Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/79F19E0A5BDA11F0980FE961C4F9AE02.roa
File:                     79F19E0A5BDA11F0980FE961C4F9AE02.roa (raw, json)
Hash identifier:          Q5xlJCAiF8KCnEHIB5dc5jerjCip28+WlID9p/XyUfA=
Subject key identifier:   27:04:9A:C5:12:E0:02:31:44:44:8E:66:81:04:16:71:50:D7:40:AE
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       0693
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/79F19E0A5BDA11F0980FE961C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:46:16 +0000
ROA not before:           Wed 24 Dec 2025 22:19:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        103.145.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Dec 24 22:19:24 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45f48-240a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:28:83:59:db:91:98:c3:a8:b7:07:0f:2e:
                    7e:26:e4:b1:23:10:25:2c:d4:dd:c8:9b:a2:f3:9e:
                    33:1c:6e:3b:20:40:cd:dd:8a:87:ab:98:62:fc:78:
                    7a:24:77:16:76:b2:ec:fb:4f:21:e7:a0:e9:2f:69:
                    78:17:72:b2:b3:61:1a:f9:78:d6:64:63:66:64:7e:
                    16:f3:4f:06:81:96:d3:64:0f:1c:74:67:0b:e0:7d:
                    54:d0:47:23:68:ca:f3:d2:d2:c2:6e:35:8c:9f:4a:
                    9e:a7:0d:67:2b:1e:00:86:cc:94:b8:c4:62:98:f3:
                    22:5e:f4:a1:20:44:82:d9:2d:f4:05:c9:50:a8:6a:
                    f1:1f:7a:b7:19:04:61:91:a6:26:b0:0a:bd:f9:5a:
                    95:a7:51:c5:87:78:7c:38:1c:73:9f:53:47:e6:10:
                    80:81:11:b5:aa:86:b9:83:6e:2e:44:5b:d4:f8:f9:
                    5b:19:45:2b:28:27:30:d3:07:a1:92:93:00:40:b1:
                    d6:79:2d:da:83:5b:7b:29:e4:0e:27:e9:f0:4f:05:
                    2c:03:34:00:89:fd:b1:8a:59:c5:cf:4c:63:4d:06:
                    11:6b:5e:e3:bf:c8:1a:b9:b9:ca:8f:7e:c0:04:3f:
                    f4:bd:45:b2:51:bc:89:e6:1b:d9:5b:12:f6:1c:a1:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:9A:C5:12:E0:02:31:44:44:8E:66:81:04:16:71:50:D7:40:AE
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/79F19E0A5BDA11F0980FE961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:07:ce:97:fb:b3:f8:e5:51:6a:c5:5d:41:0f:fc:b3:f0:3f:
         97:8d:ae:b6:f6:eb:cd:be:26:77:9b:cb:83:df:89:bb:68:e1:
         c2:48:27:00:1b:00:cf:49:75:4b:eb:5f:e4:0c:93:92:20:cf:
         ef:f6:48:9e:bb:2a:c8:90:0a:46:d3:40:e4:3a:24:7e:09:9f:
         34:3f:21:0a:f6:e6:33:e0:71:db:a5:50:22:27:81:aa:6d:93:
         55:a4:61:5c:34:71:f9:21:07:99:01:37:7a:78:07:09:db:90:
         96:46:db:3a:87:4f:50:6d:36:8e:3d:62:9a:82:af:76:85:bc:
         64:d5:2a:79:c6:aa:5b:e9:d3:1a:3c:7d:79:12:1f:af:c2:e0:
         3a:fb:ce:3a:7d:31:71:e1:7a:94:11:db:1f:11:e6:7b:2a:bb:
         a1:44:e9:b0:64:af:a7:c9:90:dc:90:78:65:9e:13:43:c4:a3:
         da:6b:01:d0:ad:e7:cd:f1:44:04:86:e6:7d:26:bf:fe:ed:e6:
         74:0d:1b:b0:5a:c8:0f:8e:dc:68:03:db:c8:b7:ed:e6:c5:45:
         da:6c:15:56:cb:a9:a7:27:b9:c2:c3:7d:6a:5f:33:92:4a:80:
         19:a9:b4:25:93:d9:87:5b:d1:19:2e:0a:94:46:c4:e8:1d:20:
         f4:df:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:28 2026 by rpki-client