Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa
File:                     621428CE3CFB11EFB0BF040BC4F9AE02.roa (raw, json)
Hash identifier:          w49yHIqbKO5UQXgKCrDZvpiyw+EK/7buhVnIPU9D8V8=
Subject key identifier:   32:D5:61:27:41:7F:83:8F:FB:58:DC:ED:E5:12:79:DF:8A:F1:0E:FA
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       0143
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:20:15 +0000
ROA not before:           Sat 01 Nov 2025 05:49:09 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136557
IP address blocks:        103.26.236.0/24 maxlen: 24
                          103.26.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Nov  1 05:49:09 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58e8f-eb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:cd:31:ae:32:17:a6:60:a7:31:f4:0e:d3:
                    21:d1:1b:c1:78:91:ea:2c:ad:1a:76:29:ee:5e:93:
                    9e:62:cf:37:25:64:a6:56:a9:26:93:13:76:08:17:
                    05:fc:77:35:6e:66:51:b7:55:66:82:27:4b:88:a2:
                    c1:a0:ca:d5:cb:2f:e4:de:d0:eb:f9:5b:14:69:55:
                    d2:49:e8:9f:00:a3:21:64:aa:fd:af:24:42:fa:60:
                    f4:8c:83:de:ba:ca:4a:b2:09:95:cf:68:19:f2:5f:
                    ee:a2:d0:ce:bb:04:a2:20:20:5a:b0:38:c3:2b:54:
                    af:ad:6c:79:52:ae:fa:7d:df:66:d7:4f:00:63:bd:
                    3d:e9:cf:2c:d6:56:66:00:54:03:e2:d2:06:4e:b1:
                    a3:f0:8b:85:b8:2c:e3:22:85:3e:8b:f7:3f:ee:d8:
                    e8:a5:9d:56:6f:19:a1:51:3a:de:24:d2:9f:91:b8:
                    12:57:e0:46:dc:1f:d6:26:9f:9b:27:9f:64:01:40:
                    cb:3f:5a:a9:67:8b:92:9d:3a:ca:b9:14:9b:19:7e:
                    f9:b4:6b:92:cc:c9:26:31:78:3e:6e:b6:2e:4e:e9:
                    36:1a:a6:37:14:59:6c:27:36:5a:09:9f:a4:e3:f4:
                    99:c8:01:17:53:2e:dd:25:dd:37:b9:a6:df:70:bc:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:61:27:41:7F:83:8F:FB:58:DC:ED:E5:12:79:DF:8A:F1:0E:FA
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:70:65:93:19:9b:56:41:18:07:9b:0c:26:c4:cb:76:38:
         90:ce:34:b5:aa:b0:04:f7:0a:01:45:80:49:e2:32:1d:20:0e:
         93:0e:0f:f0:47:fe:ee:3a:bb:9c:fb:67:e9:77:dd:66:5f:be:
         ae:42:ad:f8:70:9d:d9:d0:ab:f7:dd:88:0a:34:e3:80:b1:37:
         1e:8f:5d:d0:85:e4:4d:fc:a7:4f:c9:83:aa:2b:90:07:de:86:
         28:41:ad:66:44:06:f4:26:94:de:75:8d:d4:58:24:be:76:75:
         19:5b:5e:ac:ae:1a:63:a5:34:44:7b:9d:11:0b:ed:5c:50:03:
         b9:db:a2:8f:d2:70:ef:bc:b7:08:6e:8a:0a:5d:46:c2:55:2e:
         52:d3:3d:bc:c1:07:e5:c0:15:24:15:71:fa:68:e5:53:b1:f8:
         11:d7:e4:c6:1f:df:ba:b0:59:fb:fb:ff:3f:3d:6a:98:11:3a:
         83:6f:b7:93:80:46:6d:41:dc:eb:0d:d3:2d:8e:b3:5f:15:57:
         dc:f9:cb:a5:f5:a8:18:f2:fc:69:96:e1:02:0f:da:a9:28:a2:
         1c:17:3c:16:8a:96:73:2e:a9:b7:16:f8:e2:2a:12:1a:99:8c:
         b5:ac:1e:a0:f9:ac:f7:2b:8b:a8:d3:1d:73:4a:03:27:01:96:
         31:8c:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:30:41 2026 by rpki-client