Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F6A7E804177911F18F01239F253D8C67.roa
File:                     F6A7E804177911F18F01239F253D8C67.roa (raw, json)
Hash identifier:          Aqvsakafkw8x+1EMnuzVKvyQkhXbGYvngvcI/pmGvzY=
Subject key identifier:   2F:E2:06:40:62:E9:B7:5B:3B:CD:6D:25:60:8F:CD:63:03:86:FD:E4
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0BCF
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F6A7E804177911F18F01239F253D8C67.roa
Signing time:             Wed 04 Mar 2026 03:26:42 +0000
ROA not before:           Wed 04 Mar 2026 03:26:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        103.231.36.0/24 maxlen: 24
                          103.231.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 18:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023 (0xbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: Mar  4 03:26:42 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a7a672-a5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:41:cc:10:f1:a0:4e:47:66:40:01:ff:ab:
                    21:51:c1:d8:99:2f:b0:8d:5a:10:0c:72:6a:5c:b3:
                    f1:c2:9e:a7:a8:fb:6d:f4:6e:bf:60:fe:61:4f:cd:
                    c9:d9:7e:93:4d:ba:38:4f:47:b5:2a:fb:a3:4d:18:
                    da:c2:35:6c:e7:40:dc:6f:c5:2a:0b:e1:ea:a7:3d:
                    77:17:a2:39:d8:98:ee:6f:a8:5f:c3:97:d3:aa:94:
                    b4:16:11:b3:45:62:da:0c:bd:ac:92:2f:45:18:8d:
                    10:84:b4:69:b9:b6:65:25:a1:dc:6c:b8:52:af:ee:
                    8f:b3:ed:88:fc:07:16:61:b4:82:1f:4f:98:84:c3:
                    7e:55:e3:d3:b6:23:86:15:76:fd:9c:64:dd:c6:6f:
                    66:10:58:31:17:85:96:7e:b5:f3:39:16:1d:da:ae:
                    0e:46:bc:8b:1c:48:1f:f4:06:2b:ae:8c:34:fd:21:
                    07:a7:cc:90:0c:63:fb:85:f8:8c:7a:7c:83:7b:08:
                    05:6b:7a:18:5f:49:5b:e6:81:fe:19:8e:cf:7f:a6:
                    10:9e:08:ba:60:6d:a7:f7:f1:ee:c3:62:f7:a9:49:
                    cc:30:09:26:48:73:f6:1f:0e:d3:19:59:fe:17:10:
                    b2:61:c0:e7:4b:c8:18:5b:5a:4b:57:e9:44:4d:b5:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:06:40:62:E9:B7:5B:3B:CD:6D:25:60:8F:CD:63:03:86:FD:E4
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F6A7E804177911F18F01239F253D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:92:2e:dc:7f:67:d4:2a:48:ae:e9:ac:5f:ac:bc:52:83:84:
         de:f1:e2:28:74:50:17:25:c7:72:04:2b:2a:27:71:c3:40:c1:
         bc:a3:bf:82:b7:a0:be:f5:ba:30:a0:46:02:fe:7b:74:fb:d4:
         f0:b8:ac:64:1b:38:17:30:e9:1d:d2:a2:14:e6:ae:3d:86:83:
         e8:40:f0:b4:91:2b:f4:78:e4:bf:a8:6a:28:f8:47:47:b5:08:
         2d:88:dd:d6:c4:98:81:32:64:af:90:99:89:87:f9:19:15:67:
         c1:ed:98:ad:b3:10:28:79:66:3f:28:c3:4f:8f:0d:07:d9:7c:
         aa:2c:88:e4:40:5c:eb:03:41:57:09:d2:e6:de:b5:84:94:5b:
         87:41:89:3b:8c:e4:7f:94:ba:f0:a7:60:68:e1:ad:32:c0:7a:
         ed:e0:fa:d5:42:d3:34:cb:6f:6d:ee:f8:e9:b7:26:3a:b6:8c:
         61:80:c8:0b:58:57:fd:34:70:02:41:25:a9:34:15:a8:c4:09:
         7d:e8:25:9a:8e:01:41:fe:cc:d2:3c:5e:ac:71:00:c0:71:cd:
         cc:f9:75:a6:ac:b3:3e:b1:de:d3:c5:de:2a:b4:c1:6c:86:f1:
         c6:e8:3b:1c:22:0c:6e:08:51:d9:82:e8:a4:7f:a2:34:49:c2:
         9d:9b:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:02:06 2026 by rpki-client