Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
File:                     2F74D644ABC711EF9CD3CE81C4F9AE02.roa (raw, json)
Hash identifier:          f4gCpRS0r2/y5eBNPTgqtyjnYPjR3lsXVlQbnXKGMC0=
Subject key identifier:   1E:64:A3:11:D5:7D:4B:15:03:E8:92:76:43:C9:13:D9:11:14:61:8F
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       04D8
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:59:19 +0000
ROA not before:           Fri 11 Apr 2025 00:35:01 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139820
IP address blocks:        103.148.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Apr 11 00:35:01 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40df7-4fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:07:c6:09:2e:33:dc:f8:cb:6b:8d:48:ad:
                    41:5c:4b:79:5b:c4:4f:0e:58:ea:2e:73:c8:14:bb:
                    67:3e:51:1f:07:6f:f9:9e:df:e6:b3:c1:0c:74:47:
                    00:b6:35:18:c0:8c:4a:20:02:5c:27:47:6e:e8:c9:
                    31:c1:e3:1e:a4:86:d6:fb:e9:83:cb:23:bf:d5:9d:
                    ab:89:2f:eb:d4:b6:56:c1:5a:2d:f4:bc:04:fd:76:
                    5e:d4:1a:17:e0:a3:e4:82:98:88:4e:07:33:44:95:
                    41:65:01:54:db:2b:fc:76:25:e6:56:06:3d:af:d5:
                    75:af:6b:25:bd:c4:b6:7f:4e:7f:49:13:c9:99:22:
                    62:09:57:d4:7c:32:21:8f:63:ac:ad:0f:64:81:5d:
                    13:e9:34:28:3a:34:ce:f7:f9:d9:5e:34:b0:49:11:
                    2d:d9:08:e2:3b:b1:7b:38:ca:b9:ef:b9:0c:ab:17:
                    cc:e6:1c:ac:0b:aa:13:01:4d:dc:aa:74:bb:d4:da:
                    5c:ec:c4:67:95:71:97:db:bf:82:98:5f:b0:10:65:
                    21:c8:89:ba:2e:eb:76:97:f5:7b:93:78:5b:ef:3c:
                    49:30:15:1f:05:30:a0:71:d7:4e:b0:7c:ca:3a:ec:
                    36:70:fb:07:f3:05:a2:e2:50:c4:f5:20:fa:67:bb:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:A3:11:D5:7D:4B:15:03:E8:92:76:43:C9:13:D9:11:14:61:8F
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:ae:46:13:09:0e:c3:28:bf:b9:c9:06:6c:39:40:9a:03:
         4b:25:ae:af:69:b7:73:2b:62:d9:9a:61:a3:b6:6e:fe:f8:6e:
         c6:5a:08:8c:d3:d2:d7:f2:ff:58:32:f9:2a:fa:43:63:e3:cd:
         bd:20:22:03:8c:b5:9c:c7:70:53:3c:85:4f:05:d2:63:82:20:
         ac:a3:3d:c4:77:7a:74:fd:da:36:59:3b:81:83:21:cd:12:f8:
         24:fb:ac:37:63:45:0d:d8:a4:64:fb:8c:85:c1:bb:ef:03:47:
         8f:3e:ca:6f:7e:16:50:f6:4f:e4:c5:bd:99:3c:3e:bb:7e:39:
         fe:bf:e5:d3:66:9e:33:10:18:e7:e4:da:42:4f:84:16:96:ac:
         97:ea:53:46:7a:8e:4f:a6:a5:c6:17:2c:6f:aa:52:e1:15:3f:
         dd:07:43:6f:0c:43:ca:80:11:46:e3:fb:5d:4a:65:d8:24:ad:
         dc:f6:4e:58:6b:0e:0c:f3:43:f7:59:90:92:be:e4:ed:aa:41:
         2b:9b:45:13:97:78:05:75:9a:8c:ac:2b:0c:d5:49:7d:77:3f:
         99:7a:35:75:ef:6f:7c:cd:43:b6:1c:47:6e:70:5c:9d:66:bf:
         2c:5c:5f:08:1f:38:19:4c:b3:3c:fb:2e:e9:cf:91:35:1e:88:
         0b:60:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:33:32 2026 by rpki-client