Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa
File:                     07332486B1D111EBA956F96AC4F9AE02.roa (raw, json)
Hash identifier:          fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=
Subject key identifier:   59:9D:9C:74:3A:9B:B2:D9:1C:B2:33:F4:BC:2B:14:0D:1F:93:00:6F
Certificate issuer:       /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial:       067F
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:35:51 +0000
ROA not before:           Tue 30 Sep 2025 23:25:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136960
IP address blocks:        103.100.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
                          rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
        Validity
            Not Before: Sep 30 23:25:27 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a432a7-e32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:c1:2b:1d:36:20:fe:75:1f:5b:52:80:fb:
                    40:3e:fa:4d:41:ee:76:51:de:c8:a9:f5:45:48:ff:
                    db:f2:5c:2c:04:1d:1e:15:30:6b:18:cb:5c:f0:74:
                    e8:bd:fe:8c:7a:18:16:12:b4:7c:4e:56:c9:ed:82:
                    c9:0b:f5:28:b3:39:42:94:05:82:ed:fb:28:10:a3:
                    37:09:e3:ad:81:37:cc:b0:7b:da:76:ca:76:ba:66:
                    d7:04:f6:85:9f:84:e2:0c:5e:66:80:4e:ca:82:15:
                    fe:3a:ed:67:3b:93:a8:5d:fa:fc:0e:06:c5:dc:b5:
                    18:e5:99:62:21:17:0b:92:d2:d5:e9:40:bd:36:cc:
                    4d:3d:9c:c9:bd:14:f1:b2:06:78:02:ed:6e:99:09:
                    3e:d0:25:4c:f0:be:2a:59:23:d4:8e:b5:14:12:b4:
                    7d:68:68:9e:ae:f1:56:46:16:82:98:50:ca:48:25:
                    9e:8d:37:c6:59:7a:45:ff:bb:85:26:c7:9b:17:75:
                    b6:46:0d:66:9b:b5:a6:d6:3a:34:d9:31:30:45:02:
                    a9:90:9f:48:9d:3a:2f:c4:bb:ed:15:c6:e5:54:b3:
                    a0:88:3a:65:9c:f1:a8:c0:2b:9d:f3:9b:3a:f1:f2:
                    9e:94:ee:12:0b:35:a6:01:9a:2c:e7:46:71:3b:8a:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9D:9C:74:3A:9B:B2:D9:1C:B2:33:F4:BC:2B:14:0D:1F:93:00:6F
            X509v3 Authority Key Identifier:
                keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:76:8c:4a:84:9e:a0:7c:56:00:1a:4f:3f:04:80:5c:af:a9:
         46:96:1e:20:6b:32:89:bc:47:eb:1e:f0:a4:d0:45:fb:01:9f:
         b2:3f:1b:fa:45:e5:3a:69:1b:a5:11:d1:ff:63:eb:30:02:a9:
         75:87:4a:c6:b1:50:d5:7f:11:0f:fd:7b:55:78:6f:69:ae:0b:
         9c:7c:4f:ca:0a:ce:ae:5d:51:e0:06:5f:da:30:2f:e5:00:6a:
         f1:75:88:1c:d3:83:1b:3f:a3:c0:70:74:a9:c6:87:53:12:d4:
         1c:a4:34:72:33:dd:f0:57:dd:d9:82:50:dc:83:75:0b:51:2f:
         75:88:57:4f:7e:ec:b5:59:d2:3c:6b:bc:ae:90:e4:0a:03:9e:
         29:7a:19:04:99:51:86:98:a0:c7:ed:42:c4:ae:a8:7d:d6:a0:
         99:b3:f0:e8:fe:99:f2:e1:87:ac:bb:93:8a:79:1e:b8:eb:aa:
         df:73:eb:c6:e1:21:dc:7b:ff:cc:58:26:4f:38:ab:0b:3e:70:
         02:2a:6d:1f:39:a2:5a:ce:66:4c:89:b9:14:7f:97:8e:cf:bd:
         65:3c:c9:44:8f:4d:4c:7a:71:60:67:04:2e:69:d4:c1:f4:e2:
         7d:9d:11:de:e4:6d:06:97:dc:db:5a:da:ab:91:bb:a2:71:fd:
         a0:cc:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:50 2026 by rpki-client