a3:71:de:07:79:6f:00:70:96:
                    b7:18:2f:53:50:d1:90:fd:87:f8:b3:7f:c0:af:40:
                    85:8c:7a:30:fb:ab:f5:c3:f7:82:b5:52:b5:5e:23:
                    1b:50:75:03:ff:25:73:99:7e:1b:79:93:a8:64:f8:
                    bd:62:f7:81:a9:6b:27:a2:cf:68:78:d6:8c:58:b5:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:92:DF:24:5F:C2:3D:F5:E4:AC:22:9E:E7:2D:2D:7C:D5:9C:D6
            X509v3 Authority Key Identifier:
                keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.19.0/24
                  103.157.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:33:6a:ad:d7:8a:54:be:60:ad:1e:da:fe:18:65:3f:83:
         10:ab:af:72:8f:b8:f2:40:dd:e8:c8:b8:a0:6a:0f:a9:ab:ac:
         96:fb:7a:f3:c2:f9:e9:b1:8f:01:69:94:72:45:af:90:04:a5:
         25:cb:ee:4c:38:26:ed:26:b6:d9:c5:e3:46:ca:63:69:c1:9d:
         49:e1:da:52:ab:4f:e7:0b:c1:9e:94:84:ff:a3:06:63:97:63:
         48:8b:b7:3a:10:90:2c:f6:09:fb:38:49:cd:c4:e4:15:55:95:
         77:e2:dd:96:9d:b7:07:72:c7:e8:db:d1:5a:2a:9e:45:c1:72:
         8b:db:57:f5:dc:e3:f6:ff:a1:0a:2c:39:9c:20:49:1b:65:43:
         71:fb:08:e1:1b:79:dd:75:0e:51:b6:97:61:c1:7f:f6:e3:f9:
         59:dd:80:eb:9d:67:14:9e:1e:e4:07:0f:92:be:24:51:96:21:
         28:8f:e1:01:f7:42:cb:29:0d:4d:7a:0d:27:cd:14:72:68:88:
         fa:9c:47:1c:8a:a1:01:1a:47:52:1d:fc:f4:89:d7:e1:40:0c:
         bd:2c:da:63:42:4a:51:32:11:c7:71:e1:f9:20:16:29:48:26:
         82:84:cb:aa:e3:42:f7:78:54:9f:a6:12:b6:80:49:f3:9c:6d:
         2d:bd:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:47:52 2026 by rpki-client