Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa
File:                     D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (raw, json)
Hash identifier:          Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=
Subject key identifier:   27:D1:CF:E1:C6:A7:5A:41:6A:30:D3:E5:34:8A:D4:A5:AB:F1:D7:F4
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       0249
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa
Signing time:             Sun 01 Mar 2026 19:11:09 +0000
ROA not before:           Sun 01 Mar 2026 01:22:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138623
IP address blocks:        103.179.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Mar  1 01:22:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a48f4d-5724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6e:3f:d5:e9:63:1d:02:55:86:b7:e7:2a:27:
                    5b:7d:38:96:4d:af:3c:08:0b:39:bb:3f:76:ac:32:
                    7c:6d:96:5e:5b:ca:e7:ec:af:31:a8:a9:83:9b:f8:
                    5f:e4:75:57:4d:06:7a:59:6a:4d:e9:98:8a:78:39:
                    28:e4:f2:c1:81:d3:46:74:7a:56:cd:a4:e3:8f:cd:
                    eb:59:0a:46:62:b1:a3:23:74:9f:08:02:b8:f7:70:
                    c5:d0:74:58:54:f1:6b:a8:df:23:82:8d:64:60:3c:
                    bd:b9:ec:cb:63:6f:0b:a8:85:97:86:9c:42:83:23:
                    5b:45:c7:b1:33:69:fd:5a:a4:a7:c8:70:f4:32:80:
                    bf:62:f7:51:56:7c:c0:4b:24:97:9d:9e:69:57:de:
                    24:f3:9f:0f:93:8b:d7:bb:35:c1:55:85:ce:af:10:
                    98:7b:8d:c6:cd:c7:80:a5:51:9d:84:a3:52:f9:c2:
                    43:32:1e:b8:72:3b:29:27:85:50:ba:1d:8d:a8:d5:
                    e2:e4:61:f6:9f:1c:bd:a9:5b:87:c2:d2:69:a2:47:
                    c9:68:ab:c2:f0:ed:19:76:2c:e3:51:cc:fb:dd:41:
                    9a:06:1a:01:ee:f9:2a:ed:b7:3f:22:35:f4:67:cd:
                    aa:08:5a:97:2c:c0:17:55:1d:78:1b:50:f8:7c:52:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:CF:E1:C6:A7:5A:41:6A:30:D3:E5:34:8A:D4:A5:AB:F1:D7:F4
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:19:06:ab:42:04:61:f1:6d:8c:c1:b8:56:54:f5:ce:57:c7:
         2f:57:07:29:d8:0e:ce:e1:68:d7:8c:e8:3e:de:d7:4c:20:a4:
         09:c2:cf:4d:c8:9e:8d:63:5a:40:34:4d:1c:2b:bc:bc:34:25:
         73:f2:a6:d4:4a:bb:87:dd:3c:6d:08:ba:5d:07:95:f4:1d:d3:
         93:88:6a:6b:f1:5c:c0:1f:3a:8a:d1:c0:b7:b5:c9:f8:15:95:
         af:8b:d6:db:80:65:34:8b:49:2d:45:6a:4e:14:30:83:a6:d5:
         dd:ad:24:d1:fc:28:2d:bc:68:ab:53:43:f6:81:5d:37:fc:91:
         49:64:4a:3f:63:60:34:ba:91:23:2e:fe:0b:42:16:dc:2c:0b:
         c5:36:72:c2:bf:cf:43:f4:08:10:72:ac:3f:d1:8b:38:8f:61:
         09:bc:05:e4:ba:89:ed:76:6e:6f:d0:74:51:0c:5c:ee:88:02:
         f0:0a:a3:b6:80:ab:15:99:5a:d7:6e:c1:e6:d8:76:04:72:27:
         61:5d:e2:6a:3b:2c:eb:6c:9c:51:82:df:ed:d5:3f:84:91:18:
         4f:67:65:51:c6:e9:ec:1e:16:69:b9:4a:da:c5:20:46:09:ce:
         1d:21:de:1c:ed:ba:8e:87:5c:04:87:2f:05:84:91:86:fa:e8:
         18:6e:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:23 2026 by rpki-client