Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa
File:                     7D745B8C800411EB9398C63EC4F9AE02.roa (raw, json)
Hash identifier:          RXizLgbeQx66F3KEgqGb3YclpFNAztOvxV6H3stthrE=
Subject key identifier:   B4:C7:D4:5D:6A:C9:EB:EE:01:84:0D:E2:33:1C:12:81:03:DB:37:22
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3797
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:47 +0000
ROA not before:           Sat 22 Mar 2025 15:01:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141711
IP address blocks:        59.103.24.0/23 maxlen: 24
                          59.103.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14231 (0x3797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:01:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4855f-960e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:dd:13:b0:44:7f:53:41:38:3d:8c:7f:d1:
                    e5:2e:a0:9e:3f:b8:0d:26:6d:99:f0:e6:8b:d0:ac:
                    9a:c4:04:55:d7:01:16:98:39:e1:82:e5:d6:e8:1e:
                    90:4b:40:d4:10:93:18:2d:87:d4:f2:94:ab:1c:df:
                    36:30:0f:22:1f:c5:7f:cb:c4:6d:61:89:ab:3b:b0:
                    14:ec:68:43:8e:82:b0:4f:43:b1:df:a0:46:ec:24:
                    8d:37:4a:43:46:f5:e8:70:99:3b:c1:0a:ea:ec:6e:
                    36:cc:fa:0d:cc:d2:97:74:1b:05:66:71:e0:0f:22:
                    ef:90:47:d1:3b:26:62:d7:05:53:c3:0a:47:55:d7:
                    35:c2:a1:c0:04:c9:2c:c9:d4:33:6a:35:d2:f1:7c:
                    b9:a0:0d:56:1c:d7:10:25:82:f8:fb:2e:74:07:ac:
                    08:d7:fc:26:74:8d:24:18:b7:ac:22:ce:b3:59:61:
                    4b:e0:de:14:79:7e:b3:ac:6f:9e:35:cb:3e:d1:7e:
                    5c:d2:1e:59:05:1e:6a:9d:74:60:93:69:af:87:65:
                    9b:d8:12:ea:d9:a0:88:63:1c:fd:a5:94:35:14:e0:
                    a9:6e:62:0b:71:9b:e9:90:ab:22:7e:83:2e:b8:aa:
                    5e:91:25:56:8e:e4:ec:af:6c:8e:d8:74:f4:b3:76:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C7:D4:5D:6A:C9:EB:EE:01:84:0D:E2:33:1C:12:81:03:DB:37:22
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.24.0/23
                  59.103.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:14:45:4d:5d:81:47:5f:66:7f:e9:a1:d5:52:9d:9f:42:03:
         3a:51:4c:2b:66:d0:27:2e:a6:d2:67:d2:6c:6c:e0:cd:3a:dd:
         c9:94:d4:16:1a:b3:71:4a:11:a7:df:59:b6:7e:cb:59:bc:36:
         5f:15:35:d3:c9:96:21:2c:a3:52:df:94:2f:da:14:d4:77:0b:
         0c:27:bb:5a:a6:0c:69:d1:67:45:22:7a:cd:ac:4e:32:3e:bb:
         f9:50:1b:5b:ec:f0:a0:6c:9a:b9:c1:0b:d0:a2:70:ea:c8:3e:
         02:15:35:c0:49:ce:ba:31:e0:ea:b1:c1:4f:34:b2:3a:d7:15:
         c3:c8:47:a6:fd:c5:3a:3e:2c:72:ce:66:dd:02:58:85:c0:65:
         33:ea:13:62:69:06:ec:c0:7a:fe:eb:b2:91:26:27:e0:3a:fb:
         cb:f9:4d:14:28:b1:6a:26:63:9a:87:6e:e8:2c:55:20:46:68:
         59:da:9a:05:96:06:cf:c9:e5:65:fc:93:53:9d:3e:55:39:67:
         4f:6c:60:22:c3:12:5b:d6:3d:e6:88:e3:2a:64:ea:d7:69:c5:
         03:2a:fe:9a:2e:00:09:7c:d7:b7:cb:ae:8b:eb:42:a8:b2:85:
         08:b7:b0:dd:5c:39:16:52:14:69:04:4f:c8:6b:f2:7c:b9:7b:
         dd:a9:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:10 2026 by rpki-client