Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
File:                     B490CD0621C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          rBg1NOWyi7cxpOlSxmQbpoGz0c8wacC//ksLpStwuPw=
Subject key identifier:   65:59:62:C7:DA:A5:5A:6F:D8:EC:C6:59:A5:6E:E5:A1:ED:8C:5F:8B
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       1048
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:57:27 +0000
ROA not before:           Fri 16 May 2025 17:52:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138538
IP address blocks:        103.113.92.0/22 maxlen: 24
                          2402:b940::/40 maxlen: 40
                          2402:b940:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4168 (0x1048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 16 17:52:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a461e7-c2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:91:76:cb:3e:ab:1a:52:ae:31:b8:56:db:
                    08:ac:26:a5:f5:2b:18:3d:84:8b:e5:35:f6:e7:8b:
                    07:0b:55:fa:6f:d2:d8:99:73:c6:ca:b9:4d:f0:fc:
                    34:94:43:e1:50:a7:9c:dc:70:a2:0d:e5:63:c6:04:
                    18:de:b1:08:92:72:97:7d:f3:b5:39:17:94:4c:e0:
                    b2:e1:44:72:55:24:9d:2d:8c:c6:fb:32:c7:96:52:
                    ac:f1:29:8d:28:cf:89:60:6a:2c:79:05:ba:51:b6:
                    75:46:9a:38:8b:5c:a6:c3:53:9f:27:4a:db:48:50:
                    f8:bd:73:6a:1f:a6:58:c5:21:22:8f:c9:f7:ed:f5:
                    09:65:23:e2:bc:2d:a8:f9:50:70:bd:2c:8c:78:db:
                    c0:af:39:5b:1d:f7:e1:17:a5:58:a5:24:91:f6:71:
                    56:fa:bf:ea:5a:eb:8a:ed:d9:02:66:85:9d:25:2c:
                    14:33:c8:7e:19:14:17:41:d4:19:a3:a5:16:19:d9:
                    04:57:5b:7a:ee:d4:e7:90:54:3a:9f:1b:37:99:5b:
                    37:34:15:f8:0b:d0:cb:6f:2a:81:ab:cc:db:59:8a:
                    32:41:71:08:57:8c:fa:50:15:62:d1:d2:74:87:2c:
                    74:cc:a0:d3:79:1d:f3:d1:89:8a:b7:89:c2:24:a4:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:62:C7:DA:A5:5A:6F:D8:EC:C6:59:A5:6E:E5:A1:ED:8C:5F:8B
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22
                IPv6:
                  2402:b940::/40
                  2402:b940:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         35:71:92:e3:a0:c4:83:7a:f9:94:7a:f6:34:09:d3:e0:de:ad:
         d2:d8:f8:ee:06:28:b3:97:e6:74:8f:fe:25:a7:06:14:df:ec:
         eb:4c:96:0f:27:a5:f0:01:3a:9f:02:a7:aa:28:17:d2:d3:de:
         59:25:d9:89:6d:51:93:ed:3f:aa:4d:04:16:ba:bf:61:1b:27:
         5d:29:a2:08:b2:38:f7:ad:de:40:16:63:42:5f:42:7d:18:0b:
         3d:15:51:88:f0:6c:3f:47:13:ea:33:c4:84:31:1a:47:5b:36:
         5d:09:a0:17:17:bd:13:82:ff:87:04:32:9d:f5:2e:a5:f2:1a:
         3f:b6:11:72:34:dc:18:01:76:2e:8e:82:4a:59:88:e7:22:a8:
         68:02:b5:a5:a9:cb:9e:77:a6:50:df:06:af:9a:21:04:50:e2:
         ce:b3:55:9a:58:3e:e9:58:55:24:b1:e7:c7:76:f6:ce:a9:97:
         31:fb:5e:2b:31:21:7a:df:93:11:bd:c0:6b:52:5a:cd:31:c0:
         66:f7:71:8b:fd:d3:01:75:44:e0:cd:23:8f:49:de:92:6e:af:
         bd:b7:e7:97:df:1e:56:51:e3:d8:ae:ee:3e:ef:25:35:94:54:
         4c:fe:f6:91:cc:03:4d:70:e5:39:21:af:fa:de:66:0e:bf:4d:
         e6:02:aa:9a
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2
RkZBQzQ2NjEwHhcNMjUwNTE2MTc1MjE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjFlNy1jMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjKeRdss+qxpSrjG4VtsIrCal9SsYPYSL5TX254sHC1X6b9LYmXPGyrlN8Pw0
lEPhUKec3HCiDeVjxgQY3rEIknKXffO1OReUTOCy4URyVSSdLYzG+zLHllKs8SmN
KM+JYGoseQW6UbZ1Rpo4i1ymw1OfJ0rbSFD4vXNqH6ZYxSEij8n37fUJZSPivC2o
+VBwvSyMeNvArzlbHffhF6VYpSSR9nFW+r/qWuuK7dkCZoWdJSwUM8h+GRQXQdQZ
o6UWGdkEV1t67tTnkFQ6nxs3mVs3NBX4C9DLbyqBq8zbWYoyQXEIV4z6UBVi0dJ0
hyx0zKDTeR3z0YmKt4nCJKQRVQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFGVZYsfa
pVpv2OzGWaVu5aHtjF+LMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz
RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvQjQ5MENEMDYy
MUM5MTFFQjk5MUQ1NjJFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM
BAIAATAGAwQCZ3FcMBYEAgACMBADBgAkArlAAAMGASQCuUACMA0GCSqGSIb3DQEB
CwUAA4IBAQA1cZLjoMSDevmUevY0CdPg3q3S2PjuBiizl+Z0j/4lpwYU3+zrTJYP
J6XwATqfAqeqKBfS095ZJdmJbVGT7T+qTQQWur9hGyddKaIIsjj3rd5AFmNCX0J9
GAs9FVGI8Gw/RxPqM8SEMRpHWzZdCaAXF70Tgv+HBDKd9S6l8ho/thFyNNwYAXYu
joJKWYjnIqhoArWlqcued6ZQ3wavmiEEUOLOs1WaWD7pWFUksefHdvbOqZcx+14r
MSF635MRvcBrUlrNMcBm93GL/dMBdUTgzSOPSd6Sbq+9t+eX3x5WUePYru4+7yU1
lFRM/vaRzANNcOU5Ia/63mYOv03mAqqa
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:09 2026 by rpki-client