Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa
File:                     C02374609D0E11EF866C8F16C4F9AE02.roa (raw, json)
Hash identifier:          qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=
Subject key identifier:   F6:B3:A1:3F:EF:3B:B2:6C:77:0A:F1:9B:EA:9F:0F:48:4F:41:9E:01
Certificate issuer:       /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial:       0412
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:11:50 +0000
ROA not before:           Tue 19 Aug 2025 01:38:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134529
IP address blocks:        103.35.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
                          rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 00:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
        Validity
            Not Before: Aug 19 01:38:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a8b6-b606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:cd:a6:85:ec:a8:07:d9:f3:6e:0a:d7:94:
                    a0:32:d1:1a:93:45:e5:6e:92:c2:e4:9f:d6:47:c5:
                    a3:be:be:14:b7:e8:df:e7:13:d3:f9:d4:bc:53:c8:
                    8a:00:b4:48:e0:e4:d6:82:4b:7c:69:1f:92:f7:24:
                    99:ed:6b:9e:84:ed:49:ca:29:80:68:a4:31:ac:a7:
                    dd:83:c5:c9:59:1a:b9:71:30:f7:cf:b0:d6:42:f6:
                    5b:34:e5:1c:b0:a2:7e:42:2d:15:98:27:a9:6d:05:
                    b9:8c:4a:54:0b:48:70:8d:18:c6:0f:81:ad:4d:9a:
                    7e:d2:87:bf:f1:5b:e7:20:6b:ad:ee:b1:c2:d4:59:
                    1e:eb:2b:42:88:b3:6d:4d:8c:18:70:79:a3:03:62:
                    92:88:4f:30:72:85:63:9f:f7:c5:d3:04:de:6c:cc:
                    a2:24:a4:21:8f:93:d6:e4:3c:e2:42:83:be:b0:c6:
                    72:34:e3:c7:b3:8a:3c:a4:30:40:1c:e1:fc:cb:31:
                    0f:14:ba:c2:6e:3c:1a:d8:2e:13:f6:8a:a2:ca:cd:
                    08:12:52:ae:5d:cf:72:dc:31:d4:1d:b0:1b:76:e5:
                    31:ab:f3:5c:cd:cc:a5:45:e8:1b:c5:d3:ad:1d:21:
                    5b:8c:98:7e:44:f9:d6:fc:30:96:15:ba:30:52:8d:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:A1:3F:EF:3B:B2:6C:77:0A:F1:9B:EA:9F:0F:48:4F:41:9E:01
            X509v3 Authority Key Identifier:
                keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:24:b7:1f:70:1a:54:8f:d1:91:8d:f6:78:b7:f9:71:f3:
         db:67:e5:9a:c5:f2:4f:5b:fd:cb:8b:85:bd:c2:b0:50:53:9d:
         64:b8:0f:cb:77:70:93:63:1b:0d:88:c9:69:84:d4:ea:08:00:
         00:c6:9d:49:b2:0f:af:f4:8a:f5:26:c2:43:d7:dd:7f:42:e1:
         b6:c3:e3:da:66:44:4b:88:18:d5:6a:4f:b2:a1:8b:fc:fc:8d:
         38:8e:54:34:1d:02:47:38:df:f1:fb:b5:93:df:59:50:be:40:
         4d:ec:f1:68:a5:72:10:fd:b9:59:f0:b3:88:b6:b5:e9:80:b5:
         68:d8:d9:69:73:14:2a:87:88:91:1b:b7:6c:40:ce:0f:de:65:
         96:d5:20:46:c6:eb:c6:32:85:c7:24:2a:2d:e6:dc:a8:18:87:
         11:be:de:24:61:68:fb:c4:b9:ea:0d:2c:62:f0:04:2a:e6:09:
         8b:a5:d1:dd:98:95:4d:5b:03:9c:a2:40:5d:52:11:8c:d2:b6:
         c2:20:1a:18:73:27:c7:9d:d3:47:80:76:c6:8d:c3:aa:a1:d1:
         5b:67:63:d1:a2:24:b8:85:2d:b5:d8:13:31:b9:07:a3:b7:fe:
         9f:e1:2c:c1:a6:98:0a:89:54:83:be:0c:d2:e7:6e:46:9b:7b:
         d2:3c:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:55 2026 by rpki-client