Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa
File:                     EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (raw, json)
Hash identifier:          RlmOITLHxFIRk16C+SkcNaBU54+NB+Z3brsV3QiUy8s=
Subject key identifier:   29:42:9C:1F:4F:41:FC:93:C1:85:C9:0B:DE:43:27:0B:A5:11:2E:8C
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       19C0
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa
Signing time:             Sat 28 Feb 2026 17:14:10 +0000
ROA not before:           Sat 28 Feb 2026 17:14:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136230
IP address blocks:        103.84.96.0/24 maxlen: 24
                          103.101.172.0/24 maxlen: 24
                          103.101.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6592 (0x19c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Feb 28 17:14:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a32261-2370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:ac:16:5d:bb:7d:22:60:64:37:a6:2f:19:
                    23:96:29:73:9d:9c:70:95:0a:4d:69:45:85:ee:62:
                    a9:d1:22:82:26:0f:bd:53:d1:78:98:96:74:aa:6b:
                    43:42:50:94:d6:3d:e9:da:21:94:c5:f0:37:82:1a:
                    86:03:ab:b0:f5:7e:58:3c:fb:13:80:6f:46:b7:a7:
                    54:22:2b:75:76:d0:e0:df:47:6d:98:da:18:65:bc:
                    4c:bd:4b:cb:84:ce:7e:c8:d5:11:f1:6d:4b:0e:a8:
                    dd:75:9f:80:5a:03:61:f8:e2:ed:47:f6:19:c5:57:
                    6d:f5:a0:7d:91:f2:f5:f5:4c:91:d1:ef:6d:ad:e4:
                    6d:96:82:e8:59:00:62:a8:52:59:61:3a:06:7b:7d:
                    58:3a:ea:41:36:44:d9:fe:66:ef:76:82:66:0f:cb:
                    6a:d4:73:32:05:32:8b:8c:ef:e0:e4:d9:74:4c:57:
                    57:a4:c8:eb:d7:67:61:ea:ec:88:f1:77:19:3f:e5:
                    98:a7:23:62:73:78:ec:24:2a:f5:9c:98:af:87:6b:
                    13:d3:ac:9a:ca:3e:22:01:c3:3e:b6:ff:31:dc:a6:
                    e9:0c:5a:15:c8:aa:5e:30:6f:a3:7a:7e:58:fa:2c:
                    b8:d0:6b:4e:d9:95:43:5c:a4:2b:06:f3:3f:ee:59:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:9C:1F:4F:41:FC:93:C1:85:C9:0B:DE:43:27:0B:A5:11:2E:8C
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.96.0/24
                  103.101.172.0/24
                  103.101.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:d2:46:85:fe:22:40:7b:93:b0:d8:4e:53:34:be:88:d1:
         3d:6b:a1:6c:6e:51:6c:58:44:67:76:fd:fa:15:49:d7:20:45:
         f9:b6:c2:5b:b7:33:51:5e:27:20:69:eb:97:0e:3c:b2:85:a5:
         34:c2:23:4d:47:5d:ac:b6:b2:78:84:af:4f:45:20:45:b3:f9:
         fe:32:0d:4a:1e:2a:38:b5:7d:8d:11:a5:3d:2b:29:59:ac:f4:
         c9:42:db:f4:36:96:31:ac:d8:9c:7a:8d:80:4f:88:24:50:09:
         94:74:c6:41:05:92:3c:f7:2c:72:8a:2e:56:b7:dd:80:53:e6:
         1d:75:56:1b:15:21:3e:88:0f:a9:9e:51:f5:10:fa:74:ff:11:
         ac:3c:fd:cf:1b:0d:29:16:f3:20:ea:65:f0:16:fc:97:65:75:
         f9:b6:8d:77:66:fc:80:04:84:c8:14:1e:e3:01:82:ed:1a:2b:
         23:21:87:83:b7:d6:45:7f:e0:02:6e:46:50:82:c2:ae:c6:fd:
         6e:f5:3c:39:54:b1:0c:51:63:f3:d9:07:46:92:f8:9b:57:c8:
         a1:9c:12:bf:2e:22:fc:95:6d:d8:c2:fe:f9:c5:ba:f0:3b:36:
         f9:23:79:ba:ea:df:63:cf:ee:09:81:4f:90:4b:41:df:1c:1c:
         5b:ea:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:16 2026 by rpki-client