Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/9535628E5C0D11EDA7191A0AC4F9AE02.roa
File:                     9535628E5C0D11EDA7191A0AC4F9AE02.roa (raw, json)
Hash identifier:          UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=
Subject key identifier:   45:3D:5A:85:5C:14:67:40:B5:BB:9E:F7:43:60:EA:84:2F:2E:19:81
Certificate issuer:       /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial:       0292
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/9535628E5C0D11EDA7191A0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:29:58 +0000
ROA not before:           Mon 03 Nov 2025 02:16:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136521
IP address blocks:        103.91.185.0/24 maxlen: 24
                          103.91.185.0/25 maxlen: 25
                          103.91.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
        Validity
            Not Before: Nov  3 02:16:23 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44d66-94bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:ee:6e:57:8d:3a:a0:2f:14:17:e7:62:de:
                    69:b0:7c:37:3e:9a:52:20:c3:cd:3e:b8:f4:12:94:
                    c4:6c:1a:53:50:84:c5:e7:24:4d:4e:88:7c:6e:a5:
                    27:2c:e3:31:05:59:8a:83:0d:41:f1:ef:bf:cf:9e:
                    fe:fd:06:ef:e8:22:6f:f9:aa:7c:00:84:22:91:f7:
                    c6:aa:43:41:99:03:3a:07:36:ef:af:80:2c:3d:81:
                    23:b3:12:6b:a7:9d:28:18:dd:d3:80:7c:59:10:89:
                    09:68:26:53:01:74:7a:29:aa:74:80:fb:90:2c:ab:
                    b3:cc:12:13:36:fb:1c:13:8d:40:54:fc:2d:8a:35:
                    40:02:80:e7:9a:02:ed:e2:ec:2d:1f:a2:c8:d8:8c:
                    ad:6b:59:72:a9:7c:3d:a0:9c:06:53:0f:41:cc:ad:
                    db:14:b7:44:37:71:4f:f4:8e:68:dc:69:4e:42:c0:
                    b1:99:43:1c:e2:a7:d7:22:d6:65:ae:5c:ee:a5:f0:
                    71:8a:ac:d0:2a:7c:79:f3:07:d9:3e:19:dc:af:cd:
                    9f:4a:77:5b:e4:de:b3:86:7b:7d:6f:8d:ac:c2:a5:
                    d3:e8:9b:0d:c8:93:b3:e1:25:ee:f4:a7:3d:72:97:
                    c7:22:a0:31:d0:08:ca:2b:30:91:46:2c:5d:c0:66:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:5A:85:5C:14:67:40:B5:BB:9E:F7:43:60:EA:84:2F:2E:19:81
            X509v3 Authority Key Identifier:
                keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/9535628E5C0D11EDA7191A0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.185.0/24
                  103.91.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:ff:9f:89:72:65:48:1b:f3:1b:07:57:3d:ab:a3:81:67:
         09:a6:c5:36:6c:ac:e9:5c:35:98:e8:63:43:6d:7d:55:64:7c:
         23:71:90:b3:38:78:a5:f2:9a:71:db:e8:63:aa:16:f5:45:59:
         e5:7d:fc:cd:a9:5e:90:9a:75:1e:7c:85:0a:04:93:6e:a1:52:
         a0:16:6b:46:21:14:31:e1:87:b7:88:20:75:b7:45:5a:08:cd:
         0c:10:49:e3:91:d1:d9:f1:6a:6e:b3:14:46:13:5e:fc:b4:4a:
         c3:33:76:00:e7:28:58:4d:90:af:b4:cf:9d:d7:e8:a8:fc:3d:
         d5:f5:3f:88:4b:ac:bc:c7:20:b8:b4:90:74:76:ec:e4:19:23:
         c6:21:d0:e1:81:e2:d4:88:94:5e:37:8b:58:39:3b:4c:80:b0:
         2f:3e:cf:e8:32:90:0b:9a:94:df:0e:cf:dc:ca:84:c2:89:59:
         56:03:cd:95:61:dd:8a:8a:e2:b2:f7:d0:dd:62:5d:9a:01:cb:
         c0:14:32:10:01:75:cf:d4:51:5a:de:d2:89:f7:cf:a1:08:7e:
         a7:91:65:da:29:b2:42:d7:04:8c:fa:3a:8a:8d:ca:42:28:ae:
         0e:b4:1c:a3:9a:a8:2e:cc:be:c7:57:c2:58:4b:f6:d8:f5:ab:
         88:3d:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:58 2026 by rpki-client