Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
File:                     90BBD1B6884C11EB88489B75C4F9AE02.roa (raw, json)
Hash identifier:          Mgc4frtsf2+Mk4kqhvP9ShsUUEAvGd8n3hXxY5uC1m4=
Subject key identifier:   0F:96:24:5B:33:D7:FF:83:E2:13:1E:71:E4:00:5B:7A:B1:4D:B2:8B
Certificate issuer:       /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial:       07AA
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:56:17 +0000
ROA not before:           Sat 10 May 2025 22:22:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.162.82.0/24 maxlen: 24
                          2001:df6:1a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
        Validity
            Not Before: May 10 22:22:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a45391-e345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:5e:8e:79:fe:4b:99:a6:31:28:bf:b9:d4:
                    1b:4d:71:43:55:59:81:4a:54:3e:01:76:7b:fe:4c:
                    4a:2d:52:6b:2f:9e:d3:ac:82:fc:ac:fe:b0:00:9a:
                    d7:bc:d4:ce:de:f7:ed:e3:d7:0d:7b:c9:89:68:63:
                    83:33:ad:54:9c:03:d0:5e:81:f6:fe:0d:17:60:ea:
                    03:c5:0c:f7:4f:36:d9:2e:1e:72:22:4b:a4:fb:6f:
                    b5:a5:2a:0e:11:fa:a7:f1:4b:5f:55:cd:d4:1e:ba:
                    00:ba:9f:96:5e:94:0a:96:03:60:9a:73:3b:e8:bf:
                    2f:48:4b:02:53:c8:98:ee:62:80:29:3a:9f:5e:b9:
                    ac:e7:6c:6b:c4:37:69:12:3d:ce:e8:dc:3a:e3:8b:
                    59:00:8d:70:77:63:3e:b1:8c:13:5b:20:2e:00:f1:
                    a8:2d:ad:18:d2:c0:4a:94:8f:78:36:6d:04:50:a0:
                    22:e0:02:d3:e4:6b:b7:41:22:9a:ac:35:6c:b1:97:
                    78:5d:ba:92:55:10:56:3f:68:c7:a8:44:7f:ab:ce:
                    63:ae:35:a6:d1:07:19:b9:ad:db:04:48:60:a7:7f:
                    39:e7:ae:27:16:94:ca:b6:af:9e:8f:77:6d:55:02:
                    ef:89:d7:a5:7f:71:7f:71:d5:61:21:ea:9a:0e:1e:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:24:5B:33:D7:FF:83:E2:13:1E:71:E4:00:5B:7A:B1:4D:B2:8B
            X509v3 Authority Key Identifier:
                keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.82.0/24
                IPv6:
                  2001:df6:1a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:4a:e5:46:4d:b6:34:16:12:17:d8:9a:ca:6d:51:a3:4b:a3:
         0a:cd:bc:a4:84:29:ef:2f:d0:11:6f:51:35:d1:87:bc:92:bf:
         0d:1b:13:53:7a:d9:2b:aa:4a:f4:d8:d4:87:f2:1f:0c:b6:c5:
         4d:cb:6e:4e:58:8a:f9:1a:f8:a5:a8:c8:32:17:98:1e:6d:86:
         dd:c1:35:cc:7f:c9:89:b8:fe:23:1b:78:6c:79:93:4b:e0:58:
         2d:af:ee:b2:31:19:fb:f9:49:f0:dc:e7:4f:87:a8:2f:c7:33:
         be:25:2f:40:45:9e:fe:f9:70:e3:a6:50:e7:df:b1:0a:4a:8d:
         07:8d:0f:15:5b:a5:60:36:d1:61:4d:43:8a:67:bf:63:e8:06:
         47:d4:7d:82:49:e1:0d:76:fb:e2:ed:4b:f0:48:a2:e9:af:9c:
         0a:10:2e:14:39:f6:44:9a:6d:3c:7b:c6:02:da:94:72:c9:76:
         0c:f0:1b:9c:1f:f1:83:e1:e7:d1:6b:a2:ed:b5:e0:f8:05:a5:
         5f:4f:4a:bb:67:78:32:4a:d6:0e:33:23:19:b8:41:55:ba:9f:
         e4:0a:78:95:ae:a9:e0:e4:21:2a:20:e4:e2:68:f7:a6:f3:71:
         d3:11:9b:86:c0:eb:e7:5d:51:e2:59:c8:4d:d0:e7:b7:ca:48:
         a6:5b:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:24 2026 by rpki-client