Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa
File:                     3CB103648C2511EDB64DB410C4F9AE02.roa (raw, json)
Hash identifier:          iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=
Subject key identifier:   DB:81:7E:96:6F:B9:37:08:1F:D4:4F:2D:EC:86:EB:43:AF:D4:F5:8C
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       025B
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:06:50 +0000
ROA not before:           Sat 07 Feb 2026 02:21:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        103.178.78.0/24 maxlen: 24
                          103.178.79.0/24 maxlen: 24
                          2001:df0:3740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Feb  7 02:21:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a40fba-1c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:09:0d:fe:83:5b:94:28:77:61:c1:b5:4d:
                    4d:97:02:b3:9f:a8:52:5e:35:c9:c0:0d:5d:b0:41:
                    d8:59:20:8d:02:86:66:42:da:02:17:97:07:fd:fd:
                    96:74:0b:df:aa:fa:a2:85:3c:0d:38:46:68:64:93:
                    da:49:ae:7f:8c:6e:0a:70:11:5c:1e:a7:8f:10:4d:
                    7c:ea:ce:b4:29:ab:57:c3:e0:6d:d6:51:93:13:16:
                    fa:b2:c6:d4:9e:72:56:7c:42:ab:de:d3:53:2a:4e:
                    df:3c:46:56:08:0a:62:15:9c:0c:1a:ec:7a:06:a6:
                    5c:6e:5f:26:ce:ee:44:ca:9f:1b:bf:29:a1:c3:41:
                    4d:9e:c5:28:3a:a9:cf:71:e5:31:68:34:50:d4:26:
                    2d:14:e8:f2:96:6a:67:ac:3d:25:6a:81:23:6d:80:
                    d8:02:b9:68:77:10:b0:9f:69:3e:f9:48:b1:7e:48:
                    45:fd:c1:0a:4e:08:a6:1e:ae:20:be:27:89:f5:06:
                    06:65:61:64:02:89:95:52:d0:8c:ec:27:37:ee:d3:
                    be:8a:32:46:90:cd:e2:b7:75:07:2e:80:74:9a:3e:
                    66:3f:d6:61:10:09:27:21:da:d7:73:8e:53:bb:5b:
                    44:32:50:e7:13:57:08:fa:dd:8a:7b:0b:f9:6d:b0:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:7E:96:6F:B9:37:08:1F:D4:4F:2D:EC:86:EB:43:AF:D4:F5:8C
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3CB103648C2511EDB64DB410C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.78.0/23
                IPv6:
                  2001:df0:3740::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:e4:af:b2:b6:8c:eb:8b:af:c7:6b:ca:1c:92:d5:d8:87:
         39:21:e9:fd:8b:a9:01:e0:56:9f:78:73:06:b7:fc:38:2a:b8:
         b4:78:1c:51:49:36:f7:17:c4:ba:91:5e:32:1d:88:31:c6:0c:
         33:db:f3:b1:54:24:42:20:64:43:86:8e:07:b1:84:3f:99:e8:
         8e:60:e4:34:52:f6:e4:ea:43:05:e1:bb:e0:09:c9:d5:da:45:
         88:46:f7:28:e8:ca:a5:a9:9e:6c:e5:22:9b:b6:27:ed:8d:d4:
         6f:47:49:55:bc:67:a3:8a:5a:e3:8e:27:f4:dd:b4:6b:a9:3d:
         6a:89:01:c4:61:af:f9:01:66:79:9e:08:b0:1c:98:58:0d:5a:
         ba:e1:85:4b:26:b7:6c:2b:af:60:b0:e9:30:f8:63:b4:fd:22:
         31:f8:d1:71:40:81:ab:26:03:7e:5a:b2:04:56:e5:65:e3:94:
         54:0d:e3:bf:d2:c5:6d:88:2e:2f:5c:8e:49:01:b1:29:78:52:
         82:3b:87:f2:ed:44:cc:cf:bb:cf:3f:4d:06:31:87:6a:96:1b:
         fa:2a:e7:b3:a0:3c:f9:1c:10:79:1b:9f:fd:25:55:e3:46:69:
         c0:b9:37:0c:b5:c8:1f:e8:c4:c5:1f:db:3f:97:c4:1f:68:b3:
         4b:6e:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:44:16 2026 by rpki-client