Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
File:                     E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (raw, json)
Hash identifier:          gKGc9eS8Hon8n4wZkVMeLGUVuNuDd19Olmxzqv4FnNw=
Subject key identifier:   84:E8:F1:09:4A:3B:64:1E:67:0D:71:C2:45:44:18:64:23:B2:08:90
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       022D
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:31:50 +0000
ROA not before:           Mon 14 Jul 2025 01:48:08 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136587
IP address blocks:        103.91.115.0/24 maxlen: 24
                          103.122.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Jul 14 01:48:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3eb66-a8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:6d:db:da:0b:43:58:b0:1e:b5:75:d6:8d:
                    c4:75:5c:8b:66:3a:76:56:b6:20:4a:67:d8:49:b6:
                    4e:b8:c1:6d:99:13:c7:c3:29:a8:b7:97:58:c4:5c:
                    18:ef:10:33:a1:10:99:28:7e:c9:3e:3f:f8:98:cf:
                    50:f5:40:50:2d:b5:56:9b:d2:0a:7b:4a:ee:02:96:
                    78:f2:dc:0f:76:9e:8c:87:cf:af:69:c3:da:6f:7f:
                    5d:13:c4:00:c9:44:73:ec:e8:92:25:14:d3:ec:19:
                    c3:13:d9:d3:d4:bc:75:d3:75:be:c2:3b:2e:b4:14:
                    b0:11:ad:d4:cd:19:37:47:5c:ef:a4:e2:73:8a:4c:
                    59:64:a0:d5:a7:1a:50:4e:35:c3:c5:3f:28:6e:4f:
                    56:87:82:74:0c:bd:16:08:6d:a4:fc:2c:81:d3:05:
                    af:5a:11:f2:cb:f1:8c:59:89:58:92:51:bc:4e:c5:
                    c9:12:c8:5b:1d:ba:29:b5:2a:f5:2a:93:3a:cc:7d:
                    47:75:d7:9f:49:5b:f7:96:52:ca:31:c7:27:74:df:
                    c0:96:1f:d8:a3:0f:b3:4f:53:54:58:6a:17:22:43:
                    4d:be:dd:1e:5f:8e:5a:0b:5d:4a:76:ac:c4:9e:24:
                    a8:d3:8a:a0:9a:3f:a3:89:8e:01:5d:d4:82:3a:ec:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:F1:09:4A:3B:64:1E:67:0D:71:C2:45:44:18:64:23:B2:08:90
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.115.0/24
                  103.122.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:62:8d:b7:80:52:b8:a1:8b:b3:80:2e:0e:c3:a6:26:d7:
         27:a7:40:91:d6:5f:c6:d8:e4:85:56:76:14:2d:02:48:70:21:
         4a:9f:d2:de:8f:8d:97:5d:c3:b4:36:b1:09:13:5c:e4:b1:aa:
         86:96:a4:27:6e:16:ef:43:cf:40:cb:0d:cc:2d:27:1e:c5:21:
         ab:23:fc:f8:34:a7:1c:af:e4:68:e8:82:f5:ba:ce:6e:e3:d7:
         c3:f0:41:89:a3:34:bf:8e:f2:a1:0a:e0:89:0d:d7:9e:14:9b:
         0c:69:6f:b2:de:3f:c5:a9:ef:1a:38:24:72:c3:9d:13:79:03:
         d9:b3:44:62:a4:79:a7:7d:ea:93:5f:f9:60:57:ff:9a:77:c6:
         1f:92:b9:86:da:7f:39:9e:0a:76:53:4d:bc:e7:53:c3:91:52:
         48:25:f5:91:03:87:59:97:25:02:7d:39:df:91:c8:c6:9b:03:
         ba:48:da:24:9e:b2:50:8d:5d:f9:4c:6c:72:91:9f:cf:b9:ad:
         1d:f7:1f:c6:28:f2:31:15:e3:f0:ba:34:9f:75:d4:3b:16:5e:
         9c:9b:d7:3b:6a:45:ec:f9:d0:f8:1d:64:b4:bd:98:6e:60:d4:
         33:b1:12:97:6d:cb:09:bc:8a:c4:b0:15:32:01:ea:69:5f:e3:
         4d:b5:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:43 2026 by rpki-client