Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa
File:                     93D60566AE5B11ECB19C1569C4F9AE02.roa (raw, json)
Hash identifier:          Wrx7+0yyE0y6mHBZKupTJpJMKjJY9lireuqMWBGxSlg=
Subject key identifier:   0B:25:DE:60:8B:ED:48:5B:B7:3A:87:9B:7E:94:ED:74:31:39:AA:2A
Certificate issuer:       /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial:       03FE
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:17 +0000
ROA not before:           Sat 08 Nov 2025 23:15:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132829
IP address blocks:        103.174.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022 (0x3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
        Validity
            Not Before: Nov  8 23:15:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a42a51-1c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:4f:14:ec:c3:4e:ec:45:48:68:16:bf:bf:
                    5e:e6:9c:d5:9a:3a:dc:77:ce:91:53:11:31:ce:59:
                    28:be:5b:e8:8d:70:56:84:f6:d3:c3:1f:6c:b7:bb:
                    2f:c6:2a:72:98:d8:b2:f8:ff:91:46:48:5e:17:4f:
                    51:e4:3c:7f:f9:d9:0a:a8:f1:3a:67:fe:fb:59:a5:
                    d4:10:56:c6:9c:24:51:59:ce:7d:c0:45:72:c3:22:
                    69:e0:33:b2:a4:31:61:4d:fb:3e:5f:10:8e:a4:98:
                    9e:19:67:38:a4:9f:c7:8a:4f:ad:6e:72:14:18:8f:
                    07:23:69:ad:e8:ed:eb:15:3a:c4:18:b8:5e:ae:1b:
                    a5:ff:b7:20:48:f0:22:79:5e:4f:0e:b9:a8:c8:1a:
                    86:cb:fe:8b:d9:5b:d2:26:aa:72:d7:e2:5d:73:98:
                    30:ee:ce:6c:de:50:67:95:48:91:b8:de:06:9c:c9:
                    2a:9c:8f:73:04:f2:e0:2d:f2:ec:37:4a:1e:d4:09:
                    7f:23:b8:7c:68:d4:81:f5:06:44:82:fb:71:b8:91:
                    c0:62:0b:ed:9a:a4:74:2e:0f:47:c7:aa:e0:2c:62:
                    a2:e0:94:ab:67:16:88:7b:81:3e:a2:e8:05:dc:ca:
                    ba:b4:c0:05:44:d0:59:47:ed:8e:2c:59:44:f6:6b:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:25:DE:60:8B:ED:48:5B:B7:3A:87:9B:7E:94:ED:74:31:39:AA:2A
            X509v3 Authority Key Identifier:
                keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/93D60566AE5B11ECB19C1569C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:59:85:8c:45:5a:6f:01:b9:1d:75:f6:0a:c6:e4:9f:77:
         d2:70:0f:8c:9c:cc:be:94:50:51:59:21:7e:f4:11:04:cd:84:
         3d:88:f4:02:b4:a0:38:75:0d:8f:34:74:82:bf:61:55:a6:5c:
         be:4d:04:ae:af:fe:b8:93:aa:1d:a3:26:6a:d7:41:7e:00:43:
         fc:bc:b6:38:5c:ee:2e:80:0c:15:17:ae:6f:1f:2c:c6:92:1f:
         b3:3e:94:a1:16:18:63:7a:9c:3a:84:32:a5:e2:75:6a:f2:0b:
         b9:ce:ff:af:57:23:77:a3:f0:46:eb:90:06:60:57:bb:a4:b9:
         71:45:ce:6f:11:aa:18:27:36:6a:1c:3a:13:8c:be:73:83:30:
         da:93:f6:a4:9e:4c:91:a5:1e:b7:76:21:7f:8c:b5:8d:83:dd:
         7f:1d:7c:8b:e9:a3:0c:a7:28:31:f9:75:d2:16:5f:e1:41:d4:
         bd:0f:75:69:b1:f0:41:f0:9c:88:ca:76:37:d7:04:07:04:cf:
         4c:1a:14:51:11:5f:4a:7d:10:11:41:15:d1:fe:30:5d:35:54:
         55:3e:86:fc:3d:7b:99:0d:01:f9:3f:07:b7:11:a0:70:c1:03:
         f0:af:37:54:92:8c:60:fa:a7:44:27:20:5c:07:de:6a:6f:cd:
         c9:ae:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:50 2026 by rpki-client