Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa
File:                     98B1A08E256211EEB175EF31C4F9AE02.roa (raw, json)
Hash identifier:          QJ4e16NsI/dZu1qX0OimYIx1FzqVNlcCmqCrTv8ABDU=
Subject key identifier:   09:2E:AC:90:C8:E9:E7:B4:BE:E5:B2:0B:A5:06:DC:8E:39:B6:A8:83
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       01EF
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:35:05 +0000
ROA not before:           Mon 01 Sep 2025 03:50:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     141723
IP address blocks:        103.239.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: Sep  1 03:50:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ec29-0f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:85:71:a8:37:fd:72:6b:a0:bf:73:40:85:
                    5e:dd:8d:a3:10:9c:04:6b:04:84:9b:2b:c9:5b:d2:
                    0b:dd:56:7b:d4:9a:ab:40:e9:6a:1c:ab:7a:54:4a:
                    2e:da:9e:a1:51:75:69:73:b0:61:db:49:c6:98:2d:
                    da:92:6b:7a:49:80:70:ce:af:81:42:91:ef:a7:01:
                    04:42:5e:fd:ad:a5:38:31:bc:8a:ff:f5:f4:15:74:
                    32:37:a0:5f:3f:5b:84:2f:2b:0b:a7:31:1b:64:bc:
                    d7:4a:5a:85:6b:fd:f4:10:e0:2e:d1:0f:ad:b6:cd:
                    56:d1:0f:b6:57:3a:24:9a:96:8f:f3:58:e9:e2:61:
                    47:09:5d:75:db:d4:dd:32:1c:6b:ca:29:19:6b:3b:
                    4d:1d:49:c7:c6:b9:60:19:9b:57:e3:49:74:ed:95:
                    49:c1:c1:4b:98:6a:6d:51:17:bc:d2:05:4d:f7:17:
                    dd:de:a3:e0:5d:71:9b:d6:6a:b7:e2:6d:b9:c6:ba:
                    bd:37:3e:18:c8:17:a5:ef:a8:5e:4e:f2:f4:bf:54:
                    a4:d7:7e:15:2a:e3:78:4c:ac:1f:b9:83:33:c5:1b:
                    f0:31:80:80:6e:12:6c:de:2b:b1:f5:31:b1:e8:02:
                    67:54:39:1b:10:ea:c1:10:b9:b5:ba:5d:c6:15:aa:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:AC:90:C8:E9:E7:B4:BE:E5:B2:0B:A5:06:DC:8E:39:B6:A8:83
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:90:a1:90:0a:d0:f3:c8:9f:3e:c5:21:68:25:8f:24:b0:cb:
         95:51:ef:85:15:91:47:4b:cb:6e:f0:81:5e:a0:67:27:02:04:
         36:4e:ce:14:ae:1e:91:6b:2b:d6:45:16:b0:96:54:0d:53:70:
         6a:7c:9f:26:23:47:e7:a3:9a:1d:e8:a8:19:32:0f:42:65:42:
         bc:1b:eb:1a:a9:f8:cf:e6:4f:94:91:7d:e2:21:a3:37:de:48:
         c0:f1:8d:cb:e0:02:7e:8a:f6:72:89:6a:15:0a:67:36:25:b8:
         b8:bb:b9:7a:41:bc:9c:56:ad:66:17:45:55:4d:b6:51:83:e8:
         8f:32:0b:bf:f7:84:76:28:b4:d0:95:09:28:0f:9c:ff:fa:fc:
         79:0f:f2:f6:e6:07:2c:6f:33:2a:9e:f1:19:39:a2:ac:ae:03:
         e7:e2:c2:14:c0:8d:54:71:6c:ce:52:0f:6f:58:05:48:6f:15:
         5c:7b:5e:74:b0:12:55:0a:81:08:ee:32:82:f1:cc:ad:f3:09:
         d1:21:e0:64:00:d8:b4:5e:65:02:b1:ea:c1:d2:1b:0a:7f:a4:
         0f:25:f7:d7:59:3c:f5:70:fc:b0:86:cc:04:10:66:a4:28:9e:
         a1:27:f6:30:e3:d2:00:07:12:5d:db:b9:4c:3c:aa:c2:9e:4d:
         47:76:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:33 2026 by rpki-client