Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
File:                     827329BE232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          m6XByjxJzDUTkNjuzEeyi14AtxJwJj6V0wXPEnnJGWs=
Subject key identifier:   37:5F:1E:6B:E5:F7:2F:B3:3C:D5:E1:91:1F:B4:76:8F:3A:1E:D7:0C
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       080C
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:46:40 +0000
ROA not before:           Sat 30 Aug 2025 22:13:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        103.153.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 30 22:13:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46d70-3f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:9a:9f:3b:18:db:49:49:b1:15:85:2c:38:
                    b3:83:14:4b:90:d3:e3:f0:4c:95:00:61:15:42:62:
                    58:1e:8d:80:b3:77:38:28:31:c9:7c:cf:4b:69:25:
                    96:30:66:8c:5a:32:88:55:c8:2e:06:9c:69:b7:b1:
                    7f:be:9f:52:9b:3f:9a:e2:33:8b:7c:d7:b2:d0:50:
                    ce:e8:61:33:47:02:69:f7:75:55:c6:ea:7e:3e:40:
                    88:0a:2b:2c:64:e5:db:d6:31:2c:df:b5:e4:66:9b:
                    80:44:40:f5:c9:26:84:3b:98:4d:8f:86:cc:fd:2c:
                    d4:79:94:d3:c7:23:48:b6:8b:d4:9d:db:aa:27:9d:
                    35:11:f9:4c:d3:f5:d5:aa:6f:a7:37:e4:63:32:ac:
                    67:21:7c:d6:77:2b:35:61:4b:f2:0d:83:06:9f:c4:
                    01:61:1a:1c:1d:03:45:ab:8a:24:c0:98:01:b8:20:
                    71:18:b6:38:61:0d:df:36:72:0b:a4:39:d7:f8:98:
                    1b:41:0c:58:91:4f:2b:6c:7f:ec:63:db:53:44:ca:
                    32:65:70:b5:2c:a9:14:59:5b:cd:a6:32:99:b0:af:
                    5c:ec:e4:5b:4d:81:dd:d8:87:ee:eb:d7:91:2a:63:
                    95:cc:e1:01:4f:8f:e0:b9:4e:a9:af:ca:19:ba:70:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5F:1E:6B:E5:F7:2F:B3:3C:D5:E1:91:1F:B4:76:8F:3A:1E:D7:0C
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:51:ea:04:58:d1:84:f9:92:26:f7:64:77:11:ee:2e:b4:
         ed:71:b9:9c:fd:67:cf:8a:60:a0:fb:5a:b3:2b:fe:02:a9:fa:
         2d:07:25:91:9b:90:31:2e:4f:6f:11:e6:5a:b3:47:a8:2c:f5:
         ec:4c:fc:57:8d:db:71:0e:87:21:33:31:90:59:6e:63:f4:fe:
         81:ee:33:2f:89:d4:31:d0:a9:8c:96:8a:ab:08:e2:d3:69:3d:
         47:04:ec:f5:9b:e6:7c:dc:34:04:b1:0d:c7:a1:6e:8c:8a:84:
         66:c4:f7:81:75:55:b5:d5:05:81:75:e7:6f:01:6c:53:f3:8a:
         68:d4:46:eb:49:dd:e0:66:ee:e3:30:fe:2e:f2:a0:62:4b:ac:
         58:ce:47:7b:7b:64:eb:67:aa:77:de:60:d6:87:2e:10:e3:b5:
         1d:78:c4:28:70:9b:fe:1f:4f:e5:9b:8a:69:2d:bd:55:6e:9e:
         45:e4:77:f0:6a:b7:4c:ca:d8:4f:7d:1b:90:db:42:8f:dc:02:
         9b:61:66:88:6c:be:b2:98:2b:cc:01:9d:0c:ff:17:30:73:c3:
         3a:4d:1e:ab:71:4a:0a:43:6e:90:ce:06:96:70:b2:4c:d9:8b:
         b9:38:af:7d:12:5c:1b:81:3d:d5:62:09:db:44:b6:61:82:22:
         19:d9:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:23 2026 by rpki-client