Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa
File:                     B4E988F2FCFB11F092E222F9366F56BC.roa (raw, json)
Hash identifier:          V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=
Subject key identifier:   AE:66:FF:AF:22:DA:02:FA:EF:C8:D6:75:EB:48:A8:08:F7:5C:4D:F4
Certificate issuer:       /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Certificate serial:       0C57
Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa
Signing time:             Mon 02 Mar 2026 14:43:55 +0000
ROA not before:           Wed 18 Feb 2026 19:16:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139902
IP address blocks:        103.146.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
        Validity
            Not Before: Feb 18 19:16:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a22b-3ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:93:d2:65:5c:f0:2b:91:65:60:53:68:b7:
                    aa:e1:de:72:18:12:03:b1:e7:33:1d:60:8c:e4:d4:
                    5e:fb:4a:a4:6c:70:7c:c1:b2:0e:bd:f6:78:ae:15:
                    4b:3c:56:f2:cb:ee:40:3a:bd:58:5d:dc:06:4d:73:
                    67:94:4f:82:fb:7b:14:8c:b5:66:6e:6e:37:a8:5f:
                    ad:e4:0d:ed:2f:e1:c4:5b:21:5a:63:52:26:5e:0a:
                    88:11:50:ab:15:a5:28:6a:c3:86:2e:c5:b7:2e:50:
                    10:23:63:db:2b:89:16:76:54:6c:39:c8:8b:fd:06:
                    30:bb:03:6a:c1:53:5d:61:ee:37:db:04:67:e9:91:
                    49:58:6f:e8:ff:de:18:7b:0e:b3:1e:27:f1:8a:c8:
                    99:2b:ea:00:64:19:ba:be:32:4c:97:e5:d1:67:24:
                    89:f9:1e:c5:f4:f1:92:de:a5:35:82:5d:50:36:0a:
                    77:37:a2:0e:fa:c2:a1:5d:6a:33:80:ac:5e:e1:16:
                    60:51:aa:3e:59:b6:1f:3d:b7:d7:c0:9d:e5:4d:80:
                    a9:e8:6b:2d:61:f3:7e:12:d8:03:b8:e3:9a:98:53:
                    1a:af:89:fe:cc:b9:dd:a5:51:e3:32:ef:38:c4:1e:
                    ea:d8:99:a5:fe:de:21:46:f7:5a:dd:38:a4:de:d8:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:FF:AF:22:DA:02:FA:EF:C8:D6:75:EB:48:A8:08:F7:5C:4D:F4
            X509v3 Authority Key Identifier:
                keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:68:05:9d:c8:a0:25:32:66:d5:46:33:58:e8:8a:04:01:6b:
         9f:de:75:dd:fc:bb:e0:db:0b:a4:a2:35:51:b9:82:b5:31:d9:
         92:6e:08:46:5e:db:19:43:4a:60:9a:49:0a:af:98:24:51:13:
         38:2d:6c:d1:3f:45:00:fc:1f:bf:bf:b6:c3:01:ea:75:71:17:
         58:d4:8c:0a:4f:c1:c9:71:bb:c2:46:a7:58:a8:27:be:33:1b:
         a0:0b:0a:c3:25:03:ca:57:ba:70:2d:3f:22:72:c6:2a:fb:47:
         dd:41:a5:0a:e9:c8:f5:2b:96:6e:2a:d9:ec:ea:7f:43:01:bf:
         56:e7:d5:34:58:41:e2:30:b1:06:6d:cb:9c:80:d6:2b:72:51:
         fc:f7:1f:44:3b:a0:e7:98:de:a2:2d:3a:a1:9a:ef:d9:a7:d3:
         54:ec:3b:2c:a3:2d:9a:38:08:2d:2d:1e:c4:4e:52:cf:73:a8:
         7c:c7:19:4b:91:66:67:7c:d9:3c:9e:64:59:15:4b:c1:74:98:
         26:a7:26:84:03:d5:2b:60:61:81:3e:dd:52:0e:21:5c:63:03:
         58:e3:78:39:70:4c:f6:0b:94:4f:d1:62:7b:e9:d4:65:d1:ba:
         a6:bf:b7:09:cd:59:76:62:cc:be:35:5a:a0:d1:20:c2:4d:4c:
         13:e0:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:02:59 2026 by rpki-client