Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
File:                     591B98DE548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier:          qR0zYrZcU8j5K8WV7bPn4xhqvhYEokgOOEVOXblOyTg=
Subject key identifier:   34:F5:04:8B:A6:E7:9C:50:54:A7:9C:0E:94:79:4C:50:F7:02:2B:E3
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       0772
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:42:30 +0000
ROA not before:           Sat 08 Mar 2025 22:13:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132369
IP address blocks:        103.148.202.0/23 maxlen: 24
                          2405:d6c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Mar  8 22:13:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40a06-21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:7e:46:f1:77:b8:cc:2b:26:8f:bc:93:91:
                    71:c9:82:92:ef:71:10:ef:f3:6b:6e:1b:a5:eb:de:
                    41:03:42:5c:d7:66:b7:55:d4:69:bc:82:83:42:56:
                    9e:38:01:8e:89:cb:79:3b:cd:be:7c:c4:27:70:29:
                    ca:1a:68:54:c0:eb:ef:8a:ca:a6:19:42:b3:b4:8c:
                    5b:74:31:6a:ba:d5:67:a2:e9:33:7c:2e:e7:dd:ad:
                    b4:7f:ad:15:79:08:3c:9f:78:4e:66:20:b9:8d:17:
                    b5:d0:f5:8d:4f:80:a7:5f:69:21:6c:d7:55:4c:ba:
                    ed:c9:98:d8:80:7d:6b:b2:63:80:cd:e2:d1:b4:40:
                    fc:f2:5f:cf:68:2e:49:6a:49:2c:4b:c3:68:12:55:
                    3b:8c:9d:39:f1:3f:b0:87:80:de:d3:49:9f:cc:e5:
                    d2:1e:5b:a0:04:e5:24:2b:58:54:f7:3c:6c:65:4b:
                    39:55:9d:b0:49:06:e0:2e:a1:19:ab:28:5e:38:59:
                    2e:1d:ac:ab:99:d9:4a:02:d6:15:57:31:1a:b9:26:
                    da:30:ff:be:dd:7d:e8:7b:b9:e5:99:1d:84:48:d7:
                    f4:c8:40:39:48:a1:66:ba:a8:b7:de:82:9f:b6:43:
                    c3:17:53:e3:25:91:b7:27:d7:c3:77:03:36:5d:23:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:04:8B:A6:E7:9C:50:54:A7:9C:0E:94:79:4C:50:F7:02:2B:E3
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.202.0/23
                IPv6:
                  2405:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:20:02:99:e5:02:01:58:b4:a1:fc:a3:6c:01:4a:42:5e:
         69:ca:1c:33:e8:38:4c:a0:e0:d7:d1:73:4c:f3:5a:43:05:17:
         7b:73:48:51:ad:f7:3a:b1:69:e1:70:30:f3:d4:43:cf:64:8a:
         af:39:e6:22:dc:7d:25:24:73:02:22:94:f9:25:72:9f:cb:15:
         15:97:a9:9b:d2:49:dc:b1:a4:68:e2:e0:b3:94:95:13:d9:96:
         ef:36:da:07:cd:f6:20:cf:26:e4:b6:1b:e4:74:50:8c:8a:e3:
         11:fa:95:c8:1a:e5:79:d4:b1:7b:92:9f:a4:e3:52:fd:04:18:
         c3:80:3b:31:67:30:fa:9e:b9:df:ce:7d:e9:76:c8:48:9e:3a:
         8b:10:b9:30:62:d2:31:10:7a:71:de:c4:41:a6:1c:cf:c7:07:
         2e:86:94:af:7e:40:c9:9c:6e:c0:fd:ab:c4:55:a4:ae:98:f6:
         8e:2f:87:a9:3f:8f:fe:d2:e6:e9:e3:97:59:e8:84:47:bf:33:
         20:7c:ad:53:74:49:44:01:8f:47:37:f6:f4:44:ca:0e:27:6e:
         d8:19:70:4d:d7:6b:d6:70:be:4d:9a:8d:1f:5f:6b:56:77:3d:
         75:82:a5:ea:1a:6d:17:a3:56:df:a8:18:e7:0f:c3:3c:7e:49:
         e4:f7:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:22 2026 by rpki-client