Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
File:                     E3829F3CB1CF11EAA8732709C4F9AE02.roa (raw, json)
Hash identifier:          zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=
Subject key identifier:   41:33:E0:97:68:72:B4:76:AC:FD:FB:9B:4A:D7:7A:B6:21:04:C6:43
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       0976
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:01:57 +0000
ROA not before:           Mon 02 Feb 2026 20:16:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7490
IP address blocks:        103.7.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422 (0x976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Feb  2 20:16:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a462f5-0121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:19:42:27:8d:e2:0e:25:12:5e:f3:8c:14:
                    31:76:66:97:45:47:51:6a:47:b1:04:70:34:a7:16:
                    04:90:11:be:fc:e2:92:0e:25:15:95:f6:cb:a6:eb:
                    8d:84:e6:4e:71:48:2d:41:11:3e:86:45:7e:66:4e:
                    2a:5e:90:7e:19:39:10:54:d5:b0:9e:1c:90:3b:de:
                    10:ca:44:33:3a:ab:e2:68:63:6d:b5:c6:d6:3a:85:
                    01:ce:2e:89:c8:96:c7:de:36:b1:a4:4c:ca:05:ea:
                    4c:13:bb:86:12:39:66:f8:74:67:20:01:05:33:f0:
                    9a:c6:11:40:9c:7b:79:66:ef:6f:6d:5d:f8:9a:9f:
                    1f:db:0e:23:a7:2b:0e:51:29:30:e5:7d:f5:f2:5d:
                    a2:79:dd:01:03:be:06:f3:ec:c7:49:9d:04:05:15:
                    04:56:2b:71:13:43:28:f2:03:31:d1:f6:81:cf:0a:
                    19:5b:d3:9f:0e:2d:2a:66:41:9d:34:7c:43:fa:4d:
                    19:27:8f:f5:6e:c3:75:72:5a:11:e3:77:56:b7:24:
                    ac:45:04:bf:08:e0:86:f2:ab:52:05:11:5e:cf:e1:
                    23:64:51:3f:ca:a2:3f:10:67:8f:d8:0d:9a:72:66:
                    5c:c5:70:8f:ed:e7:92:56:61:7d:50:bb:4d:52:b5:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:33:E0:97:68:72:B4:76:AC:FD:FB:9B:4A:D7:7A:B6:21:04:C6:43
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:0d:98:29:5c:09:d1:b3:36:aa:a8:b1:97:64:1d:37:cf:
         86:e1:5d:bc:ab:66:1a:5c:1f:6f:36:10:f9:28:7a:a9:3c:b2:
         49:48:e0:48:1c:28:54:fc:4a:e0:0a:6f:cd:41:be:dc:f0:7e:
         f6:81:0e:5a:3b:d9:3c:53:ed:eb:3d:36:08:be:53:7b:b9:ce:
         5b:6f:82:32:90:54:d5:25:ed:14:91:50:06:04:72:8a:7d:6e:
         45:2c:7c:8b:98:fe:0f:73:6f:06:03:65:c0:bf:3d:6d:57:c7:
         54:ee:c9:0b:76:21:c8:1c:c6:d0:2d:33:bd:bd:ee:0a:3c:ef:
         c6:e5:8f:11:dd:da:bb:41:50:5e:52:d0:3b:46:40:4e:26:03:
         db:ff:d0:ad:2d:99:49:ef:64:54:93:99:bd:37:1c:09:ad:4a:
         d7:20:62:35:03:16:1a:d8:f8:2d:c7:a6:9b:36:94:ff:16:29:
         ed:5a:80:fa:83:ed:14:d9:ee:aa:dc:64:cf:b3:58:e8:e7:cd:
         12:de:0d:15:e2:06:c6:ad:ed:69:29:51:cc:1f:b9:05:4b:be:
         60:55:9e:bc:5e:16:48:f5:76:3c:34:59:b2:86:9d:65:b0:0f:
         94:9a:c2:7c:78:ed:c3:99:50:3e:1a:9e:f9:d9:9d:7c:42:95:
         ac:e6:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:30 2026 by rpki-client