Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
File:                     4C93B0C80F8E11EEA5B58045C4F9AE02.roa (raw, json)
Hash identifier:          o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=
Subject key identifier:   E7:D3:CC:49:86:A5:5C:96:CC:14:52:85:31:F0:41:73:82:8D:18:DD
Certificate issuer:       /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Certificate serial:       020F
Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:15:31 +0000
ROA not before:           Wed 03 Sep 2025 03:51:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        103.155.90.0/23 maxlen: 23
                          103.155.90.0/24 maxlen: 24
                          103.155.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
                          rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
        Validity
            Not Before: Sep  3 03:51:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a411c3-d63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:0a:56:69:66:9b:74:fa:e4:9c:22:98:b9:
                    ca:4b:be:3d:08:15:4c:e2:8b:f6:cb:fa:e7:24:8a:
                    f4:46:f2:55:ec:7c:2c:55:fd:ac:09:b7:b1:4e:f0:
                    2e:c1:98:5f:3b:cd:b6:12:6b:87:b3:aa:3f:05:20:
                    55:51:db:4d:56:a8:0a:18:e4:68:49:25:81:9c:f2:
                    4e:ef:30:b1:95:5a:fa:a5:78:cf:f8:c4:dc:a2:1c:
                    06:89:f7:4e:7d:a9:e5:c4:c1:7d:39:6c:0d:b5:fe:
                    87:32:7b:09:65:bd:19:e8:cd:9e:8a:92:4e:0d:7d:
                    93:da:7b:ee:54:3f:c9:ec:35:df:7b:fd:8f:88:76:
                    4c:61:aa:2d:36:b9:95:d0:e7:fd:56:d2:d2:18:93:
                    19:e2:02:c5:98:fe:06:d9:53:fc:f0:e6:52:83:f4:
                    2a:ac:a8:14:8b:53:be:ae:49:5e:fe:b9:a4:39:bc:
                    80:7b:9f:94:62:02:9a:9b:d6:07:f5:dd:28:12:88:
                    2e:f6:fc:4d:97:d7:62:e8:a9:13:65:f2:18:df:51:
                    5b:e2:fd:f1:02:66:2d:1d:45:f9:a8:6b:c7:bc:6b:
                    ef:a6:5c:0c:f1:f4:ba:61:e5:91:b3:1b:7d:40:50:
                    4e:3d:7f:3e:72:e4:65:c1:4f:04:ad:4c:dc:c0:fa:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D3:CC:49:86:A5:5C:96:CC:14:52:85:31:F0:41:73:82:8D:18:DD
            X509v3 Authority Key Identifier:
                keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:61:d1:73:d6:02:60:ba:df:48:73:25:d3:d1:ac:49:99:
         59:e6:2f:16:3e:48:9c:a4:eb:49:fd:82:43:66:a0:32:5c:fb:
         4d:e6:b8:5a:a5:e5:b4:44:d5:c6:a3:57:48:d5:2e:c9:a5:f3:
         d0:e0:80:7a:df:70:44:9c:50:49:d0:a4:31:19:c7:47:f2:c7:
         7a:de:a7:f1:5e:d9:b7:52:b1:54:a4:e7:eb:16:56:98:67:8f:
         d5:63:13:9f:c7:b8:ad:3a:46:30:c5:47:e0:3d:e2:1b:98:03:
         a3:9f:56:f8:35:85:1e:63:23:66:03:c1:cd:5a:e8:32:c7:d3:
         c4:ca:fb:35:bb:17:dc:0f:16:e3:5e:43:91:68:03:7d:86:65:
         5d:33:47:af:73:a7:60:3c:7b:e5:07:ea:07:cb:47:0b:6f:02:
         ed:68:f5:c4:ac:c9:9f:37:e9:b7:6a:89:8d:8e:fa:4a:bd:ed:
         34:cf:17:c4:fb:ce:ee:2a:7a:73:76:72:a0:d9:d7:89:e4:a0:
         07:a6:80:6f:ab:e8:07:b3:41:4f:74:8b:4b:58:61:19:87:95:
         65:bd:04:c2:ab:c6:95:67:11:08:90:fa:cc:ca:92:57:1c:4f:
         a3:f0:03:f2:fa:ec:52:ac:f7:12:ab:ee:69:3c:fd:a6:bb:29:
         11:56:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:01 2026 by rpki-client