Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/92B41AACB17B11F0A5D78E54C4F9AE02.roa
File:                     92B41AACB17B11F0A5D78E54C4F9AE02.roa (raw, json)
Hash identifier:          iYAnt767P+k9FiLxROTY3OzyA9z+btPHTlDDG1LpQr8=
Subject key identifier:   24:B2:E1:5E:42:57:F6:48:25:16:22:C1:3B:46:E3:EA:BC:31:34:CF
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36CD
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/92B41AACB17B11F0A5D78E54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:49 +0000
ROA not before:           Sat 25 Oct 2025 08:21:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150716
IP address blocks:        103.230.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14029 (0x36cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Oct 25 08:21:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4895d-a185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:c5:42:96:97:55:fd:21:29:77:eb:8f:c2:
                    6b:b7:47:6d:fa:3a:db:95:42:56:aa:6c:8c:3b:df:
                    74:7d:79:5a:ee:a6:53:06:ad:bc:dc:be:f0:f0:45:
                    77:3b:2b:3b:1d:a5:05:75:83:d4:b9:61:79:38:ec:
                    c8:f2:b8:e7:f0:d4:b1:6d:2f:f0:26:b4:c9:4c:28:
                    90:2f:7c:96:35:5c:18:0b:85:7f:c5:65:8e:de:f8:
                    6d:99:45:93:75:16:ea:23:3d:be:e6:ba:f8:14:94:
                    e1:7a:d9:a5:ca:73:61:95:79:1f:37:49:4b:a8:a2:
                    e9:ac:47:be:fe:1b:e0:0a:2e:04:6d:15:20:4f:3c:
                    32:a2:8f:9a:c4:63:d5:95:ce:ab:88:81:2f:99:25:
                    65:e4:2c:c8:ee:bc:be:4e:cd:ca:84:1f:16:d0:ef:
                    a2:46:51:03:11:00:3a:1a:15:b2:51:23:45:b9:b2:
                    00:e9:cc:65:7f:fc:30:c9:aa:71:23:e2:7a:93:73:
                    c1:43:39:6a:3d:6c:aa:d7:40:69:90:36:97:70:0f:
                    21:c8:71:7c:7b:5a:27:67:64:69:c2:41:70:91:5f:
                    02:82:10:82:b9:e9:4b:8f:6a:e4:7c:90:12:a0:57:
                    c7:53:a2:e3:17:0c:c5:f2:35:c0:1a:49:f8:49:0b:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B2:E1:5E:42:57:F6:48:25:16:22:C1:3B:46:E3:EA:BC:31:34:CF
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/92B41AACB17B11F0A5D78E54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:53:ea:53:61:a1:79:3e:b3:97:bf:42:33:ee:af:43:d4:56:
         dc:95:42:0b:62:5e:21:4c:04:d3:5c:75:2a:e0:ac:ff:0f:cd:
         c3:44:4f:0b:f5:2f:4d:e3:57:fa:b1:02:00:23:0f:c3:f1:62:
         b7:9d:78:b3:77:64:ff:f5:d6:ab:85:84:3f:bc:21:c2:53:5a:
         23:5b:af:45:2b:dd:c1:92:d3:63:8b:50:69:a5:4e:ef:60:6d:
         d9:b4:31:10:69:60:6f:ac:65:3b:82:89:a4:58:f5:dd:de:35:
         5d:04:10:6e:27:10:f5:17:f7:44:6f:8c:5d:f3:af:7d:51:05:
         e6:11:e8:51:bd:e5:e1:4e:ee:d0:d9:34:90:1f:23:9a:81:08:
         30:f4:c4:74:3e:3a:19:56:a2:92:16:d5:92:c6:13:e2:db:65:
         8c:dc:4b:5d:9a:0e:55:f7:b5:79:57:87:26:30:2b:55:d2:65:
         0a:25:54:0b:81:9c:a3:b0:86:c0:01:55:06:95:0f:88:e4:e9:
         f2:68:0f:37:c3:05:61:85:0a:1c:40:a0:23:f4:0d:b7:c4:94:
         e2:13:22:0f:4e:25:05:2a:ba:7c:a8:aa:49:70:57:10:44:47:
         37:a1:f6:7f:03:a8:7f:ce:37:13:93:c1:72:92:a7:8e:a9:0f:
         44:44:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:49 2026 by rpki-client