Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa
File:                     9D2302A4F1D011E88D564045C4F9AE02.roa (raw, json)
Hash identifier:          95U1WsLRFD6a7A2se5iCtflZlPkeObhmQCuiY8+IvnI=
Subject key identifier:   1F:A8:FA:88:E8:4B:EE:88:1D:56:12:88:04:7A:F0:B6:38:49:A2:4C
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1B45
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:14:38 +0000
ROA not before:           Mon 26 May 2025 16:25:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136424
IP address blocks:        103.87.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6981 (0x1b45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: May 26 16:25:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42dae-560b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:3d:9b:75:69:e4:59:e0:b8:53:8a:c1:f0:
                    df:98:ee:b1:19:b8:1f:b9:53:a0:72:11:d4:ee:91:
                    44:2b:16:b1:d2:e8:b6:ff:1b:1c:a0:f2:1f:40:2f:
                    de:49:56:69:95:16:b9:dc:da:78:2f:d2:ad:ca:46:
                    49:d4:5e:19:2b:ad:09:9d:43:f0:57:be:e2:5a:fd:
                    f9:63:a3:ea:17:29:76:25:bc:90:ae:2a:a9:64:30:
                    5b:5c:cd:6d:7e:67:30:80:f9:16:8f:e4:b1:ed:2e:
                    15:9b:e9:1f:8b:28:40:1e:bb:de:b2:c9:93:5f:6d:
                    3f:c0:90:5b:b8:4d:a2:38:7b:ce:8b:02:95:e6:4c:
                    43:25:81:19:b9:93:73:00:47:3b:bf:14:e8:ee:62:
                    33:9c:a3:a2:41:d8:0b:33:9d:07:df:9f:55:d3:b4:
                    b1:94:8c:15:fd:4a:a9:9f:17:83:5e:b7:3b:ee:cc:
                    b9:ce:24:a3:1f:7e:b0:18:a4:15:de:a6:df:db:2f:
                    69:89:f0:1b:97:c2:c9:7b:d4:7a:9a:ed:6a:3e:a7:
                    f9:08:f7:fc:b2:32:50:47:a7:f8:dd:57:0c:df:34:
                    78:b1:2d:7d:6e:56:2f:c4:27:80:f2:ef:84:23:5d:
                    a4:f2:b8:83:10:56:bc:7a:d2:ce:08:79:ed:1a:94:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:FA:88:E8:4B:EE:88:1D:56:12:88:04:7A:F0:B6:38:49:A2:4C
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:a1:4b:e7:b9:bc:4d:cd:4e:f6:64:ae:5b:0c:5b:76:e9:
         67:4f:75:57:8e:a6:d9:41:2e:79:a8:cc:c2:1e:b4:9e:ea:e8:
         ce:4a:8b:ba:ed:91:a6:e6:f0:96:2f:40:b7:ea:4b:6b:b8:e7:
         db:3e:e8:d7:db:72:f1:a8:5e:48:f5:86:c0:9a:f1:3a:d8:ca:
         1e:6f:dc:5f:94:3d:49:5d:4b:cf:0e:69:5f:b0:db:6c:08:9e:
         41:3e:21:bb:40:12:d1:47:1e:81:42:bb:87:4a:46:85:0c:3f:
         65:af:d2:28:d8:a6:d6:8b:7d:c8:e3:05:7e:75:b6:95:29:cd:
         b7:49:84:ad:d0:8f:38:a7:d3:a9:f4:8a:a1:bb:94:5c:5f:85:
         82:85:6e:1d:b1:57:a7:8b:29:66:a5:1c:ca:1c:13:6c:85:a3:
         cb:e2:23:e5:0f:bd:0a:08:5d:ae:f4:03:be:39:5e:4d:3f:be:
         86:4b:1c:4a:f0:c6:68:1a:de:82:46:56:02:0f:e3:0b:2f:61:
         6f:42:1c:11:54:96:18:49:f2:a3:c0:9e:1a:47:ce:c7:e8:4c:
         cf:11:65:f9:2c:e5:e5:bd:83:8e:0e:ab:d4:20:39:38:cd:60:
         a5:68:30:b8:ef:b1:e3:1f:ad:80:01:1c:1a:c8:af:74:e7:72:
         07:1e:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:23 2026 by rpki-client