Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa
File:                     09DBF798B76311E6AF11523EC4F9AE02.roa (raw, json)
Hash identifier:          seFaisKP4ec6q9qFGmFZNr4zMFjr0TKVJUyLwQHYJXw=
Subject key identifier:   16:BD:06:DA:67:00:27:A8:35:55:03:FC:79:2E:98:48:36:D5:9D:1F
Certificate issuer:       /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial:       1DBD
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:40:58 +0000
ROA not before:           Tue 22 Jul 2025 16:24:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132248
IP address blocks:        103.71.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
                          rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7613 (0x1dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
        Validity
            Not Before: Jul 22 16:24:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a441ea-c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:b2:d7:28:d0:b2:bc:f0:5c:80:14:2c:4d:
                    d4:54:49:be:41:fb:1f:3e:33:1d:62:8a:9f:ef:c3:
                    d7:ba:c9:41:2a:c7:a8:66:95:b5:c5:9f:1c:91:8f:
                    49:42:d6:94:17:41:e8:cc:54:f1:72:60:4c:20:94:
                    7d:77:6f:e7:8f:e9:1f:50:20:78:0a:7d:e6:88:e3:
                    da:e6:24:5d:f3:cd:f3:fe:7a:b2:4e:88:f0:fd:0b:
                    fd:be:b5:d6:d2:c2:a2:ad:bd:3e:31:0d:2d:50:23:
                    f8:4f:39:b5:19:26:ea:ad:48:1c:4a:54:c4:53:67:
                    d8:33:55:35:7a:07:fb:f1:29:f6:62:f5:37:3b:03:
                    f2:0f:0e:19:6c:44:7f:1a:c8:95:e2:cd:92:5d:3f:
                    1e:9a:54:5d:a3:69:72:ba:2b:fb:81:e1:7d:be:3d:
                    04:69:e2:d4:d7:1a:ee:0f:36:01:f3:9d:70:eb:5c:
                    7f:85:26:0d:8c:c0:72:6b:19:38:e5:b6:36:f5:f7:
                    5e:0b:22:ee:31:6b:b7:1d:54:a5:f9:bb:a6:db:d2:
                    8f:21:ad:9b:c7:ec:25:28:ca:00:1f:34:ee:ac:6e:
                    04:87:a7:23:1c:b7:ab:6a:df:bb:1a:a2:c3:4b:72:
                    b7:ac:c5:16:8e:de:a9:11:ac:b1:2d:86:97:c7:45:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:06:DA:67:00:27:A8:35:55:03:FC:79:2E:98:48:36:D5:9D:1F
            X509v3 Authority Key Identifier:
                keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:75:8c:d5:9d:10:80:b0:ab:fd:5c:79:c4:fa:f5:c2:7b:
         9d:3a:27:19:51:b6:6a:93:81:0b:74:74:ff:90:c4:18:f0:17:
         f1:9e:d3:55:fa:e9:83:8f:c2:ce:2e:cc:cd:42:95:75:be:ff:
         c5:2f:f6:7b:30:b3:ff:b4:57:ad:5b:38:ed:23:d9:6c:83:92:
         e2:76:f9:c4:4d:f5:60:9b:72:05:32:7e:88:45:34:f8:a9:ef:
         a0:7c:6d:27:cc:be:6b:d6:05:70:69:1f:75:8c:d7:10:f7:4c:
         06:da:5e:15:ff:0b:99:55:4e:5e:cf:f9:47:e2:5b:2a:ec:66:
         3d:59:2b:fa:40:39:8c:17:9c:fa:dc:70:8a:b8:e9:06:a7:95:
         3d:55:9e:08:90:7f:f2:89:f7:aa:0e:a2:41:7e:58:21:09:b4:
         05:29:f2:96:bb:56:fb:25:c7:86:60:c4:82:5f:ff:42:04:97:
         f6:42:27:a5:e1:82:77:0c:11:5d:e6:0f:a6:8e:35:c9:6f:14:
         8e:b4:af:a5:e3:22:b0:ef:01:e7:fc:26:c4:5e:4c:83:f5:bf:
         e1:d8:7e:48:64:30:26:aa:12:1a:0a:ae:3a:d3:5c:90:00:66:
         aa:e8:51:c9:fd:37:3e:73:5d:dd:27:f8:13:fd:e2:b0:35:fd:
         c2:d5:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:36 2026 by rpki-client