Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa
File:                     E28853A6F50311F0BCFB4C27526F56BC.roa (raw, json)
Hash identifier:          iH8N2/EZ0A3FgzosMJpb5IUjNTYPsThENasr1YI4C1Q=
Subject key identifier:   6A:AB:EA:0A:C2:BB:CA:67:62:78:62:12:AD:07:09:BB:48:C5:F6:1B
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       06A2
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa
Signing time:             Sun 01 Mar 2026 17:42:46 +0000
ROA not before:           Mon 19 Jan 2026 06:55:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133178
IP address blocks:        103.90.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: Jan 19 06:55:48 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47a96-b85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:7e:92:60:72:7f:c5:d0:87:35:64:08:cb:
                    2e:d7:fc:0b:6c:a9:a3:05:52:bb:38:c8:3a:b6:37:
                    8b:5e:19:31:5e:01:a6:3c:32:86:0e:af:58:bc:89:
                    06:70:24:eb:4c:73:76:24:35:68:41:c4:62:e0:de:
                    ad:33:2a:69:e0:a3:69:31:7a:dc:08:68:28:d4:4c:
                    92:a5:2a:7f:25:3d:ac:70:0c:84:7f:06:6d:79:54:
                    d2:70:cc:6f:d1:ad:fe:8e:1c:c8:f7:57:69:cd:4e:
                    ef:29:6a:ad:ed:10:2c:e4:b7:5c:77:9a:e1:d1:d4:
                    01:78:29:49:c1:e2:91:ab:e4:ee:eb:36:f4:8d:00:
                    cd:3c:3d:de:9d:1c:b3:ea:77:d5:48:d1:b6:1e:1d:
                    1a:56:29:8d:78:d3:95:70:5a:0b:51:54:7f:b2:56:
                    98:c9:e6:8f:dc:98:d2:f3:0f:51:41:e9:6e:46:08:
                    32:b3:2b:e1:94:08:b7:7e:94:32:fb:9e:c8:2d:82:
                    00:17:fc:03:de:d5:7e:89:ed:ed:45:df:e8:ce:c4:
                    18:e3:64:f8:c2:00:da:53:cf:87:63:bb:bf:34:46:
                    b9:00:4c:fb:e9:96:fb:77:f3:60:f0:59:d5:d7:df:
                    1f:48:d5:83:30:d2:55:6b:c2:74:cd:3c:44:74:20:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AB:EA:0A:C2:BB:CA:67:62:78:62:12:AD:07:09:BB:48:C5:F6:1B
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:04:ce:72:24:b2:aa:7b:b7:81:ab:9c:c2:1c:77:6e:94:d6:
         34:c5:d9:fb:19:ee:51:19:a6:b0:6a:fc:cc:19:b1:78:f5:56:
         30:88:e3:a4:14:ab:99:31:51:65:f8:d8:e1:77:8a:e0:0c:69:
         ca:6b:37:1b:46:04:11:96:cd:ac:de:ae:b1:65:d1:4c:f8:07:
         2f:93:89:19:21:8c:6c:c3:fa:99:72:ac:86:2c:c6:4e:16:81:
         82:27:bf:ab:84:df:c5:6c:57:8b:1c:f6:14:b9:a6:ff:8b:31:
         59:74:75:7e:77:cf:cb:f6:3f:42:0f:19:67:b6:dc:c2:0c:8b:
         c1:5b:49:38:90:71:d1:23:83:02:33:a5:74:e1:7f:00:8f:1f:
         5d:ad:5b:1b:df:fb:e4:03:69:25:c6:f6:2d:47:b9:02:d9:5d:
         d2:1a:30:98:98:f8:a0:ef:3a:6d:f9:14:58:ca:3d:3f:85:64:
         a8:9d:08:f0:28:ea:a6:71:3f:c9:c8:0f:0f:5d:2d:b2:3d:01:
         4b:01:9e:c9:d1:ed:95:41:02:cb:96:e1:74:83:24:41:0b:b5:
         84:aa:36:0c:0c:07:c1:b4:4f:a0:ba:97:5b:5b:6b:cf:f3:f1:
         33:e2:86:d5:4d:93:13:c6:49:c4:7a:3d:79:aa:9f:23:2d:6f:
         d3:ad:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:05:18 2026 by rpki-client