Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F62847A2177911F18F01239F253D8C67.roa
File:                     F62847A2177911F18F01239F253D8C67.roa (raw, json)
Hash identifier:          JBeW1rdY6GlTOUqqMMum9prGSAeNYsK+P09Gd+alKfI=
Subject key identifier:   08:B1:BF:35:D8:90:5E:4C:26:59:56:95:D9:AF:E9:E7:79:60:59:03
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0BCE
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F62847A2177911F18F01239F253D8C67.roa
Signing time:             Wed 04 Mar 2026 03:26:41 +0000
ROA not before:           Wed 04 Mar 2026 03:26:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     215748
IP address blocks:        103.231.36.0/24 maxlen: 24
                          103.231.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 18:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: Mar  4 03:26:41 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a7a671-229b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:f1:4b:69:fd:6d:a2:42:ff:e2:9e:a7:89:
                    26:96:58:fd:16:9f:f5:49:8b:ba:39:04:c6:8d:4b:
                    93:d9:1f:23:40:a5:83:c6:87:db:65:f5:6a:92:be:
                    97:47:46:15:dd:b1:03:4f:1b:71:7f:42:ea:eb:ea:
                    4a:a7:63:cf:3f:ab:87:96:78:d3:2e:aa:f0:94:42:
                    55:26:4a:dd:e0:ae:35:2c:33:13:50:1a:34:a8:69:
                    63:1b:bd:6f:96:08:b5:77:62:2e:ad:36:e6:4c:ee:
                    80:c5:05:95:9f:9d:8b:df:6e:30:a2:b9:f7:73:97:
                    fd:a7:a2:2b:bc:5e:b3:97:82:3e:8a:34:fc:30:fb:
                    37:6e:22:94:6d:5e:b0:08:9a:ba:da:23:2b:9e:ff:
                    95:52:b4:e7:f9:da:01:c1:0a:42:34:7a:42:63:4b:
                    9c:89:5b:79:79:f6:b1:76:3e:bd:9b:a1:de:40:1c:
                    82:b0:1a:20:12:86:b7:8a:91:9d:ca:01:5d:6a:28:
                    f9:c4:09:88:90:7f:f8:6d:7e:29:71:db:2f:be:da:
                    a4:2c:e6:96:82:03:f0:71:ab:65:a6:76:09:63:a5:
                    34:95:e7:0a:13:9d:88:dc:03:3c:fa:0a:c5:e5:3d:
                    29:72:a7:ee:f8:65:2c:fa:e7:f0:23:87:fc:8e:7b:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:BF:35:D8:90:5E:4C:26:59:56:95:D9:AF:E9:E7:79:60:59:03
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F62847A2177911F18F01239F253D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:b3:45:84:37:3e:87:fc:b7:58:42:58:f6:1b:7c:4e:14:a5:
         49:0b:e3:4a:03:38:60:27:f8:5b:f2:8d:4a:f8:d2:61:b5:a3:
         e5:6d:d2:21:33:d3:79:b1:bb:ae:8f:19:52:b4:a5:c7:9b:a7:
         79:06:69:aa:1b:50:7e:2c:58:30:49:02:77:bd:8b:41:d2:56:
         fa:0f:ff:e0:8e:e7:9a:76:d0:67:7b:f9:39:1f:5e:5f:b9:01:
         51:24:7b:1f:92:6d:db:47:3d:c7:c6:dc:74:66:03:40:98:1d:
         90:be:79:6e:e9:48:d5:9b:94:89:c4:6a:95:c6:3e:e1:c0:3b:
         06:44:5e:67:4c:b4:61:bf:92:4d:67:32:44:5e:1f:39:41:bb:
         cd:ec:c3:20:53:85:de:73:c8:3c:b9:63:9f:72:b4:5c:5e:3f:
         15:b4:1c:4e:dc:a8:ad:ec:ed:11:ed:01:81:60:f4:7a:67:f2:
         09:5c:54:dc:03:bc:33:23:27:05:47:dd:7c:a6:53:80:e1:90:
         5a:bd:27:5a:8c:7c:ba:17:7a:a5:86:61:8b:35:05:7b:b7:66:
         73:07:61:0f:29:7b:92:16:6c:21:ce:9a:33:93:52:02:da:ce:
         c0:dd:f5:d4:87:97:7f:f2:5a:36:16:d2:07:f7:d7:77:58:d3:
         25:11:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 14:49:31 2026 by rpki-client