Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa
File:                     761C9E22171811EF81DCE817C4F9AE02.roa (raw, json)
Hash identifier:          dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=
Subject key identifier:   D9:A5:F5:32:1B:9A:C9:D4:53:0C:44:73:1B:43:6F:DC:E2:AE:A7:37
Certificate issuer:       /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial:       0779
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:34:58 +0000
ROA not before:           Sat 28 Feb 2026 22:19:10 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     36131
IP address blocks:        103.208.252.0/22 maxlen: 23
                          103.208.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
        Validity
            Not Before: Feb 28 22:19:10 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46ab1-732a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:75:6d:ad:b1:3e:10:d0:1d:ac:43:92:d0:
                    41:d5:93:d9:29:22:f3:a9:c5:5a:ae:f3:94:6d:ba:
                    a7:96:8c:e1:96:fb:62:92:bd:30:f2:31:91:ab:c3:
                    92:c1:b5:e7:6b:b9:00:cd:2b:93:58:2b:85:ec:10:
                    ca:85:cb:62:85:12:0f:4a:c8:c7:2c:03:6b:0f:e2:
                    24:46:64:87:0b:f9:a6:64:5a:a8:f5:b4:8d:b7:76:
                    02:23:60:bf:5f:c3:ac:69:db:d3:da:83:c1:68:0a:
                    4c:2a:5a:76:37:da:af:61:bd:00:55:ba:c2:51:01:
                    a3:63:d2:a6:37:c4:44:b3:a4:29:36:0a:ba:70:87:
                    f0:d1:ba:5b:fb:31:e4:05:36:99:5c:ff:25:ba:e3:
                    f9:65:36:c5:93:94:27:48:b7:00:11:51:b6:85:a7:
                    9c:23:59:12:01:61:bc:46:4b:85:07:9b:fb:7c:b6:
                    d8:e5:a7:75:d5:84:29:3b:6a:70:57:a3:ec:bd:ae:
                    34:cb:84:f1:a3:4f:66:32:5a:1b:58:9e:f7:fc:4f:
                    22:d9:2b:b9:fe:39:8b:be:56:e1:69:5c:54:91:fd:
                    d0:b4:32:fb:85:9d:87:9a:5c:1c:34:19:86:1e:f9:
                    e0:25:1f:57:85:37:87:18:04:40:45:7d:3d:9b:f2:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:F5:32:1B:9A:C9:D4:53:0C:44:73:1B:43:6F:DC:E2:AE:A7:37
            X509v3 Authority Key Identifier:
                keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:26:8f:3b:18:c5:f2:4e:dd:40:f7:24:6c:8e:e2:7a:90:54:
         2f:62:1f:73:d4:85:0c:b1:e6:a5:07:cb:d1:e0:f1:c8:d9:49:
         58:62:55:79:3d:70:b7:9e:44:88:8f:04:d3:09:6b:c4:43:55:
         1b:62:3e:a5:b6:cf:1d:66:08:82:3d:4c:e7:b9:8b:af:06:27:
         10:80:c7:ee:97:0d:58:78:df:51:46:e3:97:2c:de:dd:3c:df:
         af:5d:13:ea:8f:88:ef:f5:63:a7:58:da:c9:8e:47:9a:76:06:
         1e:3d:05:35:f3:e0:b8:05:bd:d5:d6:2c:fe:b2:c2:58:d1:95:
         65:d6:06:1e:39:a4:d2:91:3f:a4:ca:6a:63:0d:c4:b7:a9:7c:
         8c:49:4b:41:b3:14:7e:4b:5f:42:20:c6:85:06:de:81:dc:bc:
         d4:ca:15:c6:fb:4b:a1:0b:52:3b:fb:3b:b0:8b:2b:df:4b:9e:
         3a:72:d5:5b:3b:11:c0:e9:3f:6b:69:67:d5:0f:30:55:72:46:
         a6:8a:58:e3:1c:35:ed:4d:bc:a1:ce:4d:25:bd:1f:67:0d:2b:
         10:d9:af:a2:60:b1:20:74:8e:68:ce:47:07:ff:69:6c:2e:48:
         24:d7:89:e8:0d:37:59:c3:4e:56:98:a3:71:33:ae:8a:f5:69:
         b1:6a:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:57 2026 by rpki-client