Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/84D32F2AE32411EA800C6724C4F9AE02.roa
File:                     84D32F2AE32411EA800C6724C4F9AE02.roa (raw, json)
Hash identifier:          AMw54EUzBoYZAlXkNliaOixSikod3CRFz3MlZVcy56A=
Subject key identifier:   B8:07:F9:69:A5:CC:8B:D1:A7:0F:22:43:2E:C2:97:D4:2C:63:7E:2B
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       09EC
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/84D32F2AE32411EA800C6724C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:50:04 +0000
ROA not before:           Thu 10 Apr 2025 20:30:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     22900
IP address blocks:        103.149.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
                          rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
        Validity
            Not Before: Apr 10 20:30:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a427eb-4a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:06:cd:88:ed:8a:f7:ba:ce:82:e1:91:d9:
                    9b:26:ff:e3:a5:4a:85:55:e9:84:fa:da:10:fb:f8:
                    21:9d:d4:da:bb:76:22:f4:63:af:52:d8:ab:15:be:
                    a6:66:2a:c8:00:f8:27:c6:99:71:d6:7b:c0:08:c9:
                    dc:cd:e1:45:3c:1b:8b:bf:ec:0e:2b:c5:ae:12:52:
                    ad:f7:ca:51:dc:00:61:8f:9b:ce:ae:fb:08:e2:c6:
                    80:97:f9:ea:b4:51:56:bf:fd:91:5a:ba:3f:49:c2:
                    82:31:40:27:4c:e3:11:cc:bd:53:96:7d:27:8b:88:
                    23:8d:89:73:c1:26:61:d7:ad:4b:93:05:59:3b:84:
                    78:a1:3e:1a:6e:f7:ae:0f:6a:d5:57:eb:aa:cc:66:
                    60:60:ad:28:e8:c4:e4:b1:7b:b7:ea:ff:87:2d:9a:
                    73:65:93:e2:17:a6:55:95:d0:01:f3:95:c3:19:f6:
                    8e:dd:8b:f0:a6:b9:6c:16:4b:a3:e5:4d:9f:08:15:
                    7e:67:d9:d7:ea:9c:3d:2b:d1:af:46:96:38:cd:a3:
                    d2:2d:61:e0:df:d6:f7:0a:02:df:e9:19:22:8c:1f:
                    24:c2:80:c1:54:55:5d:3d:bb:46:b2:be:f9:bd:92:
                    4f:f8:7f:84:b9:f0:bc:a4:ee:5e:52:16:b9:73:e6:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:F9:69:A5:CC:8B:D1:A7:0F:22:43:2E:C2:97:D4:2C:63:7E:2B
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/84D32F2AE32411EA800C6724C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:89:20:6c:0a:aa:a6:14:17:e2:7b:63:d5:fa:bd:a6:b0:
         00:7f:56:07:19:b9:c7:a6:d2:d5:dc:98:4f:d9:c8:45:a4:c7:
         01:ce:45:06:59:87:75:be:35:a3:95:8a:a5:07:2d:d7:d1:a9:
         b8:26:67:e0:a2:9b:03:fa:b6:68:f5:91:d8:cc:32:c4:14:36:
         1f:3b:a9:97:fb:62:88:03:c3:c4:cf:e2:7a:dd:16:86:d8:ec:
         2a:f8:49:72:95:94:38:b7:b3:a0:13:27:15:a9:cb:08:45:fa:
         f3:88:3a:13:04:d0:a9:c4:11:f7:53:d7:27:a1:7a:9d:4f:a2:
         96:6e:c8:3e:04:f6:f9:65:55:4c:0b:b5:2b:52:01:09:e9:0c:
         fe:24:00:70:cf:25:6f:50:54:bf:8f:d8:30:98:eb:74:42:23:
         f0:84:bc:75:21:be:e6:a8:0b:67:f2:4d:d1:4d:f3:7f:a8:af:
         67:59:a8:81:72:23:b0:c7:a2:50:3b:94:15:8f:b5:ec:77:e8:
         01:8e:6c:20:de:8f:61:bb:b7:18:77:33:76:d6:3e:d4:a2:2f:
         27:9b:cc:8d:0a:28:87:d8:18:04:c8:e9:e8:b0:5f:1e:22:81:
         59:42:22:4e:b6:22:7c:01:0a:0f:d3:f5:fc:1c:ac:c8:ef:73:
         f0:ef:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:02 2026 by rpki-client