Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa
File:                     F93DE378B66911F09D7E8031C4F9AE02.roa (raw, json)
Hash identifier:          c07jP4kaBJLesC3fKCC1+hkjCe95/NhhL5juygnjjI4=
Subject key identifier:   62:EA:8D:9E:76:9E:18:E3:93:95:80:E4:CF:95:44:3E:B6:21:EB:49
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05C9
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:41:09 +0000
ROA not before:           Wed 31 Dec 2025 23:19:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        103.204.21.0/24 maxlen: 24
                          103.204.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Dec 31 23:19:10 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48845-52b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:63:24:be:4f:d6:b2:e0:e2:be:60:da:be:
                    e7:2f:2a:f7:de:ff:45:4d:6e:e8:ae:33:8b:06:e4:
                    df:3b:60:0a:7c:24:52:7a:6f:12:0b:70:ad:37:a8:
                    fc:90:52:36:8a:ed:32:90:df:d7:e7:33:1f:35:3a:
                    a8:9a:83:ce:ba:bd:4d:51:73:ff:11:5a:82:c0:9c:
                    a9:b3:0a:9c:ef:03:32:6c:6a:ac:96:7d:ed:3d:ac:
                    31:48:a9:64:7a:89:db:d5:be:9e:45:43:27:f0:08:
                    b6:f6:66:98:fc:ca:b1:30:58:cd:9d:b6:a4:a6:90:
                    be:59:d0:7d:67:44:0c:45:5c:a0:0a:83:74:c2:e2:
                    e2:5d:f3:3b:57:f1:e6:eb:ea:85:ce:98:3b:93:5a:
                    7b:31:12:65:db:25:63:93:0a:48:49:f0:2b:de:a7:
                    8e:3d:53:ad:67:fb:44:36:31:0e:5e:2c:0d:02:00:
                    cf:80:f5:f6:75:bb:63:d9:62:55:15:72:a6:df:e6:
                    1e:71:cb:29:d4:73:e2:19:bc:99:37:03:13:70:f5:
                    8e:f5:02:31:52:a4:d4:97:59:37:64:ca:c4:59:b6:
                    17:83:95:76:9c:59:dc:d4:c1:5c:69:f0:7d:46:b0:
                    a1:52:01:e7:f6:ad:a8:f0:61:43:19:d6:c0:5f:b7:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:8D:9E:76:9E:18:E3:93:95:80:E4:CF:95:44:3E:B6:21:EB:49
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.21.0-103.204.22.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:35:3d:1f:a9:da:ea:f9:3b:ce:4a:1d:f0:8c:bf:39:d9:
         4b:99:e6:22:cb:c7:33:88:f6:70:56:41:ee:b3:db:53:73:7f:
         ae:bc:05:08:0b:65:38:31:63:db:ef:7d:e7:24:b2:c8:65:d1:
         a4:7c:39:07:3e:ae:58:c7:95:32:24:a5:df:40:17:c0:59:aa:
         39:18:22:cc:3b:25:2f:a8:79:fa:fb:4f:b0:15:bc:16:9c:15:
         c5:80:6c:2b:be:3b:ea:69:bb:07:c8:10:fb:75:89:5a:f8:c4:
         e9:c7:86:64:63:ed:4f:ff:6d:e4:34:a9:5e:db:3a:06:d8:e8:
         b3:de:99:6e:1a:c6:9d:6e:ff:70:ed:92:10:7c:f9:49:07:88:
         9c:23:03:a9:b9:77:75:a1:c6:41:7d:ad:00:14:f9:53:de:fc:
         e3:b6:1b:4f:98:ec:c1:79:f3:ec:87:93:76:71:bb:51:84:dc:
         d5:87:70:02:e9:53:62:57:9a:64:b3:c4:b1:17:d8:ff:de:d5:
         56:f0:d7:7b:f0:c3:60:87:81:38:93:5f:9a:8b:33:b2:ee:d9:
         32:d7:f4:41:ca:db:78:f0:05:d2:ef:5f:fd:3c:97:c7:66:0d:
         d2:4d:ef:d4:b8:02:90:e3:5d:28:9f:dc:67:4e:51:43:d8:84:
         3d:fe:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:06 2026 by rpki-client