Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/D693E0B656E211EB83D9EA74C4F9AE02.roa
File:                     D693E0B656E211EB83D9EA74C4F9AE02.roa (raw, json)
Hash identifier:          fDbOklqIjVzAmy9iGzSfTYuMC8JuKAGFbb5Bt0TrNgk=
Subject key identifier:   1A:16:0D:FF:F0:9A:6F:9F:7F:33:D4:F2:DC:79:E4:61:7E:8B:75:AD
Certificate issuer:       /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial:       0764
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/D693E0B656E211EB83D9EA74C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:57:12 +0000
ROA not before:           Wed 18 Jun 2025 22:30:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135421
IP address blocks:        103.219.7.0/24 maxlen: 24
                          2001:df2:2e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
                          rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Validity
            Not Before: Jun 18 22:30:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42998-62a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:2e:36:88:dc:e4:5d:7a:59:9b:fc:0e:34:
                    31:df:16:a2:d3:3d:b4:54:06:db:b4:3b:84:50:75:
                    9c:80:56:5c:dd:fd:0b:e9:91:2b:08:ae:ec:ea:55:
                    bc:2d:86:4a:cc:dd:9d:2a:9e:11:87:fc:f6:57:0a:
                    7e:76:0d:72:4a:71:08:db:04:ef:b3:27:ad:17:84:
                    cb:dc:fe:4a:c5:e8:da:c8:84:e0:ef:9c:95:28:a4:
                    dd:43:31:9d:db:17:3f:60:b8:65:b2:4e:73:1b:27:
                    8c:6f:92:1a:07:36:5e:90:1c:37:87:98:ad:43:23:
                    6c:79:90:75:05:45:e5:28:70:56:64:f0:af:b0:7c:
                    34:94:22:bc:f1:ca:ee:a3:f6:ff:ba:aa:9a:a4:4f:
                    25:4d:a3:00:c7:d8:1e:f4:5e:23:30:8c:6d:5a:6f:
                    ea:6a:68:ac:d0:8f:b8:87:e8:d9:c9:ef:9c:c0:23:
                    f8:de:a4:57:58:14:e7:78:d7:31:37:80:9a:07:3b:
                    6f:b3:26:47:a5:c4:f8:33:04:e9:6f:61:12:99:eb:
                    22:d4:68:56:6a:ec:e8:7d:96:2a:6d:4d:7e:58:3f:
                    68:79:87:46:0a:79:ca:71:05:67:96:88:7d:b4:a3:
                    c4:30:a0:f0:ed:64:fc:8e:4f:ec:51:12:ad:71:91:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:16:0D:FF:F0:9A:6F:9F:7F:33:D4:F2:DC:79:E4:61:7E:8B:75:AD
            X509v3 Authority Key Identifier:
                keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/D693E0B656E211EB83D9EA74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.7.0/24
                IPv6:
                  2001:df2:2e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e4:28:ec:af:d1:77:ae:12:37:99:bd:f8:26:33:61:e0:f1:
         69:c3:0e:e6:b3:2d:ed:b4:a4:2d:f4:d9:70:91:79:06:24:85:
         38:ad:fc:6c:e2:c5:5b:22:ee:06:06:8b:24:e4:94:5e:35:e9:
         1c:fd:65:8d:ee:a9:05:04:59:2d:0f:c0:3e:7b:20:2f:ac:30:
         ba:2b:59:63:c9:5c:e4:a1:2f:f1:e6:cd:3a:2a:f8:00:44:c3:
         51:ba:75:3c:90:0c:d0:06:5b:90:e8:8d:22:24:da:3d:82:6a:
         df:b4:29:04:81:65:98:ae:f6:04:d3:c0:f5:bc:c0:10:c6:c4:
         dc:e4:4c:fb:e3:c6:97:b6:ef:1e:09:cd:b1:ee:2a:c3:78:a6:
         41:f9:5b:02:6f:09:d7:09:e8:e5:40:1a:32:ed:0a:90:ee:12:
         16:26:aa:fd:55:6f:a9:69:f3:cd:33:08:fc:66:c0:c3:f2:69:
         9c:f4:7a:27:c9:69:b7:0d:7c:e9:aa:f2:ab:57:45:f9:7f:44:
         8c:8a:6e:16:6a:70:80:cf:a2:1f:6f:61:0a:0b:40:91:13:44:
         bd:fa:31:d1:ed:cf:4c:bd:ed:b0:0d:c6:0e:86:cf:94:cf:74:
         be:41:d2:3c:f9:fd:9e:f0:f1:c3:98:12:81:c7:ee:24:9e:da:
         32:ae:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:09 2026 by rpki-client