Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
File:                     41C97D600EA811EB8E9A770CC4F9AE02.roa (raw, json)
Hash identifier:          DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=
Subject key identifier:   91:A0:61:DE:73:2A:FA:EA:44:AB:99:0F:37:22:98:86:8A:15:2D:07
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       081D
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:24:57 +0000
ROA not before:           Tue 02 Dec 2025 20:53:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141345
IP address blocks:        103.157.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Dec  2 20:53:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43019-4abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:eb:54:3b:c5:66:7b:54:79:61:6e:d0:35:
                    a9:cb:f8:34:a8:7f:dc:35:3f:43:f1:0f:1d:d2:21:
                    22:e3:ad:42:1b:02:b1:66:e2:c4:89:98:d4:0b:8c:
                    3d:7d:85:9b:70:74:04:70:06:c7:39:c5:74:65:f1:
                    c0:98:8b:20:8c:54:0a:58:0d:a7:2e:0f:f5:90:d9:
                    0e:6e:69:60:16:90:a0:09:57:22:28:cb:17:a1:e1:
                    49:ca:a1:4d:8a:95:92:96:cb:a4:df:e0:95:9c:ee:
                    f0:27:e4:9e:d8:c6:65:c6:25:bc:6e:09:46:60:02:
                    d2:6f:35:79:13:6a:27:2a:db:5b:07:8b:d3:d4:ea:
                    b2:b6:86:36:b0:b8:81:69:8e:f5:da:ff:ad:b1:e2:
                    ab:0f:3a:66:12:06:c5:bd:ab:9d:bf:b6:c4:c6:ec:
                    15:83:2d:92:42:11:4c:48:bb:e3:ca:52:9c:29:ad:
                    f3:88:e5:81:c7:be:bf:04:48:ef:30:a7:ca:95:0c:
                    f4:ce:2f:06:f6:7c:ef:00:c2:f9:8d:66:83:47:cc:
                    36:75:70:c9:ba:c4:9b:60:a2:72:f5:0c:81:8a:62:
                    11:88:0c:86:d6:39:55:e1:d5:23:16:af:6a:f1:78:
                    c1:2c:3f:ba:42:fa:88:1d:ea:64:1f:22:70:89:88:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:61:DE:73:2A:FA:EA:44:AB:99:0F:37:22:98:86:8A:15:2D:07
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:19:a0:89:ee:83:7a:4d:4e:72:de:94:41:77:1d:3c:45:
         27:50:59:04:a7:75:db:09:48:7e:fb:1e:9e:3e:e5:15:0c:20:
         2e:f8:ae:b7:79:06:d2:dd:f6:fe:e9:0d:0f:77:b4:8b:f7:04:
         6c:cf:12:cf:a4:af:6e:da:6a:34:d2:dc:62:f8:f6:dc:42:47:
         e4:3f:97:7d:59:47:29:d4:60:39:19:2e:5f:25:b8:1d:9b:62:
         a7:a4:2f:7c:1e:dc:6c:1d:be:e1:4e:29:4a:a6:b8:31:12:64:
         19:1e:8f:a5:3c:60:f2:35:24:61:f2:de:9d:4a:56:5c:e4:87:
         91:41:d8:c6:bf:fb:0a:b8:28:b7:5c:48:98:7e:ef:fc:38:fe:
         93:93:5f:5e:78:af:17:ce:7b:f1:04:fe:0e:b1:f2:79:87:98:
         c2:90:3e:d2:84:b9:5a:31:d6:8f:f5:b2:b2:d2:fe:30:38:a9:
         ca:5f:5c:65:ca:26:51:85:8e:76:2b:24:7b:83:56:1b:95:5c:
         d2:46:be:78:4b:9c:03:a7:a9:7a:4e:61:d5:06:94:d7:da:58:
         63:5f:28:69:6e:5f:96:eb:e7:de:6b:e8:39:d1:c1:0e:0c:18:
         d9:8f:62:a7:31:23:45:36:06:cc:d1:1d:6c:18:c9:93:f0:d0:
         59:98:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:19 2026 by rpki-client