Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa
File:                     91A7AB90D79F11EE8DB3B465C4F9AE02.roa (raw, json)
Hash identifier:          ToEnCszQwNdTGww6ZHqC+yX3aTtWgwuiMVQnb8/Owd4=
Subject key identifier:   93:22:B0:1D:FE:96:92:ED:08:B4:58:CB:C0:E2:BA:49:25:46:91:95
Certificate issuer:       /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial:       0223
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:59:54 +0000
ROA not before:           Sat 27 Sep 2025 03:31:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151200
IP address blocks:        103.69.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
                          rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
        Validity
            Not Before: Sep 27 03:31:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4384a-affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:2b:4b:63:0f:d4:f8:67:cc:f5:09:a7:78:
                    85:02:e6:34:5b:78:c8:99:19:91:c5:f5:6a:1e:08:
                    0f:6e:23:98:2a:26:a0:01:d4:7d:61:23:0a:28:51:
                    25:41:9b:46:83:e2:f6:d5:6f:4c:d5:19:41:4f:0f:
                    d0:04:52:78:03:4e:6c:4d:02:e4:4f:2b:fd:af:5d:
                    a6:0b:ff:c5:8a:8c:e0:14:00:52:b8:0c:91:e1:cb:
                    9d:91:27:4e:65:c1:0d:ff:e6:b5:2f:b7:40:06:f5:
                    78:36:ef:9d:76:67:76:9e:08:79:7f:92:c7:d5:9a:
                    7e:7e:a1:28:c4:71:32:b3:f9:84:e3:1b:32:f4:04:
                    d9:23:7e:e7:d3:8c:4c:58:43:ee:24:ca:94:64:b4:
                    f2:56:d9:45:fe:af:33:b8:91:92:5e:6d:a4:68:62:
                    3d:52:94:29:c1:de:d7:64:94:bc:17:d7:c2:0f:d3:
                    ee:2b:dd:c0:1f:a4:61:36:c3:ca:9b:83:5c:36:26:
                    4b:cb:4f:67:66:e6:4a:a2:e1:f9:36:2b:4b:6c:c0:
                    21:19:b7:6d:3f:c0:0b:c5:3a:94:29:a0:05:6d:73:
                    64:e3:33:61:1a:7a:82:96:ce:f0:7f:d2:9e:61:8b:
                    4b:8f:c2:b7:6b:9e:46:95:17:e4:cd:69:2c:a6:78:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:B0:1D:FE:96:92:ED:08:B4:58:CB:C0:E2:BA:49:25:46:91:95
            X509v3 Authority Key Identifier:
                keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:d0:80:f4:d3:32:af:9e:b1:84:4a:4f:c1:d8:71:6f:10:98:
         60:57:d6:72:19:99:85:76:1f:20:b2:e8:1f:67:55:c1:69:69:
         b8:e7:b3:72:95:ad:5e:13:d2:fb:9e:ad:f2:3d:23:0b:4d:5e:
         dc:67:94:b1:65:c9:5b:fb:62:5d:9f:cc:7b:25:a0:94:f6:9f:
         5c:35:1d:af:86:da:7a:05:bd:25:a8:70:9d:1d:34:46:ae:cd:
         d9:3f:07:b8:4d:f4:23:e0:f1:68:9e:50:a0:0a:90:89:11:93:
         77:e7:32:6e:62:5c:f0:d9:a5:bc:7c:21:5d:b5:71:cd:c8:a5:
         71:09:52:ec:a0:f2:e8:4c:b1:7a:a4:d7:f0:0e:97:1c:32:7b:
         1b:4c:92:cc:89:6f:97:cd:b1:e8:15:81:4e:7c:f5:6d:d9:1e:
         1d:e0:67:cb:61:88:4a:54:3d:a6:b0:07:2f:22:0e:b1:83:1a:
         ef:a2:25:35:e2:ce:eb:3e:07:0f:42:4d:85:f0:a3:6f:0c:18:
         2f:ea:e2:aa:7b:d7:a3:4a:40:ab:de:6a:23:60:78:39:7a:b7:
         f8:ad:40:a4:ad:ca:28:0a:ee:c4:34:8e:7f:88:a4:52:5c:af:
         91:99:85:17:12:4b:dd:77:7e:15:93:f3:4f:0c:f8:b2:35:29:
         a6:71:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:31 2026 by rpki-client