Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
File:                     59BC86E0548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier:          Pp0Q2Rt/MPS3CBGeHmja8TJHMrNs3vbhSj9LYTXUoPs=
Subject key identifier:   2C:0F:C2:D3:70:E1:5E:AF:C0:A9:5D:29:8D:64:09:DF:2B:6C:ED:96
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       0773
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:42:31 +0000
ROA not before:           Sat 08 Mar 2025 22:13:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     31972
IP address blocks:        103.148.202.0/23 maxlen: 24
                          2405:d6c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Mar  8 22:13:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40a07-8a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:6d:08:53:f8:13:7f:6a:68:f8:6c:6e:31:
                    9c:08:7d:b4:7a:17:4a:16:3a:cc:fb:b5:e5:dd:5d:
                    6b:d4:94:76:35:d5:75:13:d3:c5:8a:dc:4d:f0:8d:
                    f3:52:bd:ec:39:34:d4:05:02:09:64:23:8d:45:49:
                    36:7c:cc:f0:2b:19:15:91:39:16:fa:79:7c:a6:05:
                    09:46:a8:7b:fc:b1:7f:46:22:31:ce:32:5a:75:3b:
                    cd:65:c0:5e:39:fc:13:d1:4b:12:d8:2e:89:4f:34:
                    d9:fd:c2:89:d1:be:2d:73:43:55:16:94:9a:c9:2a:
                    9e:58:cd:f0:9c:be:1d:b0:06:04:4b:d5:60:cc:d3:
                    d8:52:f9:dd:7f:b6:ec:81:6c:85:fb:32:dc:91:30:
                    0c:3d:11:44:3f:66:27:0f:f9:e4:df:e3:bf:f4:94:
                    42:8f:cf:cf:2b:11:71:e8:68:65:77:74:2a:3f:6b:
                    09:e0:f5:2a:a3:e9:c6:2a:2d:e1:e6:4f:d0:47:d4:
                    a8:a6:a6:5a:b1:4e:eb:f7:21:1b:d2:d4:72:5c:0a:
                    04:d6:52:3b:ee:e9:3f:31:55:6e:2d:78:71:92:e1:
                    4d:67:9e:18:1c:7f:06:d2:04:d3:56:1a:56:4b:c2:
                    f9:cd:b2:7d:85:06:19:21:2b:8e:da:06:ee:af:57:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0F:C2:D3:70:E1:5E:AF:C0:A9:5D:29:8D:64:09:DF:2B:6C:ED:96
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.202.0/23
                IPv6:
                  2405:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:74:e7:98:3e:4a:bd:31:d3:fd:e1:1f:ad:b2:bc:7a:d8:6f:
         8b:37:64:16:65:ea:a3:7f:3e:b1:51:ac:0b:ed:b6:4b:05:35:
         35:ad:9b:92:2d:ea:9e:92:8a:68:26:de:61:21:46:57:97:9d:
         5e:3d:46:be:f4:68:5e:60:3d:88:68:de:ab:c1:2d:cb:fb:36:
         b5:d5:fa:dd:d0:fe:62:8a:2e:b1:0b:34:6c:c3:9b:bd:b8:71:
         21:d1:3b:fc:98:db:af:29:54:67:71:17:a6:53:83:15:e7:91:
         a3:11:d1:4b:38:a7:f4:83:ba:db:ed:af:98:f1:ba:79:8d:9d:
         fd:93:30:d0:b0:ec:68:2b:bc:ec:51:9a:73:9b:11:47:e3:b1:
         fb:33:bf:30:c8:aa:a0:75:10:6b:36:27:c4:35:9e:fe:ac:c7:
         a6:d2:75:b3:66:d1:1e:67:af:75:75:a9:5d:08:ca:ff:a9:ba:
         28:60:b5:fc:c5:c3:31:6d:b5:c7:ef:bb:81:fe:13:bf:2c:de:
         36:1d:39:93:6b:03:6a:90:00:24:9f:4a:27:56:5a:7e:4b:fd:
         37:90:3f:38:cb:37:90:59:d2:70:f1:6d:14:8c:1c:d3:a2:5f:
         c5:ff:b3:48:ba:53:6b:a2:d4:6f:a4:d5:c5:1b:d5:e6:38:5b:
         1b:fe:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:01 2026 by rpki-client