Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/99F51284A1E911EDAD7CE929C4F9AE02.roa
File:                     99F51284A1E911EDAD7CE929C4F9AE02.roa (raw, json)
Hash identifier:          lf68hMOfZ/T65yk1q4mtj4OSXwkBVD1LwcuwEotYLTc=
Subject key identifier:   C8:72:12:A7:74:DE:F8:13:28:1C:9A:B8:FD:71:77:B6:4B:57:45:C2
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       0471
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/99F51284A1E911EDAD7CE929C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:22:45 +0000
ROA not before:           Sun 01 Mar 2026 14:22:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149442
IP address blocks:        103.179.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
                          rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: Mar  1 14:22:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44bb5-e7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:6f:63:98:a8:d0:98:32:71:db:74:d2:fa:
                    b2:cb:75:d8:fe:72:0e:0b:b5:01:59:e6:95:a9:0c:
                    d8:a9:f9:cd:48:f2:b5:59:a7:76:34:73:97:d3:4b:
                    41:04:e5:cc:80:97:b5:de:85:31:18:6b:1d:64:d2:
                    c7:7a:61:39:93:01:c0:65:2b:ee:e2:2f:91:c3:fa:
                    d3:dd:78:1c:3f:5c:d9:91:23:4d:23:9b:34:81:84:
                    ed:d5:b5:68:f7:47:50:9c:0e:b0:7c:8e:76:d2:4d:
                    93:38:ca:44:19:99:70:40:44:04:28:98:4f:60:f1:
                    e9:69:4e:e7:ee:66:15:6b:a8:25:10:74:cd:5b:3f:
                    06:a2:39:47:77:b7:d9:4a:47:d3:91:bb:2b:4d:7a:
                    68:f6:ac:2b:6e:5a:57:cc:e4:9c:bc:02:01:34:5a:
                    fe:97:b3:91:72:bd:9b:38:38:5b:f5:08:dd:e7:9a:
                    60:c2:07:0e:11:90:67:6a:df:b8:0b:9c:d0:a0:d6:
                    18:09:ac:2b:f6:e1:60:3b:5a:90:93:e7:a3:f8:5e:
                    96:d3:06:96:36:b6:df:9b:aa:fc:21:c9:e6:5f:a1:
                    53:c1:7c:89:70:2b:74:c4:75:2b:48:df:4c:5a:28:
                    91:96:ea:55:e3:2b:e8:d3:d9:c8:0d:33:b5:7e:23:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:12:A7:74:DE:F8:13:28:1C:9A:B8:FD:71:77:B6:4B:57:45:C2
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/99F51284A1E911EDAD7CE929C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:81:56:30:e3:2e:18:1f:53:4f:47:4a:86:77:f4:bd:d3:08:
         e0:1f:b9:55:3f:38:b8:6a:0b:f4:be:57:1b:93:89:6f:cb:6c:
         3c:26:d4:74:df:95:53:4d:30:d9:f6:0c:27:f3:13:45:be:70:
         ea:c6:82:86:7a:2e:98:da:af:b9:2f:c8:55:9a:ae:e4:63:36:
         ef:14:0a:88:9e:fc:c6:f8:fe:07:98:80:0a:43:32:29:c3:53:
         fc:eb:c9:44:9b:73:db:2b:80:79:96:67:ba:d6:5b:d6:46:d9:
         29:13:e6:4b:b7:e4:0c:82:62:ae:e5:67:ea:6b:8b:7a:f2:45:
         ab:1f:49:a5:b9:d0:1c:e2:b5:34:c2:9f:f7:2a:c1:45:b7:eb:
         70:43:71:43:e5:bd:b5:dc:f0:e9:1f:17:a6:aa:e7:bf:f6:07:
         4b:4c:4e:7e:1d:69:8a:f3:36:c3:41:98:1a:db:33:96:83:a7:
         ce:39:89:57:2f:d0:bb:d1:3e:f2:a4:b4:52:23:f7:80:54:70:
         92:77:2f:e6:29:72:aa:81:c4:e6:39:17:d3:46:d1:f6:38:c9:
         6c:54:98:3a:fc:7e:5c:dd:d0:05:b2:8d:80:de:c8:ef:70:53:
         ab:2e:d4:a3:f9:60:57:26:6c:09:b2:a9:52:8a:16:ec:99:be:
         32:1d:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:03 2026 by rpki-client