Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa
File:                     1B047818141E11EFB957692CC4F9AE02.roa (raw, json)
Hash identifier:          LCyeNaqPqT9G0moH5PlRfz2W9lwI+3JMA6S2rnxBpHQ=
Subject key identifier:   7F:BA:07:73:4D:3B:7B:94:CA:C3:94:3B:F7:34:8C:48:AC:45:BC:D5
Certificate issuer:       /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial:       077C
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa
Signing time:             Thu 26 Feb 2026 21:18:26 +0000
ROA not before:           Thu 26 Feb 2026 21:18:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132492
IP address blocks:        103.148.251.0/24 maxlen: 24
                          203.0.184.0/21 maxlen: 24
                          2001:df3:280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
        Validity
            Not Before: Feb 26 21:18:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a0b8a2-26d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:e1:3f:c8:da:c5:97:95:11:cf:b0:84:a4:
                    ae:53:56:36:bc:cd:fe:5d:8b:55:67:a4:25:34:f0:
                    55:6c:9a:df:02:bb:1f:c7:5f:90:84:2b:f4:7c:5e:
                    c5:c3:14:40:4e:ab:22:5c:50:2d:b5:4f:71:94:30:
                    0f:21:17:53:c6:07:e4:62:04:77:70:03:21:59:6b:
                    27:52:29:3c:b9:67:f7:4a:61:a6:1c:34:ff:70:c3:
                    6a:e0:da:d2:93:bc:87:b5:4c:89:a7:6d:22:3d:be:
                    12:54:64:dd:5f:1c:f2:fd:22:55:58:a4:d5:01:d3:
                    ba:e6:70:6a:cf:75:77:48:90:a6:2e:c5:5e:e0:bb:
                    6f:25:14:cc:d3:e5:38:2b:5e:01:7f:d5:a7:2c:6d:
                    72:f0:6e:96:7e:4c:46:bc:14:5c:ed:da:c1:eb:4f:
                    b4:74:d4:01:46:ee:2f:d1:e0:e9:30:47:55:c1:4d:
                    57:44:c0:a2:45:15:b6:8d:cf:9b:bf:8b:4b:7c:0a:
                    cc:d6:1e:7f:90:3e:b3:95:38:99:ca:f9:e9:73:2d:
                    98:93:c6:47:ac:aa:0b:7a:0f:b1:16:19:5c:4b:09:
                    81:4d:fb:ab:5c:cb:6e:ad:2f:ee:29:fa:18:f3:92:
                    ed:11:c5:35:14:9d:ec:33:9f:1c:85:0c:bb:26:01:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:07:73:4D:3B:7B:94:CA:C3:94:3B:F7:34:8C:48:AC:45:BC:D5
            X509v3 Authority Key Identifier:
                keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.251.0/24
                  203.0.184.0/21
                IPv6:
                  2001:df3:280::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:d1:c0:3a:a0:f0:01:1a:eb:47:51:a7:d0:6d:bf:24:03:
         82:26:00:9c:ce:81:d4:ab:9d:4b:d1:ed:44:12:21:52:ba:bf:
         fb:83:15:ab:69:ac:2a:e2:be:8b:fc:b2:b9:b3:7f:ff:05:bd:
         6d:d8:3a:22:7d:f0:37:8a:a2:e1:a9:c4:42:07:77:0a:9c:8c:
         79:52:ac:18:24:8b:60:8d:19:04:dc:2c:f9:ef:6b:96:45:e0:
         79:d4:7d:d3:9e:96:bc:f4:12:80:2f:8c:f9:87:87:93:59:1b:
         cb:4c:76:20:57:1c:b8:ef:d7:0b:75:16:8e:c6:e2:2b:57:c6:
         8f:90:1b:61:77:c6:1e:18:5b:40:d0:2a:c5:36:65:4d:10:35:
         64:4f:4a:2c:29:a8:9f:b8:d0:3f:4e:af:01:6e:bf:5f:1b:a3:
         78:14:3c:c5:80:35:af:a0:86:49:e7:ed:16:c5:05:51:5e:4e:
         20:76:f3:bc:41:5f:ef:c4:40:af:86:d4:a6:b4:ed:c0:6b:eb:
         43:31:d1:b7:1c:eb:ac:7b:e0:a3:2e:1b:59:f7:d7:95:54:48:
         fe:b0:c7:b8:3d:d6:1b:91:80:9d:f5:42:b5:3e:83:1a:cb:91:
         d5:43:68:63:e2:ad:90:34:d0:f3:a3:e2:c2:3e:34:1b:7c:d8:
         fe:3f:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:43 2026 by rpki-client