Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa
File:                     1A377B907A7811EF9D5ED47CC4F9AE02.roa (raw, json)
Hash identifier:          x84TGpJwkGN1F9rNjJJlUOFJsWsbRZGA551g4hInBlw=
Subject key identifier:   54:52:79:54:4E:AB:03:7B:2A:A0:AA:5A:B9:2D:37:2A:3A:36:2A:2C
Certificate issuer:       /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial:       041F
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 00:34:05 +0000
ROA not before:           Tue 03 Mar 2026 00:34:05 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149522
IP address blocks:        103.182.122.0/23 maxlen: 24
                          2400:5ce0::/44 maxlen: 44
                          2400:5ce0:10::/46 maxlen: 46
                          2400:5ce0:18::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
                          rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
        Validity
            Not Before: Mar  3 00:34:05 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a62c7d-1cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:91:15:1a:fe:b5:ce:5f:43:68:79:f2:85:
                    48:33:d5:3d:6d:7a:99:42:cd:30:38:35:77:c9:1e:
                    fc:40:8f:12:80:cf:d5:0f:b8:b6:2f:43:73:48:47:
                    fd:62:99:e6:b9:5d:4c:ec:ff:56:65:03:79:f3:3e:
                    3a:ee:97:1b:b4:17:49:e2:cf:d3:b5:cf:e6:7b:d4:
                    1e:05:ee:9b:d7:35:1e:1a:44:52:ca:48:4b:4e:22:
                    e6:be:94:52:06:88:74:f7:0d:b9:f4:b3:60:7e:36:
                    ad:95:fe:71:df:df:c2:dd:5e:1d:54:cc:8c:35:6f:
                    dc:7d:29:28:30:a6:2c:28:33:99:b1:b4:14:f0:f7:
                    2f:f8:3e:1e:18:eb:a1:82:3e:e2:ab:7d:dd:29:b6:
                    58:b2:66:4d:4f:15:c4:1f:1e:c3:95:54:26:f4:ce:
                    ff:30:5a:32:4b:96:a4:d7:8f:d5:34:af:55:d7:a8:
                    3e:c5:34:1c:47:eb:38:7b:fa:8d:1c:eb:c2:62:1a:
                    c9:8b:2f:50:6b:50:3e:54:64:47:5a:94:86:86:44:
                    9a:59:6e:84:7e:14:52:62:c8:92:92:01:b7:ad:08:
                    78:59:a2:0f:8d:51:e9:00:03:d9:82:91:52:7e:f1:
                    fc:6e:d1:9a:dd:ce:60:d6:a1:34:34:29:cb:6a:49:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:79:54:4E:AB:03:7B:2A:A0:AA:5A:B9:2D:37:2A:3A:36:2A:2C
            X509v3 Authority Key Identifier:
                keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.122.0/23
                IPv6:
                  2400:5ce0::-2400:5ce0:13:ffff:ffff:ffff:ffff:ffff
                  2400:5ce0:18::/45

    Signature Algorithm: sha256WithRSAEncryption
         39:90:6b:72:dc:04:85:aa:c5:7f:93:01:71:71:76:54:d5:42:
         ea:4f:ee:cb:5b:9f:23:97:9f:cd:81:9d:c4:51:89:76:b0:47:
         8a:e1:50:e8:8d:1f:f9:07:f8:dc:89:7d:3d:b0:80:34:cb:c4:
         70:b8:cd:f3:56:b5:9d:dc:c3:a4:7b:b8:f6:9c:4c:51:87:2c:
         9e:11:07:5a:da:d7:e8:a9:25:f0:34:d7:9d:54:d8:f8:23:97:
         18:52:8b:5a:14:3d:76:72:51:f5:a7:86:ce:a7:34:6f:c4:33:
         98:4c:a6:3e:8b:98:94:1e:02:fe:b2:42:7b:bd:db:0a:b1:1b:
         de:29:70:a2:b8:18:3b:3a:11:7f:1a:97:67:29:b9:23:be:fd:
         1a:be:22:45:3f:6a:9f:3a:59:ac:6b:f0:99:1a:4b:3a:8e:9e:
         41:a3:17:3b:ce:a1:2d:6b:2d:7a:47:2f:ff:71:77:4c:98:5b:
         26:d2:82:d9:01:0a:96:a3:38:79:8f:22:46:8b:ad:40:44:b4:
         03:ef:b8:c0:a3:67:b4:01:c9:5b:d5:29:d5:be:bc:e4:74:e6:
         4f:32:40:90:69:72:e4:44:ea:f7:36:68:1b:e6:58:12:90:9f:
         bf:fb:9e:a3:b8:26:02:18:df:89:02:27:a7:ee:e2:b0:2e:3a:
         5f:7a:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:22:21 2026 by rpki-client