Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
File:                     76B3E9929B9811EC8CE35458C4F9AE02.roa (raw, json)
Hash identifier:          dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=
Subject key identifier:   64:AD:0A:38:7E:1B:7F:94:32:5E:CE:D8:EB:D7:42:55:55:55:2B:BE
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       042E
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:01:53 +0000
ROA not before:           Wed 11 Jun 2025 00:56:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141389
IP address blocks:        103.167.214.0/24 maxlen: 24
                          103.167.215.0/24 maxlen: 24
                          2001:df6:c180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jun 11 00:56:08 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40e91-6d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:95:61:60:3f:56:65:cb:18:b1:60:47:ce:
                    59:e1:01:14:97:66:4e:51:3c:09:1b:cc:6f:1d:5e:
                    21:d5:6c:89:46:b1:59:39:3b:14:1d:c8:9e:95:70:
                    e6:4b:47:03:f4:5c:e6:d8:19:cc:b8:c2:33:67:6e:
                    3b:7a:dc:9a:cd:97:8e:fe:21:ec:bc:87:34:a6:0e:
                    3a:fc:74:33:bd:de:22:f6:3b:a7:a9:7c:79:8c:0d:
                    ae:37:d8:8b:64:23:88:0d:df:51:95:93:cb:65:aa:
                    ca:1a:cc:31:fe:58:fb:35:cd:7a:29:fe:b2:28:18:
                    f2:52:f5:3d:49:00:82:2f:95:8e:20:39:ca:fa:7d:
                    ea:79:d6:e1:82:a4:22:fc:38:0e:13:34:fa:1c:53:
                    35:ee:db:95:3e:ca:be:c8:b4:fc:35:14:63:af:49:
                    8a:f2:de:96:81:b8:9f:3c:1e:3f:ec:9a:6a:1b:b5:
                    e6:09:96:3f:06:28:47:d6:8c:d3:e9:4d:ee:22:33:
                    b7:0f:4a:a6:32:b0:79:22:7f:9a:c9:9c:b9:c3:1f:
                    e7:b0:0d:39:5d:95:ea:93:b4:2b:b2:a6:7c:ca:d1:
                    ff:6e:fd:18:1e:e5:ef:41:fd:d6:8c:37:93:2d:ff:
                    24:b9:8c:ea:2f:47:d5:0b:0f:77:9d:9c:e9:bf:0c:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AD:0A:38:7E:1B:7F:94:32:5E:CE:D8:EB:D7:42:55:55:55:2B:BE
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.214.0/23
                IPv6:
                  2001:df6:c180::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:e2:c9:56:92:03:5a:f2:1c:86:05:e2:d0:7e:74:41:d1:
         3b:3c:86:0c:0c:29:da:be:dc:b7:fb:1f:ef:58:2a:b3:7d:7f:
         31:c3:73:57:f9:d4:70:68:78:9f:64:65:21:fa:98:5d:f1:63:
         fa:6d:88:49:2e:e3:0b:ee:e1:3e:3d:52:69:fe:b6:fb:35:4d:
         e5:69:2e:0b:a2:3f:9c:c4:7d:5c:71:ac:cd:30:db:34:a6:18:
         ad:59:56:44:58:64:12:bf:02:f9:36:0c:75:79:27:16:27:c2:
         21:4d:a9:c1:df:7b:22:25:0d:17:71:09:af:ee:60:a2:00:9e:
         1f:29:35:ed:46:cb:17:a8:c1:3b:43:9f:05:af:28:b6:77:11:
         31:23:3b:c5:a3:cb:92:0c:11:10:08:96:7a:d0:b8:fd:2d:3a:
         1d:94:4b:3e:4d:62:f2:27:68:87:3d:25:8a:7c:da:eb:42:5b:
         b5:14:27:0d:f9:55:3c:bb:03:fb:c4:21:ae:24:ac:78:fa:c4:
         02:08:92:30:e7:7c:49:17:64:5a:a3:df:b2:ec:48:e9:c4:b2:
         bf:88:a6:f7:93:fd:ac:a5:47:eb:7c:ee:82:82:71:65:6a:76:
         86:34:d2:ae:a9:17:1f:b3:69:c2:58:ca:66:39:39:45:7a:60:
         b1:d6:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:28 2026 by rpki-client