Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
File:                     B3876B1821C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          80Ux/s/8WUCan4xcWTLCy1IlA/aIHlyIXja+HwSVmTA=
Subject key identifier:   1F:CE:2B:ED:48:A6:10:EE:78:99:7C:D3:8B:BF:C5:02:4C:81:30:D7
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       104A
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:57:29 +0000
ROA not before:           Fri 16 May 2025 17:52:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.113.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 17:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4170 (0x104a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 16 17:52:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a461e9-6c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:96:59:15:2b:aa:71:59:24:b7:74:1c:ce:
                    a1:1a:11:64:38:1d:0e:a3:52:95:7e:63:07:f6:43:
                    d6:ed:ce:29:d9:cd:c7:81:67:e9:fb:05:4e:d5:ac:
                    8c:f9:7f:b2:26:f8:f5:e0:56:70:7c:bc:1d:44:da:
                    3e:1b:ea:c1:63:c3:f3:25:1b:a4:92:03:ca:63:a3:
                    7b:53:b1:ac:47:b8:71:e6:1b:7f:38:18:58:9a:60:
                    8e:7a:c2:39:80:44:d3:dd:5f:0d:25:04:c4:11:bb:
                    c4:be:0d:f6:8c:c2:cc:eb:b2:59:15:c1:c4:c6:5b:
                    77:d7:69:cb:c3:b2:80:03:e2:40:8e:da:55:8d:3d:
                    5c:bf:93:ba:07:64:56:55:ec:91:9f:48:73:28:b1:
                    ff:48:cf:1c:e5:39:9b:d5:d4:e9:f0:eb:cb:33:fc:
                    d9:41:2d:80:a9:95:0b:19:ea:9b:b3:3c:f0:bf:c9:
                    9e:9b:35:a3:9e:61:db:79:1d:f0:a8:67:8b:92:1f:
                    07:4e:4d:c0:e1:1c:25:9d:69:62:89:19:00:46:4f:
                    6d:1c:5b:d9:57:a6:3c:6f:fc:27:47:96:f1:6b:42:
                    d9:cf:76:a4:66:35:d0:74:bc:b0:e1:63:b2:d1:8d:
                    25:0b:e5:44:4a:27:60:dc:24:5e:59:f1:b3:81:e0:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CE:2B:ED:48:A6:10:EE:78:99:7C:D3:8B:BF:C5:02:4C:81:30:D7
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:3f:41:6a:96:15:e4:6b:9f:81:3d:11:8a:90:ef:1b:a4:
         b8:84:d4:cb:3a:ec:11:5b:a2:63:f6:f1:83:50:44:73:fb:8f:
         c0:e6:fb:30:9a:db:a3:ad:49:16:48:20:cf:8c:44:57:14:bf:
         4d:a3:8c:1f:aa:f7:fd:ef:7c:18:28:35:af:4c:79:dc:e4:f3:
         3b:c4:11:ce:49:8d:11:82:a8:78:64:71:82:0c:45:79:cb:99:
         47:3c:36:79:ac:a3:03:02:bd:7d:ec:7f:26:1a:20:c2:09:1d:
         fb:f0:be:72:03:c9:59:f6:f8:19:5f:ca:92:c6:8b:43:10:d3:
         b3:28:70:4e:23:c8:0c:dd:46:3e:1b:87:8c:4b:85:5f:43:3d:
         56:a0:0a:52:c5:8c:45:a6:a1:51:b6:56:94:e3:50:eb:ed:a1:
         61:0f:ec:98:ba:25:1f:0c:24:98:cb:ec:d5:86:d6:a1:ed:97:
         e1:5e:ca:07:d6:e0:99:9d:90:65:31:2f:4c:04:85:61:99:e5:
         29:ae:2d:15:07:10:3d:e6:1c:ad:6c:1a:21:de:d0:1e:b8:46:
         49:b1:50:82:04:be:58:62:b5:2f:8e:c9:ea:20:93:eb:97:fc:
         9b:d2:78:76:02:67:0f:89:1a:71:c1:c2:2d:7f:34:e8:2d:35:
         61:b8:41:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2
RkZBQzQ2NjEwHhcNMjUwNTE2MTc1MjIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjFlOS02YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0CWWRUrqnFZJLd0HM6hGhFkOB0Oo1KVfmMH9kPW7c4p2c3HgWfp+wVO1ayM
+X+yJvj14FZwfLwdRNo+G+rBY8PzJRukkgPKY6N7U7GsR7hx5ht/OBhYmmCOesI5
gETT3V8NJQTEEbvEvg32jMLM67JZFcHExlt312nLw7KAA+JAjtpVjT1cv5O6B2RW
VeyRn0hzKLH/SM8c5Tmb1dTp8OvLM/zZQS2AqZULGeqbszzwv8memzWjnmHbeR3w
qGeLkh8HTk3A4RwlnWliiRkARk9tHFvZV6Y8b/wnR5bxa0LZz3akZjXQdLyw4WOy
0Y0lC+VESidg3CReWfGzgeCKKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB/OK+1I
phDueJl804u/xQJMgTDXMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz
RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvQjM4NzZCMTgy
MUM5MTFFQjk5MUQ1NjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3FcMA0GCSqGSIb3DQEBCwUAA4IBAQBAsz9BapYV5GufgT0RipDv
G6S4hNTLOuwRW6Jj9vGDUERz+4/A5vswmtujrUkWSCDPjERXFL9No4wfqvf973wY
KDWvTHnc5PM7xBHOSY0Rgqh4ZHGCDEV5y5lHPDZ5rKMDAr197H8mGiDCCR378L5y
A8lZ9vgZX8qSxotDENOzKHBOI8gM3UY+G4eMS4VfQz1WoApSxYxFpqFRtlaU41Dr
7aFhD+yYuiUfDCSYy+zVhtah7ZfhXsoH1uCZnZBlMS9MBIVhmeUpri0VBxA95hyt
bBoh3tAeuEZJsVCCBL5YYrUvjsnqIJPrl/yb0nh2AmcPiRpxwcItfzToLTVhuEFs
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:19:32 2026 by rpki-client