Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/CA9D82E8688511EC999E8B70C4F9AE02.roa
File:                     CA9D82E8688511EC999E8B70C4F9AE02.roa (raw, json)
Hash identifier:          ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=
Subject key identifier:   1D:C7:8F:16:C6:81:75:7F:2F:64:65:EA:83:60:76:DC:D8:5C:12:11
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       07CF
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/CA9D82E8688511EC999E8B70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:34:45 +0000
ROA not before:           Thu 12 Feb 2026 21:18:28 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141472
IP address blocks:        103.159.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Feb 12 21:18:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46aa4-2dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:26:67:67:36:ae:71:5c:93:a3:02:d9:21:
                    3b:7e:db:88:fb:e2:3d:c5:ae:0c:cd:30:c8:99:a3:
                    61:45:fa:46:72:48:aa:42:87:bc:52:0a:76:7f:a8:
                    52:2a:bd:2e:b7:b7:f8:a1:dc:31:85:a8:f4:06:73:
                    99:74:22:32:fd:78:1a:b6:be:66:e0:12:60:37:10:
                    1e:e6:88:5e:c7:bf:a3:53:37:73:83:6c:d5:a2:9e:
                    72:ed:8f:32:3e:a2:f7:da:64:b9:96:96:79:90:23:
                    c0:84:a8:4a:6f:3a:97:9b:83:04:dc:f4:03:99:47:
                    0d:f0:50:c5:df:c6:73:64:c8:38:1e:86:bd:6f:9c:
                    35:3b:63:aa:79:23:ed:3f:ac:fe:f4:1a:30:b0:ed:
                    40:52:26:e8:75:17:bd:b0:09:5c:61:1b:ae:b4:40:
                    71:0a:f9:a2:db:7c:77:77:8d:27:43:f0:ec:72:2e:
                    b9:ca:7e:a6:84:50:84:5b:26:c1:7a:77:49:9a:48:
                    1c:2d:24:9c:59:41:ea:9a:1a:82:16:07:01:21:c8:
                    c9:18:93:0a:e7:7a:cc:8b:3a:e2:c4:a8:d0:94:fb:
                    26:88:c8:16:0e:da:29:de:6e:e4:b1:db:1a:f5:57:
                    80:8c:f2:ba:04:15:82:ad:2a:ed:b0:71:8b:98:c5:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:8F:16:C6:81:75:7F:2F:64:65:EA:83:60:76:DC:D8:5C:12:11
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/CA9D82E8688511EC999E8B70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e2:26:4a:b9:b1:38:20:b7:95:03:e5:59:6a:9e:79:c2:9e:
         c4:4c:ef:d2:f1:e8:5a:f6:27:7c:2d:9f:24:0c:fb:8a:d9:23:
         26:3e:6f:bc:62:d2:e7:23:e4:8b:44:da:4b:59:8c:c2:d1:8b:
         33:b4:ec:bc:8d:1b:6a:8e:64:ff:28:ca:ab:8a:c7:f5:87:95:
         ab:2d:68:a9:4b:70:5e:81:8d:68:fc:ea:a7:62:72:27:39:41:
         9d:aa:89:90:5a:6c:52:a1:5f:03:5f:cc:3f:b5:29:6b:1c:2e:
         f1:6c:36:94:31:0c:65:08:3f:9c:a9:cc:07:00:85:e9:76:ad:
         eb:28:67:d2:05:55:e4:fd:c5:2b:c3:3b:88:af:cb:76:72:74:
         2d:63:b1:14:4a:04:01:69:ad:20:b2:2f:7d:fc:bb:27:ca:07:
         61:c6:15:a2:36:eb:32:b0:8e:f7:a4:6e:11:9a:6e:47:dc:bf:
         8a:7c:7e:02:f2:14:40:d1:60:b0:a5:0b:30:d9:1b:3b:36:c1:
         f5:25:0f:f8:72:ed:93:76:78:39:2e:1f:7b:25:f2:12:a2:bf:
         0a:8e:fe:5a:ee:7f:2a:d6:63:ac:bb:63:63:59:3c:ab:d8:b5:
         e1:c6:0b:fb:e1:b5:ad:34:7b:13:a3:89:da:10:a3:d5:57:5d:
         a9:6a:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:54 2026 by rpki-client