Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa
File:                     7C05ACEE75B311EF83EC6F78C4F9AE02.roa (raw, json)
Hash identifier:          OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=
Subject key identifier:   74:61:2B:CD:67:F4:F3:BA:61:8A:B0:93:24:C1:7A:52:AE:E6:A5:CF
Certificate issuer:       /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial:       05B5
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:40:12 +0000
ROA not before:           Sun 28 Sep 2025 23:56:41 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142623
IP address blocks:        103.171.36.0/24 maxlen: 24
                          103.171.37.0/24 maxlen: 24
                          2001:df7:3580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
        Validity
            Not Before: Sep 28 23:56:41 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a433ac-c32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:78:31:e3:89:63:4d:fd:b0:69:09:81:61:
                    3a:2a:bc:48:02:cd:ee:40:30:ac:82:4d:71:be:b6:
                    04:57:58:48:83:df:4e:ab:d0:cf:b9:58:4c:e4:4d:
                    60:4d:aa:2b:4f:6f:aa:98:63:9d:a1:78:c6:b7:47:
                    a2:6c:1d:fa:13:49:3c:23:fa:f5:db:13:03:a5:91:
                    25:0c:16:b7:15:39:ae:79:c3:26:be:cc:e4:70:02:
                    b8:eb:f9:19:c1:d2:de:2e:3c:19:5c:77:33:64:37:
                    84:32:a6:47:81:af:e8:0a:25:bf:6d:59:e8:07:cf:
                    1c:51:d1:86:c7:aa:92:90:0f:ca:47:ab:f3:0e:aa:
                    fc:e6:b6:38:75:61:0d:bf:99:d0:51:69:80:2c:15:
                    3f:d5:57:8e:3a:81:a7:f3:63:27:63:18:6a:82:8b:
                    3f:dc:d4:85:1b:2c:c2:ed:76:28:7d:09:3c:14:a0:
                    85:09:4b:18:6b:a0:d8:ed:bf:2e:22:b0:99:97:25:
                    d9:91:0a:82:84:93:53:f4:82:be:7c:4e:28:08:c9:
                    7c:98:e0:ca:5a:01:76:17:a1:cb:46:bc:8b:dc:6a:
                    49:fd:5c:cd:04:b1:55:fb:fe:91:80:7d:fe:d5:4b:
                    27:51:49:88:7a:b4:46:e5:5c:9b:34:58:16:3c:a3:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:61:2B:CD:67:F4:F3:BA:61:8A:B0:93:24:C1:7A:52:AE:E6:A5:CF
            X509v3 Authority Key Identifier:
                keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.36.0/23
                IPv6:
                  2001:df7:3580::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:ea:90:c8:1e:3e:33:5c:71:ff:c4:bf:a0:a4:f3:e8:bf:
         ff:7a:cd:ac:55:9c:09:fe:a9:22:23:16:10:07:6f:4f:77:e2:
         7e:12:b4:f9:36:c8:e8:25:07:b4:ff:ff:90:b4:30:93:e4:26:
         29:70:c1:3f:57:9a:5b:6d:ac:ec:cd:84:ae:89:b1:b1:b9:f0:
         ea:23:b2:d6:d4:bc:52:aa:ca:11:6a:6a:10:b7:22:e2:44:53:
         7c:17:5e:29:68:fc:dd:47:0d:fc:7b:3c:7e:6b:4d:20:02:12:
         9c:71:2e:bd:b2:cb:0a:c6:70:cc:9b:2e:c3:19:ca:9b:c9:f1:
         15:dd:8f:a0:8c:4f:62:7f:51:7d:42:ce:12:c5:09:91:3e:b4:
         dc:0c:bf:86:53:0d:ea:7d:c2:33:87:20:94:07:cd:0f:61:69:
         d3:8a:a5:32:89:46:d6:2b:00:91:4a:1c:25:14:1e:c8:69:b9:
         ec:7d:9a:4f:40:a9:9e:90:e2:5d:49:05:b2:3a:ee:0c:df:18:
         9d:b2:9e:9d:4e:3d:0b:aa:51:89:3e:1b:1c:b8:a7:8b:9a:1b:
         b5:d9:53:b6:7a:81:a0:fe:46:b1:0f:4d:ec:88:c3:50:b0:7c:
         e5:9e:fd:0d:d3:33:5f:92:d6:a4:74:ee:de:37:77:52:29:97:
         57:f8:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:25 2026 by rpki-client