Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa
File:                     9CA45412A6AB11F0AA6B453DC4F9AE02.roa (raw, json)
Hash identifier:          9pRlrB5RoLMk5wWWkvR56OH2Np6x8D6L7F4S0ytR/PE=
Subject key identifier:   BC:B8:9C:10:EF:7E:D4:E0:DE:34:E7:7F:2A:C0:00:69:CF:93:3F:1A
Certificate issuer:       /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial:       0727
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:15:16 +0000
ROA not before:           Wed 24 Dec 2025 17:15:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134781
IP address blocks:        103.124.236.0/22 maxlen: 24
                          2405:16c0::/32 maxlen: 32
                          2405:16c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
        Validity
            Not Before: Dec 24 17:15:01 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48233-d413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:73:db:6a:0f:02:30:cb:56:93:e0:07:8f:
                    72:a9:5a:81:f2:04:5e:67:99:1f:13:13:a4:82:12:
                    bc:c7:4f:b9:a4:9e:91:51:a4:55:8a:3e:7c:32:74:
                    a7:32:84:8d:e9:60:d3:d8:7a:d9:87:47:a2:e2:51:
                    e3:15:6a:37:32:02:31:30:09:97:3e:ae:e6:19:ca:
                    e1:7a:c4:72:61:44:d3:f4:ef:9c:d3:e3:35:2a:a3:
                    28:6f:91:cc:c6:b6:e3:c1:52:9a:67:68:5e:9a:57:
                    7a:2b:19:06:27:e2:c8:9b:5a:b1:a1:c1:d4:86:d3:
                    3c:97:f1:d0:de:44:42:c8:54:89:6c:c3:6f:67:4b:
                    50:36:54:ba:92:22:2f:a7:74:c8:b5:7c:26:a6:a6:
                    6b:7f:ce:d4:d1:69:91:85:f8:98:b1:ab:1c:42:13:
                    dd:5e:8a:68:c5:c7:7d:6e:6e:dc:7b:44:86:cf:d2:
                    41:d9:a7:bf:48:8c:4f:6e:99:5b:82:50:9b:51:c2:
                    59:3c:69:8f:19:d5:a4:a8:e8:e1:f4:da:ca:02:0f:
                    dd:3f:9c:18:d7:61:82:4d:8c:41:2b:ca:61:29:67:
                    33:fc:38:01:d9:f1:96:87:b0:da:40:59:f0:c5:0b:
                    12:64:b1:66:f4:e6:b1:55:7e:9f:e3:2f:a0:88:d3:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:9C:10:EF:7E:D4:E0:DE:34:E7:7F:2A:C0:00:69:CF:93:3F:1A
            X509v3 Authority Key Identifier:
                keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.236.0/22
                IPv6:
                  2405:16c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:40:79:df:27:b6:b4:3f:1b:f0:f2:0e:a7:47:0c:bb:0a:
         93:48:3d:61:f2:09:c5:86:c2:3f:25:77:40:56:38:f1:6b:98:
         da:10:83:fd:e8:0f:95:d3:e1:27:25:19:d4:ff:e4:4f:78:f3:
         aa:74:b1:98:5c:4e:47:58:e2:5a:a6:86:06:02:80:38:e7:1b:
         39:7e:5f:c1:63:b2:0d:46:53:6e:d0:a1:7b:5e:1f:e7:1b:88:
         24:1a:91:ea:a2:18:2c:9d:5c:5f:58:70:a5:b7:df:a5:34:29:
         f6:c4:3b:da:55:36:48:a3:46:45:e7:95:87:9b:10:57:7e:72:
         f1:6a:6a:df:bd:4a:03:b1:11:b6:ee:7d:dd:02:3a:7e:b1:f6:
         e8:70:91:21:c6:10:62:54:e8:1e:b5:81:a8:8d:4d:a8:06:ee:
         7c:4b:82:eb:2a:a1:51:0d:ea:57:74:d1:9b:b3:88:0f:f7:f1:
         18:3c:fe:55:6b:96:84:b3:77:f8:46:db:a3:de:19:ce:b7:5a:
         01:eb:68:bf:be:14:89:fd:0f:cd:89:af:c0:f0:3c:d4:bc:7c:
         83:78:68:9b:1b:fb:ec:cd:07:76:69:85:19:89:10:de:a2:8d:
         bd:1d:7a:28:cb:21:ed:b1:c3:cd:34:ba:d9:a7:05:92:95:07:
         83:05:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:18 2026 by rpki-client