Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File:                     81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier:          WmBY6H2Pxb5MPx5KAzZ8boIEzNFVP9GdLcZ09Lb1yaU=
Subject key identifier:   A8:0C:97:F2:A3:C2:3E:CB:28:F1:C8:78:C5:37:C1:99:3F:30:7D:63
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0253
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:37 +0000
ROA not before:           Sun 21 Dec 2025 09:37:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150778
IP address blocks:        103.93.140.0/24 maxlen: 24
                          2402:2c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Dec 21 09:37:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a455fd-48cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:12:83:b1:6c:6f:bc:83:36:0d:f8:96:51:
                    44:52:e8:0c:2c:63:13:3c:28:cc:3d:35:db:28:2e:
                    5a:ef:00:75:53:2a:af:ec:c5:71:99:41:1d:9a:39:
                    6f:8a:81:84:66:92:f0:71:b7:f3:c6:11:be:de:7a:
                    86:ef:46:25:cd:63:2d:4a:74:7b:5b:48:30:a3:28:
                    a4:11:c3:86:58:9c:1e:19:77:af:93:8d:72:96:54:
                    83:e4:29:3b:c6:b7:d9:2a:e3:b7:6f:0e:f1:01:3d:
                    83:5b:8d:b1:3a:e5:41:cf:20:91:69:a5:2e:26:fc:
                    04:3a:db:0d:5a:7b:d0:47:a5:f4:ca:f2:e3:da:9e:
                    80:82:b3:c4:72:85:71:a6:cf:a6:67:8d:95:ef:78:
                    51:48:59:19:20:ac:d6:4b:e3:c7:00:33:1e:99:73:
                    ff:52:c2:03:30:18:44:8e:9c:e6:66:9e:1e:b4:37:
                    2d:66:c7:30:99:ed:19:51:d1:55:ea:1c:ba:53:86:
                    c9:83:a8:70:44:c0:96:8f:2e:45:46:56:2b:44:96:
                    ae:ec:45:66:d6:6f:ab:a9:07:a5:95:57:0c:dd:55:
                    86:e6:cc:41:47:be:f0:59:c1:b1:d0:05:b7:f9:48:
                    4a:85:ed:f0:a1:75:99:87:bb:7d:00:b5:94:6a:27:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:97:F2:A3:C2:3E:CB:28:F1:C8:78:C5:37:C1:99:3F:30:7D:63
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.140.0/24
                IPv6:
                  2402:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:90:54:1f:c4:2a:14:86:61:91:a8:25:bc:b3:2a:67:fb:
         c3:bb:72:f9:35:f6:8c:62:16:44:07:6b:5c:94:d0:a0:b2:c5:
         e2:f7:56:45:4f:83:95:2d:8a:71:dd:ca:a7:12:1c:b7:37:85:
         b4:d2:24:54:82:d9:93:cb:de:3a:4a:de:6b:9b:a6:fc:ec:4f:
         09:4f:5a:52:c0:2c:70:8a:2a:6d:57:df:e5:9a:9e:17:d4:70:
         9d:b8:ec:cf:da:d2:89:4f:21:64:af:58:80:41:f5:65:e8:b3:
         2c:29:cb:12:a3:cf:84:3f:af:de:9d:74:94:d9:8e:be:d5:25:
         9c:43:da:0b:ec:cc:a9:3a:cf:db:01:83:c4:ed:e9:4a:77:8d:
         6e:6b:01:16:cf:b8:e4:1b:fa:fb:b0:ef:08:9e:ab:7e:e4:61:
         b8:31:93:8f:62:49:41:00:98:1b:f3:93:0d:63:d0:7d:86:97:
         41:d7:aa:59:30:0f:d9:6c:a4:f7:7d:01:ca:c4:c7:fb:1a:89:
         f2:fa:c3:78:8c:5e:c2:f0:c8:39:68:23:37:c7:41:31:f4:e7:
         0b:6c:e1:eb:fc:58:f5:aa:69:9b:47:71:be:4e:7e:ac:63:db:
         7a:91:8c:4e:16:d2:bc:8d:67:9e:6a:2a:5c:66:15:e7:07:79:
         0c:95:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:22 2026 by rpki-client