Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa
File:                     0D2573FA173E11EA947B2976C4F9AE02.roa (raw, json)
Hash identifier:          Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=
Subject key identifier:   D9:DE:73:B6:7F:40:D4:6C:EB:3D:39:93:C5:38:29:84:38:B4:D2:9A
Certificate issuer:       /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
Certificate serial:       0C8B
Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:42:19 +0000
ROA not before:           Wed 31 Dec 2025 19:15:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139832
IP address blocks:        103.146.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3211 (0xc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934
        Validity
            Not Before: Dec 31 19:15:22 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4504b-4c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:36:74:05:7a:ea:f8:a5:2f:c7:14:ea:b6:
                    b1:7e:a6:51:4f:70:0c:30:85:a0:05:6a:7c:b5:37:
                    67:cb:80:78:84:db:34:92:bd:bd:30:a0:ae:3d:c2:
                    20:c1:cd:95:94:47:65:be:2a:39:4c:24:b1:2a:14:
                    7f:6a:a4:1f:5b:5b:24:4a:ab:9f:13:63:90:2b:fd:
                    49:ec:be:a2:67:ca:07:4c:fb:fe:43:a1:c4:32:62:
                    b0:d0:b0:18:aa:6b:e7:6f:df:d8:a3:52:9c:51:90:
                    da:36:91:e6:85:3c:97:d4:17:62:fc:fc:db:7f:04:
                    0a:28:a6:84:89:1c:13:80:8f:f8:30:b3:57:5e:22:
                    94:9e:54:5d:d4:12:47:af:66:d5:03:ef:26:4a:e6:
                    55:7b:f1:d5:80:e2:32:9d:eb:de:99:82:aa:ae:b2:
                    5b:28:b8:06:d5:bf:32:fc:d1:b4:fa:6a:55:f3:be:
                    5f:76:7b:20:eb:30:1a:fb:c4:d4:44:3f:ad:a7:ef:
                    3e:62:3a:e1:78:d1:98:2d:cb:39:6a:c6:85:29:06:
                    86:08:51:24:b0:39:8a:56:35:ba:11:e6:80:b6:99:
                    22:79:de:89:18:dc:86:70:42:b9:26:05:5c:5c:92:
                    2e:62:3d:3b:22:dc:d1:18:ca:a8:b8:07:49:f2:1d:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:73:B6:7F:40:D4:6C:EB:3D:39:93:C5:38:29:84:38:B4:D2:9A
            X509v3 Authority Key Identifier:
                keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:51:f1:54:1e:08:ba:a4:dc:2e:1d:0f:53:13:79:4b:e3:
         92:67:34:08:06:6d:cf:3c:55:03:1a:df:32:79:9f:e2:e7:a9:
         1a:65:4f:f9:8a:8b:23:1c:00:00:8d:67:da:f7:8f:5d:a3:6b:
         87:15:d2:26:33:3c:88:78:c5:da:34:8d:5c:45:c4:74:95:36:
         6c:48:f5:02:9a:01:8b:92:01:57:f9:e0:d7:1f:e2:2e:5a:78:
         e0:cf:fa:85:60:17:57:02:6b:f8:d4:b6:fa:ac:48:73:a5:bb:
         f5:6a:83:95:89:b4:d4:36:81:6a:92:39:6f:8c:a0:d4:88:5b:
         76:b4:5a:c1:29:13:db:46:c9:56:c7:ad:19:31:e1:2e:55:39:
         a6:d9:f8:e2:a9:9a:e2:83:35:ba:14:1f:77:a7:2c:55:64:af:
         41:55:db:ef:53:cc:9a:a7:f3:aa:99:8d:22:0f:1a:29:65:7a:
         6b:9a:6a:61:b1:e7:e7:2c:14:f3:f4:e4:4c:2a:62:1c:46:40:
         72:88:6f:a6:cd:98:d8:c8:a6:4c:55:68:e1:74:74:a9:b8:e6:
         c5:4a:c9:a6:aa:11:5e:fb:0a:9b:dd:72:09:1f:47:05:01:2b:
         04:13:82:95:10:35:a7:1a:bc:0d:40:29:65:e7:19:7e:2e:da:
         df:9c:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:54 2026 by rpki-client