Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
File:                     2601F1CEEB7111F0839E97F34E6F56BC.roa (raw, json)
Hash identifier:          o3eQkFa5jtvSJm8EBegehGZ2Pgp62KSE/WHa6T+g7zc=
Subject key identifier:   D7:90:4F:1F:F7:E3:6B:66:CF:F0:01:D6:43:C8:7C:D2:AB:27:6B:6E
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       A3
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
Signing time:             Wed 26 Aug 2026 03:02:05 +0000
ROA not before:           Wed 26 Aug 2026 03:02:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136203
IP address blocks:        103.83.125.0/24 maxlen: 24
                          2001:df7:ea00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: Aug 26 03:02:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8e572d-82a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:99:5c:3b:0e:28:3e:ca:d1:7e:0a:87:9c:
                    de:b9:90:60:6e:c3:cf:d5:5f:17:a4:ba:f1:32:5e:
                    c8:dc:f2:cc:b3:36:aa:44:7f:3d:3f:33:92:9b:3e:
                    ef:57:1e:86:84:24:14:96:1a:2d:54:10:e0:a4:21:
                    35:3d:16:14:a2:c7:7b:5a:9f:b9:ff:17:ec:5e:44:
                    bf:12:a6:3c:7b:22:13:cf:9a:d2:61:71:43:ec:29:
                    9a:6d:70:57:a2:ed:7c:9d:d0:db:3b:ab:67:fc:4f:
                    43:b5:a3:0d:13:a3:f3:6c:27:9e:19:f0:d9:23:2c:
                    75:ce:f0:f9:3f:e4:31:eb:74:50:9c:48:0e:2e:84:
                    65:2a:59:7c:67:28:a7:47:89:7b:f6:b6:fe:bb:e6:
                    20:56:5b:f0:29:95:5d:b7:27:d9:0f:a8:bf:dc:58:
                    c9:eb:7c:40:1b:82:f0:4a:a5:ee:f7:b4:76:79:22:
                    da:43:56:e3:7c:1e:cb:88:f8:ff:6c:aa:6d:b9:a1:
                    ea:2c:d2:3e:3c:e0:38:d1:f6:a2:4f:a3:00:f1:15:
                    ca:e2:a0:c1:82:5f:3b:08:9f:f9:c5:b4:ca:dc:70:
                    b6:7a:76:12:e7:78:ad:f0:93:6b:61:e8:c5:65:02:
                    44:35:36:e0:62:9c:1c:e8:42:d8:9e:d5:e2:ae:f3:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:4F:1F:F7:E3:6B:66:CF:F0:01:D6:43:C8:7C:D2:AB:27:6B:6E
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.125.0/24
                IPv6:
                  2001:df7:ea00::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:38:be:01:f0:3c:e2:83:71:46:53:ee:9d:e5:ce:50:91:32:
         e1:25:d4:62:df:75:c8:c8:f3:85:e5:b3:d6:58:dc:13:e3:da:
         bf:50:89:2c:f9:b8:04:3d:0f:65:dc:4b:86:bb:5f:96:c8:26:
         e3:c0:85:de:a2:54:82:f0:2f:94:83:5b:6c:81:3d:dd:df:91:
         a4:a6:0f:3d:08:bf:b7:76:39:7b:58:ca:1b:c7:b3:dc:98:e1:
         df:82:47:f7:c1:53:05:f6:13:89:7a:56:8e:e0:f0:24:86:78:
         f4:a4:28:c8:8f:34:74:0a:31:b8:e3:2e:cf:10:5f:40:b7:fe:
         20:5a:05:d9:dc:99:00:f4:a5:58:e0:7b:3b:6f:7d:c9:dc:8f:
         e0:a4:0c:9f:ce:a5:7d:17:62:87:ca:3d:56:b0:d7:a6:e4:33:
         62:b0:e1:2e:cc:c1:3c:0e:73:cd:e4:d4:10:9b:ff:89:69:5c:
         9b:4c:4f:b6:0e:89:4e:e0:e5:f3:2b:9c:16:dd:26:87:bf:67:
         4d:3c:9f:d4:0e:24:1f:bf:f5:f2:ca:1f:ad:a0:88:7d:16:04:
         29:40:0d:44:c1:77:e8:17:e8:29:50:58:95:4c:96:d2:ab:c1:
         eb:c4:c6:5f:64:95:cb:00:e7:cf:14:49:dc:fd:b9:c1:48:a6:
         81:cd:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:41 2026 by rpki-client