Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/911C2670AF8311F0AA3DB580C4F9AE02.roa
File:                     911C2670AF8311F0AA3DB580C4F9AE02.roa (raw, json)
Hash identifier:          RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=
Subject key identifier:   3A:FD:2B:69:9B:B8:C1:D9:9F:6D:0E:F5:1E:E2:77:D9:A8:D8:FE:A4
Certificate issuer:       /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial:       1FA8
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/911C2670AF8311F0AA3DB580C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:18 +0000
ROA not before:           Wed 22 Oct 2025 20:13:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4264073039
IP address blocks:        103.142.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8104 (0x1fa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
        Validity
            Not Before: Oct 22 20:13:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47282-8230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:09:30:21:8a:da:7d:72:6a:2b:fb:e7:d9:
                    e9:36:97:05:94:c6:9e:27:f9:20:7d:c5:3c:ab:ba:
                    13:15:d7:26:40:9b:ea:b8:01:b5:94:3d:7d:5d:6a:
                    41:bc:15:09:f7:7c:34:03:48:ab:ac:22:12:41:d8:
                    61:8f:1b:5f:5a:25:93:a2:a8:14:98:c7:bf:f8:26:
                    dd:b9:71:69:65:93:d3:cc:2f:95:9d:0a:64:4a:08:
                    73:03:32:36:d5:3e:2d:0e:04:9e:f1:d7:1a:10:88:
                    f3:38:0f:e8:ce:ec:a2:17:d9:ed:b3:23:e0:03:b8:
                    1d:69:60:e0:81:a3:8c:cd:11:8d:3b:b2:ca:07:96:
                    3e:b6:81:bb:6b:27:9e:69:66:12:60:2d:5f:83:d8:
                    d3:17:f6:65:6d:14:0d:13:6f:6f:48:1a:67:03:79:
                    54:6c:35:01:4e:35:31:42:9a:0d:01:29:94:49:47:
                    ce:06:29:0e:72:19:8e:33:67:4c:21:a1:1a:3e:43:
                    b5:35:8b:c0:a8:c2:5c:a7:40:00:48:11:2e:85:57:
                    49:3f:be:63:dc:60:7e:36:d4:82:60:83:46:fb:eb:
                    be:3e:eb:c6:a8:c5:7b:e2:51:be:b9:1d:9e:7c:23:
                    65:24:c9:ef:cc:f5:e4:cc:7f:d7:7c:0c:92:9a:b6:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:2B:69:9B:B8:C1:D9:9F:6D:0E:F5:1E:E2:77:D9:A8:D8:FE:A4
            X509v3 Authority Key Identifier:
                keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/911C2670AF8311F0AA3DB580C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:ea:b2:f3:f4:a9:61:62:88:66:af:0d:72:95:a9:dc:93:
         6f:97:cc:85:f2:53:7b:3c:aa:ac:11:81:3c:d5:58:a8:9f:40:
         e7:3c:b4:56:4f:e4:36:e4:f4:45:17:69:ff:90:46:d3:e8:6b:
         ce:66:90:d7:74:86:46:6d:45:b8:ce:54:9e:25:2b:ff:33:e9:
         86:73:1e:75:35:d1:4a:2c:da:35:9c:73:24:cb:fa:d1:29:91:
         98:2d:1f:d1:93:ec:ec:86:ed:2a:ec:db:65:50:c7:d0:d1:6e:
         92:13:82:b3:64:e6:b7:b9:3d:52:8f:ce:b2:d9:41:93:71:65:
         b4:d3:f5:54:b3:f8:c6:87:54:31:1d:11:d5:30:70:b1:a5:8a:
         3f:a0:59:8c:d9:07:11:19:5b:5d:58:84:98:89:c6:16:19:41:
         5b:4f:de:4d:df:c5:de:1d:6a:cb:64:b8:5f:5d:19:79:41:1d:
         6c:dc:8c:7c:10:03:24:21:53:31:c8:b1:e9:48:10:eb:39:7d:
         64:86:4e:6c:4a:42:4f:a9:4d:ad:af:41:fe:77:ca:65:f4:68:
         a0:20:e9:24:51:e8:bb:d0:00:4d:49:82:da:30:a5:7e:e8:d2:
         97:59:1b:20:42:20:25:da:51:f8:11:16:f2:03:50:a8:25:9f:
         22:b2:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:24 2026 by rpki-client