Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
File:                     FDAC7EBA26D811EE86689D0EC4F9AE02.roa (raw, json)
Hash identifier:          vMF5C8woMtm0cVIF6yB/uTIlNLbg4Hv3tmrOPBmtvYQ=
Subject key identifier:   3E:23:8A:A2:DD:C6:29:58:49:2C:84:C6:52:2C:CE:22:CD:91:1A:E7
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0E79
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:47:54 +0000
ROA not before:           Fri 04 Apr 2025 17:47:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137185
IP address blocks:        103.88.92.0/24 maxlen: 24
                          103.88.93.0/24 maxlen: 24
                          220.158.192.0/24 maxlen: 24
                          220.158.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3705 (0xe79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Apr  4 17:47:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4438a-472c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:b5:d2:ae:54:d6:9d:f5:3a:ec:3e:cf:77:
                    62:df:60:93:ea:43:6d:44:16:6c:c3:ed:6a:24:09:
                    ec:52:d1:ee:54:f2:d6:13:3e:d3:4d:39:01:dd:b5:
                    09:27:73:5a:74:f1:bd:f9:f5:4d:eb:8f:b1:ca:a2:
                    cd:2f:4b:a7:c8:43:d1:bd:e0:d7:c4:ea:46:9e:b6:
                    9f:d7:66:1f:2f:0e:b3:09:6e:fd:58:bd:7f:01:5a:
                    e9:15:e7:72:07:cb:00:62:e6:bc:c7:ce:5c:2b:6f:
                    61:d2:e8:86:2e:00:69:52:68:a3:46:60:99:9a:9b:
                    2d:d4:ef:58:5f:e3:68:08:ba:22:0a:2b:66:26:17:
                    c6:76:92:88:ce:74:b8:8b:0f:ab:60:a2:05:a9:2d:
                    06:ef:2c:31:d0:ca:ab:8a:8e:0a:3a:29:85:5f:48:
                    41:bf:da:c0:2e:81:35:d9:91:8b:77:2d:08:20:a1:
                    6f:3c:41:40:b5:7e:89:cc:d8:7b:e0:d6:af:9b:ef:
                    4b:27:fb:6a:d6:3c:a1:c5:e9:d7:00:8e:fb:68:b6:
                    ea:bb:fe:c5:97:4a:48:7f:ec:98:03:e4:8f:15:2a:
                    e3:1a:11:63:0f:58:e7:ac:27:9b:73:15:6d:14:dd:
                    12:35:ad:e9:d5:9c:c6:ff:51:f8:d2:c3:5c:ce:7e:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:8A:A2:DD:C6:29:58:49:2C:84:C6:52:2C:CE:22:CD:91:1A:E7
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.92.0/23
                  220.158.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:8c:53:bb:62:d6:2f:5b:da:73:e2:3e:5b:d2:33:61:a0:
         60:30:a7:bf:16:f5:b1:fe:95:bd:c1:12:2a:ab:09:4d:55:18:
         00:e9:ed:36:a7:b5:41:d9:6b:78:de:94:80:8d:c6:96:c8:25:
         b5:d0:aa:cc:61:7b:4a:62:e6:f7:76:0b:7f:6a:af:f7:a0:f7:
         00:5e:f8:20:73:6e:76:ae:10:ed:49:b5:16:61:81:c8:a9:6f:
         67:8c:4c:1d:0a:8b:fb:e7:16:03:9f:4d:ea:44:63:7a:74:2d:
         b6:48:23:51:28:ed:00:71:7d:4d:4c:62:86:6c:7e:ef:37:b6:
         a2:e6:ea:49:35:b1:77:61:8b:d5:c0:c3:df:46:20:1c:c2:92:
         b1:0f:b2:13:a7:e0:4d:da:3a:c6:3b:cc:79:44:fc:0f:f5:82:
         19:ac:86:6c:dd:1e:0e:3e:1e:c4:76:d1:cd:59:20:8f:de:df:
         b0:a2:34:60:4b:ff:d4:1b:0f:ba:0d:ae:62:cc:d3:1b:5e:16:
         df:52:c0:2b:25:49:8b:05:6c:8e:25:ee:f1:fa:ea:fa:56:3e:
         9d:67:fa:46:a6:1f:d6:8b:af:c3:6c:5e:10:09:da:46:ff:22:
         f3:c4:f9:92:44:a1:21:aa:77:9c:00:ea:b4:ee:b5:00:18:95:
         4d:ec:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:24 2026 by rpki-client