Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
File:                     5CA72CF82A6911EC94518740C4F9AE02.roa (raw, json)
Hash identifier:          W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=
Subject key identifier:   DE:2C:CF:79:1D:90:5A:12:7E:EC:D8:E9:8B:AB:C9:DA:03:12:0A:1C
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       0551
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:56:41 +0000
ROA not before:           Wed 03 Sep 2025 00:16:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9723
IP address blocks:        103.38.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Sep  3 00:16:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a40d58-770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:4c:12:3b:bf:3a:15:6b:a6:04:8c:fe:c1:
                    39:bc:77:a6:05:f3:e0:e8:02:c6:d4:30:5a:69:cd:
                    47:8a:1d:a6:15:49:2e:19:ca:fa:b9:e9:91:f0:1b:
                    ab:bd:b4:78:75:1b:8b:50:a2:7f:23:e3:27:b9:97:
                    10:20:8b:f5:b9:9b:bb:f7:e5:b8:4d:64:b5:e4:85:
                    15:5a:e4:a4:30:91:2a:e1:d6:c0:ec:71:cf:5e:5c:
                    ec:97:b1:56:af:45:0e:f1:27:fc:0f:46:08:12:50:
                    1b:df:a6:87:e4:14:77:99:76:dd:5e:38:54:0b:a3:
                    64:ae:3f:e2:1d:c0:eb:41:89:db:8e:b4:51:3f:70:
                    00:c2:8d:35:9d:9c:4f:c2:06:8c:3e:83:f0:95:26:
                    a4:c4:0b:03:e6:da:be:00:9f:59:f1:5a:2a:6a:96:
                    27:67:b9:e7:6d:27:57:4e:60:0e:3d:bc:e1:26:98:
                    82:e6:3b:15:75:11:3a:c7:84:a2:38:37:25:90:48:
                    50:aa:d6:51:60:71:10:e1:72:47:54:76:f4:f3:ae:
                    22:4c:48:18:82:f2:93:b9:7d:06:cb:be:9b:ff:60:
                    db:5b:34:1b:ed:bf:89:ab:34:84:a8:39:7c:0e:17:
                    d7:08:6a:56:d0:ee:9a:12:25:36:e3:87:2a:f6:a6:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2C:CF:79:1D:90:5A:12:7E:EC:D8:E9:8B:AB:C9:DA:03:12:0A:1C
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:77:84:c0:96:73:df:3b:41:86:0b:78:d8:c3:45:2e:5c:
         5b:60:a1:8b:5d:b3:fe:4b:d4:06:bb:13:3e:e8:45:3a:8d:26:
         4b:5d:0a:b4:e3:ec:c7:fc:69:45:b7:4b:ab:38:09:e7:e8:47:
         88:8d:dc:24:bd:69:ff:91:33:3c:1e:cf:91:e1:1b:f2:16:97:
         2d:f8:ad:f4:c8:76:be:2c:4a:bd:8a:7c:d7:c9:2f:20:8c:24:
         a2:44:7e:0d:b4:72:fb:b1:0d:a7:a5:4c:b7:00:f5:0e:38:47:
         95:6f:70:d0:77:39:23:66:16:e4:ea:3e:6e:51:aa:be:1a:28:
         87:69:4b:a8:07:6a:15:70:f7:7d:39:de:2d:ad:5a:74:20:ec:
         3a:9c:6d:49:6e:48:3a:22:52:9c:5e:24:fe:1f:2b:bc:d3:5d:
         56:52:bc:27:6a:60:03:b5:56:5d:35:0d:0b:b5:ee:c4:7a:a7:
         bf:40:8d:ff:80:be:9c:b6:86:ea:b7:47:2f:97:76:bc:94:00:
         e5:cd:53:fe:83:ee:56:96:a6:ec:71:71:49:6c:33:d9:00:09:
         f3:ef:14:25:17:f3:db:32:48:43:61:d9:b4:06:04:71:82:c6:
         66:9c:6c:3f:8a:9f:d0:3d:90:ca:9c:50:99:90:a9:a2:2c:5a:
         49:0c:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:31 2026 by rpki-client