Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa
File:                     94817492A7AF11EE9ABC7953C4F9AE02.roa (raw, json)
Hash identifier:          a+JITrVbN+Ag/tdfheF9+vrR3S73tXIGzQcoQl71IdY=
Subject key identifier:   5D:40:7A:DC:23:77:95:72:C1:C1:32:19:97:45:AE:6A:8C:37:11:E7
Certificate issuer:       /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial:       024E
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 03:22:57 +0000
ROA not before:           Sun 01 Mar 2026 03:22:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150738
IP address blocks:        103.76.194.0/23 maxlen: 23
                          103.76.194.0/24 maxlen: 24
                          103.76.195.0/24 maxlen: 24
                          2001:df1:e1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
                          rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
        Validity
            Not Before: Mar  1 03:22:57 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3b111-5d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:44:2f:0c:f4:06:06:e8:18:9c:b2:a1:44:
                    e6:a3:46:48:37:a2:65:63:e6:57:26:d0:ca:7d:13:
                    af:3b:93:89:61:7e:f5:bd:44:e6:1d:8a:2a:bd:e8:
                    ba:37:73:f6:70:20:44:2a:52:b2:0c:d2:5f:88:64:
                    06:15:1c:52:bb:e3:8a:9c:0f:0d:bf:59:30:13:e2:
                    b4:3a:a0:e8:1f:87:0e:9b:19:60:57:55:f3:1f:c2:
                    84:21:c5:9b:c2:d4:b1:a2:37:61:af:d3:98:b3:0f:
                    ca:3c:6a:9c:c0:e7:c1:22:22:a1:cf:92:9f:bc:c2:
                    5d:f6:6d:35:af:65:e1:76:4c:5b:d8:ec:ef:ac:c7:
                    4c:82:d3:13:e8:fb:33:51:81:80:cb:1e:24:13:17:
                    f8:1b:54:d6:e5:47:8a:de:46:3e:61:cf:4e:54:86:
                    06:5e:bc:31:47:32:a7:55:c5:9d:88:d4:01:21:30:
                    08:c1:25:60:1d:9c:88:cc:ba:a6:08:0d:25:66:e5:
                    9a:4b:42:ad:24:7d:53:c6:ef:d6:2b:39:8b:3c:ea:
                    e1:57:ff:fd:af:28:47:0f:75:9b:c2:f1:d1:55:e5:
                    3b:f7:30:7c:2f:d3:dd:76:86:94:ae:77:35:9c:29:
                    63:2c:41:45:51:af:e2:28:0f:20:1b:8c:af:05:8f:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:40:7A:DC:23:77:95:72:C1:C1:32:19:97:45:AE:6A:8C:37:11:E7
            X509v3 Authority Key Identifier:
                keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.194.0/23
                IPv6:
                  2001:df1:e1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:07:29:ae:f4:32:af:01:39:88:60:75:0b:a9:3b:51:bb:e7:
         34:ab:12:ae:89:16:75:27:5d:13:ce:40:05:68:24:25:63:fa:
         27:5c:54:e7:6b:1a:70:a2:16:d6:87:b5:73:a2:7d:bf:e5:3a:
         98:01:30:b3:f7:cd:62:72:67:47:af:b1:31:09:d1:c8:58:05:
         5f:0a:8b:74:42:e6:f7:28:f4:29:a5:0e:df:3d:dc:0d:d4:1a:
         3e:40:68:e4:3c:03:5f:db:db:14:20:89:3d:20:77:2a:c6:df:
         e8:69:0e:08:75:e9:56:22:de:2a:13:d8:9f:e1:12:05:a2:29:
         b1:1d:36:59:9d:17:39:eb:fe:5b:f0:e0:48:69:44:e2:e5:16:
         d1:2a:ae:af:cd:cd:33:3c:ac:7f:d1:58:b0:20:96:a1:81:b6:
         79:06:50:31:30:1f:fd:cc:bc:dd:78:7b:c6:a8:db:c3:3b:0f:
         89:a1:ba:9d:c1:d3:b2:96:e5:c2:4f:f8:e4:b3:a2:f9:4e:8d:
         31:d0:c3:a6:38:34:90:e3:9d:1c:c2:4b:00:14:34:b4:ff:6b:
         ee:fb:54:de:aa:9a:00:99:8f:50:f7:03:44:89:ad:60:85:ea:
         71:52:0f:0e:1a:e9:17:84:4c:ce:84:1e:7d:84:66:95:fb:fb:
         5d:33:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:08 2026 by rpki-client