Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa
File:                     DE524D283F0511EBBB4C174FC4F9AE02.roa (raw, json)
Hash identifier:          it4vcFbKLmTJCt2q1TtUbEDLsD8jVRyUqj9yP9gE96M=
Subject key identifier:   4B:2A:5F:EE:4D:30:AA:B3:C5:CB:A7:36:84:A1:E4:77:F6:48:A6:63
Certificate issuer:       /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Certificate serial:       07A1
Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:28:28 +0000
ROA not before:           Tue 18 Nov 2025 20:42:40 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139347
IP address blocks:        103.157.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
        Validity
            Not Before: Nov 18 20:42:40 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a430ec-af54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:25:9a:d0:bf:02:7a:df:e9:0c:43:7b:d7:
                    14:a7:d7:cd:3f:ab:79:4a:b4:d9:ba:ac:eb:b8:f6:
                    32:74:a1:21:9e:13:15:53:df:56:f0:e0:d7:f7:2a:
                    ff:6e:4a:b9:00:5f:4f:4b:46:6d:b2:12:66:83:d2:
                    08:52:97:7d:1f:eb:ec:9b:80:16:e8:7f:27:08:00:
                    6a:c7:85:a0:aa:9c:60:cd:4d:c5:db:5a:cd:de:06:
                    0d:19:f2:39:b3:70:53:4e:c7:53:10:f9:8f:da:49:
                    70:d5:9a:f2:fb:a1:13:88:b5:8c:2e:73:5d:15:e4:
                    6e:60:7f:9a:3d:b9:64:9e:15:d1:30:37:b1:82:f3:
                    2c:b7:ff:fb:1b:30:2c:58:2a:fc:58:b1:49:c8:1c:
                    cf:2f:4f:03:fe:eb:1f:83:fb:06:cd:18:67:9c:f3:
                    ad:ea:d8:c8:8f:4e:c5:ae:51:a8:e4:ec:99:3f:5c:
                    e6:22:88:16:57:3e:aa:b8:b9:ea:7c:01:fe:21:4b:
                    5e:cb:bb:c4:46:1f:01:e0:bf:30:75:22:49:39:16:
                    ee:ec:c7:4c:c8:d4:4b:32:37:07:93:18:ab:e3:e9:
                    be:39:9d:fe:52:5f:1c:c4:a4:50:0b:bd:e4:c3:d8:
                    3e:47:fd:b1:bb:80:95:d2:d7:b2:e8:d3:83:49:8e:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:5F:EE:4D:30:AA:B3:C5:CB:A7:36:84:A1:E4:77:F6:48:A6:63
            X509v3 Authority Key Identifier:
                keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b1:93:b5:67:2e:77:b6:2c:df:94:6d:2e:6a:e6:62:72:31:
         f9:01:e8:e9:e3:f1:82:dc:7e:e9:79:b9:73:8e:b4:8c:76:9a:
         f8:97:4b:98:d0:ea:bb:e0:35:4b:45:41:c8:bf:c8:dc:ce:ba:
         42:28:0f:63:be:e8:ab:da:71:fb:b1:00:ed:9e:95:c7:10:c1:
         c2:d5:2b:7c:5e:b9:cd:ef:2b:fa:b9:fb:2e:82:42:5b:9a:b8:
         54:b1:9a:85:b2:23:f0:88:33:6b:88:e4:9a:1d:4b:ab:af:59:
         bc:35:1d:2c:dc:5b:c8:de:c7:15:f7:ef:90:37:85:ac:4d:64:
         51:f2:55:1d:be:63:ea:00:81:01:89:4b:bd:50:64:7b:79:4c:
         a4:0d:c9:6a:4d:c2:12:4c:0e:5e:5e:35:e4:39:e6:18:f8:6b:
         f8:14:a2:95:ca:d3:2b:70:90:75:d6:f1:cb:ad:5e:dd:01:71:
         6f:e6:53:86:c5:ce:75:b5:28:ce:de:c3:6d:84:f7:c0:5e:e2:
         49:70:c0:7b:e9:1c:69:67:ee:05:67:47:ac:2d:d5:73:de:f8:
         27:e6:b5:43:09:a5:c4:9c:b2:7a:47:31:ea:7a:43:e4:33:a1:
         4b:1e:41:c0:1d:11:10:d9:52:4a:ec:ac:ae:ef:ed:0e:4f:c3:
         07:15:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:42 2026 by rpki-client