Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
File:                     E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (raw, json)
Hash identifier:          gHUta7y8pC3d2TOZ0QshxXr62KyKz6DtLyfNYCQhLTs=
Subject key identifier:   83:CC:79:55:C7:EF:25:3D:B1:A8:72:73:58:73:21:2E:43:82:B7:56
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       025E
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
Signing time:             Sun 01 Mar 2026 12:59:04 +0000
ROA not before:           Sat 10 Jan 2026 15:56:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149870
IP address blocks:        103.189.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Jan 10 15:56:20 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a43818-9110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:26:a0:2c:b0:e7:11:1e:53:31:6e:dc:7b:
                    3c:1f:8d:e9:fa:17:a9:c8:5b:f9:19:76:f2:7e:fb:
                    ee:08:59:a6:26:1d:f8:fb:28:74:ed:85:79:41:ba:
                    f4:1d:2e:41:19:b5:73:44:10:77:65:46:b3:b8:6a:
                    4e:60:ea:6c:6f:ba:ad:73:ae:9b:4a:c3:3e:55:9c:
                    de:03:c1:93:8b:0d:4e:00:5e:27:9e:05:20:d1:cf:
                    e9:51:ec:27:d8:24:e9:21:82:11:54:7a:d3:14:cd:
                    6b:13:0f:a2:81:55:b5:0d:dc:2d:9a:f7:53:4c:fa:
                    a5:09:6b:8b:1d:05:45:fd:06:b7:c6:6c:8d:d8:12:
                    96:f0:67:0b:5b:ac:de:a8:63:d1:ee:18:b4:fe:95:
                    68:c0:3a:88:e8:77:61:84:80:63:53:e2:b8:92:23:
                    3c:7c:3d:99:75:00:64:c9:f1:d8:9d:09:f4:6c:6b:
                    8c:41:fe:70:c3:60:d6:35:c8:38:76:cc:70:e3:71:
                    94:70:35:c9:2c:6d:67:ed:c3:73:d1:a1:74:ac:fb:
                    be:5a:a5:63:6b:19:56:00:db:89:b0:21:33:ed:a0:
                    b4:06:bf:da:db:72:73:b7:0e:55:b5:40:44:f1:6b:
                    4b:80:be:a1:63:84:fc:bc:b6:2c:64:a7:bf:94:1f:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CC:79:55:C7:EF:25:3D:B1:A8:72:73:58:73:21:2E:43:82:B7:56
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:93:81:fd:0f:60:00:38:97:fa:dd:47:3c:2f:32:78:33:b0:
         ab:b0:2d:6d:26:ec:f5:18:a0:7d:17:e3:c2:fc:5e:cb:19:af:
         17:80:7b:b5:e6:62:37:af:df:b9:1e:78:dc:32:71:df:6f:2e:
         d0:eb:34:05:52:a1:07:8c:9a:7a:0f:a0:2a:fe:52:0e:44:93:
         ef:ea:5f:18:d7:88:78:dd:98:21:d6:a0:01:12:28:7e:c4:da:
         0e:7f:3a:96:2e:82:90:b6:d5:aa:c6:42:f0:eb:39:6c:7b:48:
         c1:63:24:23:8a:4e:d6:a3:f5:c2:db:46:85:85:16:16:9f:56:
         4d:5f:8d:ed:85:37:9e:92:26:1f:e6:0b:08:c0:6e:98:ce:c8:
         3e:c2:d3:cf:06:9f:1f:64:e2:21:3f:a2:6a:65:10:87:f7:c0:
         9d:a4:bb:88:81:09:ee:ff:c7:c0:98:8f:51:0b:75:ec:6b:fc:
         3c:5f:d5:95:98:ce:3d:b5:41:60:9e:49:78:fd:bb:f3:ac:8c:
         16:d8:2a:55:6e:29:72:c1:a8:06:9d:f1:05:8f:96:b7:5c:3c:
         0f:87:74:a1:70:8c:02:75:31:3e:1d:07:9f:33:df:92:3b:ec:
         11:62:72:da:69:38:e0:c9:33:cc:d1:1d:ba:77:6f:1f:b4:9a:
         a0:76:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:10 2026 by rpki-client