Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
File:                     E762B166FAF811EE92A3642EC4F9AE02.roa (raw, json)
Hash identifier:          sU4cNv1HaW3Z4UjI9MyUuR7OqVjIOF34gToqnkUePP8=
Subject key identifier:   0C:74:3D:37:87:52:58:D9:E8:01:B8:C1:D3:74:EA:DB:14:0E:A0:7D
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       023F
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 04:22:45 +0000
ROA not before:           Sun 01 Mar 2026 04:22:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     210542
IP address blocks:        103.83.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Mar  1 04:22:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3bf15-9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:ba:ba:6f:04:85:3d:de:e7:4a:d7:8b:52:
                    49:7c:46:1e:82:87:06:61:d0:2b:95:49:31:2d:0d:
                    3c:0b:1f:9c:7c:df:61:1b:4b:1f:ae:53:fb:ea:18:
                    14:6a:18:fb:d2:20:59:69:b8:4f:7d:4c:aa:92:6d:
                    d6:80:76:43:08:e6:8a:16:a4:c4:3a:2b:4e:48:ce:
                    86:59:53:77:49:1a:91:da:60:d5:37:ec:f5:e8:40:
                    23:61:41:3e:ff:39:07:7b:63:94:77:9e:67:81:11:
                    6e:b3:f4:f8:91:f6:cf:4d:d9:d9:76:f8:01:ae:fe:
                    5d:eb:4f:8f:9b:b4:02:0e:df:04:e1:33:0c:05:23:
                    58:2e:91:17:59:f2:d4:44:00:16:60:90:53:01:ca:
                    84:0c:c3:c0:dd:f9:95:a0:b6:ea:cf:52:fd:e9:67:
                    26:d3:76:32:e0:be:c0:57:14:88:05:d2:ba:fb:b1:
                    2a:98:06:fc:26:13:48:30:75:26:d8:96:dc:18:96:
                    5c:04:9c:c4:b3:bb:cf:da:4a:b2:1c:6b:c5:86:45:
                    88:0b:71:ca:92:d1:ab:ef:48:f5:de:bd:d0:5b:91:
                    37:f7:dc:9b:05:8d:3b:fd:f7:a2:41:fc:02:8b:94:
                    b5:a4:88:fb:84:08:98:bc:93:ff:96:af:35:11:64:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:74:3D:37:87:52:58:D9:E8:01:B8:C1:D3:74:EA:DB:14:0E:A0:7D
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:67:a5:01:8a:41:6a:ed:36:6e:a4:f3:ed:a4:fc:57:d6:
         cf:cd:03:94:a1:cf:69:c2:ad:35:8d:8e:45:8f:0a:d6:be:c8:
         80:8b:0d:2e:3c:d3:f9:f7:d6:02:f4:6f:d5:09:88:51:b2:16:
         04:23:3e:e5:36:29:07:21:e4:24:ef:14:53:b4:d2:f6:5f:63:
         6a:55:02:9f:d4:3e:00:6f:b4:f7:8b:91:4c:a3:b1:6e:d9:40:
         bb:04:c2:33:d9:ce:24:ad:ae:52:11:19:be:26:2c:31:37:13:
         71:2a:fc:2d:1c:ba:7f:f6:39:ce:1f:2c:8d:9c:47:a5:7e:e2:
         3c:14:8e:95:67:a4:a9:00:cd:2b:77:4a:80:c4:ce:21:09:7b:
         55:ba:40:1a:ae:8a:21:8d:b0:3f:3b:84:1e:a3:cf:7a:42:72:
         99:09:47:e5:12:83:c0:0d:26:8b:e4:c1:a3:d8:58:d7:8e:b0:
         64:d9:f7:fb:a5:de:89:66:3b:c6:58:c0:7f:df:c1:ca:ae:ff:
         9c:33:c9:d5:9a:e4:56:7b:a9:36:16:02:f1:78:ff:17:e2:01:
         6f:8a:cd:7b:ec:6f:02:a7:fe:46:b2:3e:59:aa:21:90:5d:bc:
         c2:93:21:cd:8e:de:33:cc:af:1a:97:b2:fa:ac:2d:8b:bd:88:
         eb:b2:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:46 2026 by rpki-client