Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
File:                     D9EEB222DBFC11EC82E85E69C4F9AE02.roa (raw, json)
Hash identifier:          UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=
Subject key identifier:   D3:19:C2:23:B0:DE:75:76:CB:D8:ED:2B:F9:FB:2B:9E:56:8B:D2:24
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       0386
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:21:40 +0000
ROA not before:           Tue 27 May 2025 02:18:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149832
IP address blocks:        103.187.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: May 27 02:18:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e904-4d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:69:84:a8:8d:7e:a8:57:71:a9:60:61:cb:
                    cb:f2:f6:90:aa:85:fc:50:dc:e2:51:0d:fd:13:c9:
                    ab:83:85:1e:22:13:0c:0e:89:59:bb:eb:25:55:48:
                    f9:74:5d:5e:38:63:29:3d:55:7f:08:23:09:d5:07:
                    da:07:5f:68:21:d9:7e:81:36:8b:f9:46:ee:e4:74:
                    f7:ef:00:71:82:4b:1e:13:57:00:f2:f1:5c:21:fb:
                    91:aa:72:5c:03:98:c2:65:af:86:de:5c:1f:9b:87:
                    c1:22:10:c7:66:85:d1:03:df:bc:19:af:02:41:9e:
                    74:b6:96:b1:2b:3f:00:82:75:9d:e6:d5:96:23:bf:
                    cf:89:97:05:79:00:82:0b:59:70:b2:47:e7:43:d3:
                    24:2a:6a:13:32:eb:2d:4e:4b:46:dc:c4:47:6b:f9:
                    b8:70:ee:ec:75:d8:ab:6b:bc:e1:79:e6:b1:7b:ca:
                    75:93:5c:c1:b9:1d:69:1c:46:f8:50:73:f5:ab:20:
                    9d:d8:c8:10:cc:c8:3b:f9:cc:c8:ac:3f:b7:8b:12:
                    78:8d:0b:65:dd:60:8c:fb:53:82:cb:33:61:86:2a:
                    4d:ab:10:9b:24:4a:24:3f:45:a6:fc:9b:78:0e:73:
                    92:f5:67:8c:54:e6:09:0d:28:76:9b:9e:f3:2f:8c:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:19:C2:23:B0:DE:75:76:CB:D8:ED:2B:F9:FB:2B:9E:56:8B:D2:24
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:84:a4:7a:49:28:38:66:57:71:3b:c3:06:f5:a2:89:28:b4:
         3f:00:97:31:be:d1:0a:ed:e2:c9:a0:a6:fc:55:8d:2b:23:e7:
         56:ff:e8:cf:43:72:8f:43:95:e7:e2:3a:f3:27:f4:22:7e:73:
         e6:7f:bd:4a:89:d8:dc:11:71:a2:4f:3c:cd:d0:05:10:d0:49:
         4b:0b:ab:5e:6c:1e:ed:5d:31:91:fa:f1:36:51:3d:28:e6:06:
         f6:81:87:59:14:9e:42:f6:a2:71:07:b1:0c:ed:f3:1e:5a:2d:
         8e:a1:59:fb:bf:8e:94:42:43:86:7a:23:d3:a2:0e:7e:18:6a:
         23:08:6e:b6:7e:26:41:84:80:34:26:a8:99:53:22:32:5c:54:
         25:1d:35:7d:10:8d:e8:a0:20:8b:e3:39:8e:96:9e:28:bb:df:
         81:14:ba:fe:6d:40:70:a3:32:97:4c:22:46:ed:07:04:89:9a:
         1f:fa:6c:b0:c1:30:fc:50:d2:1f:0a:85:97:85:fb:d6:a8:76:
         0b:77:49:72:89:08:ef:9b:e2:9d:91:49:5c:3f:26:4a:31:3a:
         c8:4b:49:cf:af:ea:0f:1c:95:ce:3b:4f:1a:e6:1c:03:22:0d:
         a7:9c:b5:35:6e:a4:09:5c:98:d1:24:08:a2:7e:c8:d2:11:18:
         44:09:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:58 2026 by rpki-client