Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/AB659244056211EBAE3DBC4CC4F9AE02.roa
File:                     AB659244056211EBAE3DBC4CC4F9AE02.roa (raw, json)
Hash identifier:          6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=
Subject key identifier:   DD:57:BA:B3:E4:62:D8:0B:EE:08:C4:42:6D:03:6B:AA:A5:6C:7E:18
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       097E
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/AB659244056211EBAE3DBC4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:32:27 +0000
ROA not before:           Wed 10 Dec 2025 19:43:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.106.117.0/24 maxlen: 24
                          103.120.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Dec 10 19:43:32 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46a1a-3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:1c:cc:29:ba:0a:7c:28:e5:ce:89:d1:f9:
                    1f:d6:03:e7:f3:58:d8:02:e7:37:de:76:d5:06:f6:
                    6d:d8:10:b1:33:c5:21:3e:ef:32:1a:9f:58:31:d0:
                    41:9b:6d:2d:21:02:20:1e:13:8a:cf:32:76:02:a6:
                    77:b3:79:8c:78:53:cd:4f:bb:6d:0d:4f:4a:0c:b5:
                    63:fd:32:34:35:75:17:a3:92:b4:3c:3e:a8:8c:3d:
                    d6:1e:af:f5:46:99:d2:3b:c9:9d:fb:40:15:0c:9c:
                    27:e6:d4:b7:45:18:c4:c4:fb:ed:1b:33:91:61:3b:
                    3c:70:3d:67:84:f5:9f:e0:54:5d:ad:f2:9e:3e:0c:
                    bb:7c:74:63:6b:f3:c5:37:06:a7:f2:e4:98:c8:22:
                    ab:a8:ff:93:db:02:e3:fe:a8:0e:d6:2e:9a:f9:98:
                    94:3f:f8:b0:19:cf:56:1e:04:6f:4b:9e:07:59:84:
                    7b:11:62:87:f4:40:37:d0:a7:97:45:75:ba:19:c7:
                    e6:ef:99:7e:b5:47:4e:89:7f:9d:fb:34:fe:2a:74:
                    4c:72:f9:a3:54:2d:13:a8:f3:8e:80:90:81:87:ea:
                    9f:65:de:0f:65:1e:37:78:de:7a:d8:76:a9:04:6f:
                    23:8a:39:84:36:8a:2e:6d:c7:29:a4:56:39:aa:9e:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:BA:B3:E4:62:D8:0B:EE:08:C4:42:6D:03:6B:AA:A5:6C:7E:18
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/AB659244056211EBAE3DBC4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.117.0/24
                  103.120.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:16:5d:60:c4:45:99:f5:2b:5b:cf:c7:88:c6:be:3e:56:
         d9:5d:70:bc:27:d4:53:88:74:6d:20:23:8b:b5:11:79:38:ee:
         9e:9d:41:38:82:a9:5a:e4:18:90:ef:22:bd:74:5d:7a:c7:dc:
         dd:c9:4b:eb:db:2e:c0:03:06:8e:0e:13:85:17:e7:ca:5e:6d:
         8d:41:87:6c:76:0f:72:0a:0c:77:27:9a:00:0a:74:e7:a0:77:
         cd:0b:ed:e0:f7:10:88:7b:fb:43:98:e3:45:7d:39:f2:05:37:
         f2:22:fd:4b:37:2e:90:0b:d8:37:23:c8:87:30:41:c3:7a:22:
         ac:ce:6d:62:90:24:87:73:1b:4a:e0:14:5e:0f:20:f4:f3:78:
         4d:35:03:7d:b5:71:11:1c:bd:6d:e7:37:13:a0:05:f8:91:32:
         01:3a:a9:54:cc:41:88:56:f3:b6:13:82:1f:1d:80:c5:98:a8:
         f6:9d:0b:9f:6c:49:0d:27:ea:96:7b:ed:dc:f9:0f:72:e1:0a:
         99:9d:e0:1e:51:65:e4:58:b7:8b:43:27:b3:36:b6:df:c7:1e:
         9c:8d:ca:a2:65:6b:45:51:32:b3:ec:38:8d:1b:23:7e:0d:bc:
         a8:7a:01:30:52:f4:a5:52:39:01:e5:a3:de:0c:57:9d:b5:41:
         43:00:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:15 2026 by rpki-client