Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
File:                     37B448241F7811F0AC4FFF82C4F9AE02.roa (raw, json)
Hash identifier:          KXmFtf/aIxVULwWU2AV8/gJ5ecdsYrZWDPGXWWMJwLA=
Subject key identifier:   CC:06:5E:52:6A:15:C0:10:97:A1:3C:A1:D7:92:B1:53:81:09:E9:73
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       D8
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:20:04 +0000
ROA not before:           Thu 15 May 2025 11:59:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142032
IP address blocks:        103.117.136.0/22 maxlen: 24
                          103.121.92.0/22 maxlen: 24
                          103.186.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 06:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: May 15 11:59:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5aaa4-4174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:c5:38:f8:46:35:2e:17:4d:8e:02:85:ad:
                    a1:55:7a:e0:97:4d:c7:aa:1f:da:46:50:12:40:60:
                    c5:d2:8d:e6:ee:f1:3b:0d:78:42:5e:07:25:9d:ce:
                    66:9c:6a:19:94:64:c2:68:03:19:c5:6f:27:cc:d2:
                    58:f9:c9:17:4c:b0:fd:a9:17:d0:2c:45:60:29:99:
                    c3:8d:79:1a:53:2f:c0:10:a6:12:8f:56:6c:ca:0c:
                    37:63:22:ed:00:04:3f:00:79:26:83:ac:21:8a:10:
                    e6:e0:bb:45:2f:e3:3a:b5:f8:ec:e4:c8:c2:4d:76:
                    f9:aa:e2:1f:58:bd:86:38:35:d9:89:a3:ce:a6:7d:
                    b1:c7:0c:f3:fb:26:36:07:36:9a:e0:ba:43:c0:a0:
                    38:85:99:50:74:fb:db:aa:ef:fe:ce:91:65:bb:73:
                    fa:f5:8f:9a:24:90:4b:79:46:70:9c:6f:33:5c:52:
                    44:a2:23:02:a2:0c:4b:db:46:77:b8:09:41:9a:65:
                    55:ab:0b:ce:fa:29:a2:a9:d1:85:2c:2d:73:76:f6:
                    21:ae:ed:b6:df:62:b8:c4:61:16:8b:ef:df:97:e3:
                    0d:3b:4e:db:f2:f5:9b:61:7d:b6:87:d7:ec:09:60:
                    16:3b:be:c8:c3:4b:3f:99:3f:71:96:c5:4f:99:66:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:5E:52:6A:15:C0:10:97:A1:3C:A1:D7:92:B1:53:81:09:E9:73
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/37B448241F7811F0AC4FFF82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.136.0/22
                  103.121.92.0/22
                  103.186.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:08:fa:2b:af:f8:eb:9b:75:8b:ed:9e:0f:bf:f3:a9:5e:f2:
         26:ee:57:86:17:f0:32:0c:2b:a1:94:5c:5c:7f:a5:97:b0:5b:
         54:42:fb:b6:13:60:2c:13:b3:fe:12:6b:5e:f6:5d:48:a1:d8:
         11:14:14:41:57:23:07:82:0b:96:b0:16:50:ab:ac:01:12:19:
         c4:d9:6a:2d:75:47:63:88:96:35:f6:6b:f8:ad:74:85:c6:cf:
         00:27:15:48:5c:f1:15:6c:23:d6:a5:4b:af:ff:ac:67:31:34:
         3a:c9:b3:be:bb:37:e7:8a:d8:b6:98:23:6c:e4:bc:b9:db:dd:
         ab:c1:9e:27:fe:5a:2b:16:a4:84:95:82:5f:9b:3a:a4:11:b8:
         86:f7:17:7f:1c:d8:02:78:47:7d:24:d8:7f:1c:3c:57:f0:ff:
         5e:ee:20:13:23:66:52:79:86:0e:de:18:16:e4:fd:36:35:92:
         7b:13:20:80:ad:0e:cc:d0:49:5b:d5:58:83:41:ef:47:54:61:
         3a:82:ba:a9:7d:17:6e:73:36:13:fc:3a:81:b9:bf:27:7a:10:
         15:d0:78:12:ab:1d:14:34:dd:28:53:85:73:1c:63:24:34:e1:
         e9:6d:74:81:ca:bc:3b:14:62:6f:61:72:e9:ae:1a:e4:0d:35:
         92:b4:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:03:37 2026 by rpki-client