Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa
File:                     30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (raw, json)
Hash identifier:          QEMW+uwqirN8hocgp2mZPgd5TCFLLoEJPsq0awd4rPw=
Subject key identifier:   C4:82:AC:DB:07:65:E3:16:DB:1E:7A:09:C1:CE:82:59:BB:78:0F:7A
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       0525
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:07:35 +0000
ROA not before:           Fri 30 Jan 2026 23:20:09 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     136997
IP address blocks:        103.175.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
                          rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
        Validity
            Not Before: Jan 30 23:20:09 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a46447-36f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:bb:d3:89:11:ce:a9:4f:17:fe:7d:0a:72:
                    b2:f1:9b:31:23:7a:37:94:85:85:06:51:25:6b:67:
                    d4:e7:24:6a:67:40:8e:c8:4f:11:39:30:7c:22:a9:
                    21:bf:9e:df:a2:d7:f5:6b:97:e5:16:7c:bd:bf:e5:
                    75:55:fa:32:a7:7d:b0:e5:7e:77:a6:21:33:99:8b:
                    71:8d:a7:40:26:b5:02:23:a9:5c:11:dc:9c:47:9a:
                    1c:0f:41:71:f0:6c:d3:bb:91:08:21:b1:fb:4e:bd:
                    b3:6c:88:57:b7:48:e0:ef:33:c1:a9:65:73:ae:7c:
                    fb:9c:7a:61:c8:e1:85:be:62:2b:fa:dd:26:f9:80:
                    bb:45:c4:e2:25:e8:92:74:95:fb:c8:90:61:95:83:
                    c4:5c:34:a8:76:d3:07:47:91:f1:69:b2:4d:fd:4a:
                    a2:fb:b0:f2:b8:01:39:08:f3:3f:23:b4:30:46:7d:
                    39:d6:51:ec:46:60:0f:7d:3a:d0:d6:80:ad:23:2a:
                    2c:b4:48:cc:35:f6:66:ad:4e:51:9b:4d:59:24:c8:
                    41:1f:a2:44:19:90:60:c0:a9:81:db:11:54:d3:0c:
                    01:ce:18:61:8f:e2:a8:40:fc:7e:37:51:1d:d9:63:
                    4a:eb:42:ff:79:b9:98:81:b8:92:89:41:34:34:a0:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:82:AC:DB:07:65:E3:16:DB:1E:7A:09:C1:CE:82:59:BB:78:0F:7A
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:76:07:24:8f:c3:e3:0d:5e:57:25:13:7c:ce:3c:08:3b:83:
         a6:68:ba:55:01:2c:f7:7f:34:e5:2f:23:66:3e:91:40:55:59:
         e3:ae:b9:c6:e0:df:73:68:96:91:2d:58:65:0e:b6:fe:41:2b:
         f5:a6:39:a4:e5:22:6d:4a:25:20:6f:84:bf:c0:5a:2d:fa:a6:
         85:1c:db:55:4b:65:21:13:8d:86:6a:84:56:46:aa:41:2d:dc:
         b1:07:e9:0e:f0:bd:45:e9:b3:28:c4:7d:9d:52:8b:b3:4d:c4:
         31:f2:dc:c0:a6:72:d0:62:41:f9:14:23:1b:d6:58:9f:2a:db:
         00:39:e8:a0:a2:bb:d9:0f:e1:a4:5d:12:cb:3e:7e:37:97:12:
         6d:de:3b:97:0c:78:2d:b1:32:54:91:e4:75:44:8a:de:43:56:
         38:84:d1:e9:21:cf:94:a2:da:9d:de:aa:e7:2e:43:fc:35:6e:
         1e:5c:2d:ee:bd:23:8f:35:dc:d2:e9:5d:0d:da:7c:40:6c:46:
         4c:b5:03:9d:ca:50:7b:46:99:c5:c5:a3:52:99:43:c5:02:ee:
         24:7b:55:74:b4:2a:4e:c4:15:b2:fb:1a:3d:aa:24:f4:31:da:
         d4:5a:8f:38:08:36:59:d0:b6:b2:c8:a7:65:43:1f:28:1d:42:
         44:eb:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:16 2026 by rpki-client