Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E37129F0F50311F0BCFB4C27526F56BC.roa
File:                     E37129F0F50311F0BCFB4C27526F56BC.roa (raw, json)
Hash identifier:          wQe9yLAF43ljAO4crGexO1z5JEF2PnlYeQKpz08kYNE=
Subject key identifier:   47:20:1F:32:CC:95:12:5D:6C:30:5F:22:E2:0F:A4:42:CB:12:C1:56
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       06A3
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E37129F0F50311F0BCFB4C27526F56BC.roa
Signing time:             Sun 01 Mar 2026 17:42:47 +0000
ROA not before:           Mon 19 Jan 2026 06:55:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        103.90.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699 (0x6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: Jan 19 06:55:50 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47a96-118a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:1e:ba:5b:bb:c4:8d:17:3e:11:17:b1:91:
                    e3:8b:ab:eb:57:b4:73:8d:03:3e:8e:e3:20:41:c0:
                    22:f1:14:4d:c2:5d:0f:6b:5a:6a:f8:b8:46:86:bf:
                    57:1c:8b:69:9d:5a:fe:3b:4e:a7:cc:71:57:8c:66:
                    c4:f2:bd:77:0a:9c:0f:eb:f3:92:51:b4:0a:7f:97:
                    da:df:65:d2:cf:40:55:4c:c6:b5:4c:e0:ba:cc:ea:
                    9c:bb:b1:cc:0c:aa:19:52:5d:b5:49:53:83:b4:30:
                    42:c2:f6:61:d6:df:ed:49:ac:68:4e:4a:e5:3e:c4:
                    68:f5:ec:0d:28:2d:7a:f7:34:e7:59:cf:d3:4a:dc:
                    9f:d4:35:7e:83:26:af:af:95:a7:48:c9:0d:c9:c9:
                    da:af:32:3f:e1:1f:e9:33:72:b4:22:29:6e:b4:f7:
                    db:b4:f7:f4:17:22:96:cc:e2:3e:0e:55:cd:15:a0:
                    e8:d1:f0:4b:05:d9:59:74:82:fd:5e:ee:0e:36:fb:
                    d6:a0:84:82:87:18:2d:6b:ee:59:26:4b:30:8d:ae:
                    58:3e:95:a6:ee:c9:b5:ee:37:2b:5c:67:3c:27:7a:
                    81:65:2c:cd:68:d4:72:f6:92:bb:59:9b:16:c8:12:
                    bc:64:04:6c:c2:01:a5:a6:e3:d7:74:a3:c2:08:cf:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:20:1F:32:CC:95:12:5D:6C:30:5F:22:E2:0F:A4:42:CB:12:C1:56
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E37129F0F50311F0BCFB4C27526F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:5a:ac:56:5d:1f:e7:a6:b1:2f:7a:8f:4c:60:74:cc:9c:fe:
         b6:86:47:aa:4b:8c:be:c0:1a:0e:2a:48:e8:6a:5a:5b:fe:0b:
         97:4d:f0:91:5f:d5:7a:aa:3e:a4:99:85:c9:1f:78:d1:9c:01:
         27:6b:69:ba:1a:f3:a2:ab:82:a6:8d:cf:79:e0:c3:b7:0c:81:
         00:77:9e:18:1d:77:c1:db:30:ab:34:e3:d1:ee:fd:6a:88:60:
         a1:2d:13:b2:af:c8:c7:dc:69:87:50:e4:12:5b:14:15:53:e8:
         f1:de:37:40:c1:b4:09:fb:07:28:be:04:15:d3:8c:8a:3f:5b:
         ec:0c:6c:82:e2:83:25:e1:36:58:22:10:24:51:85:52:8c:d2:
         d9:28:2d:08:00:aa:a1:8c:d0:9d:2a:db:02:bd:9b:a3:57:ed:
         2e:51:7b:8d:cc:fe:10:b6:13:5a:06:f4:41:5f:27:8f:7b:da:
         e3:4c:25:5f:fb:f5:80:1b:10:39:29:1e:10:54:6d:47:61:b3:
         e6:ae:3d:b5:2c:13:13:35:8b:80:65:6d:e1:84:c7:a5:2a:97:
         09:d9:86:43:4b:40:90:f6:14:b3:ba:f2:fb:47:1f:82:0a:d2:
         c8:15:5a:00:fa:bb:fd:f7:9f:9b:54:af:78:82:e3:d0:80:e9:
         11:dd:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:46:56 2026 by rpki-client