Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/27DB37683BD211EE8094355FC4F9AE02.roa
File:                     27DB37683BD211EE8094355FC4F9AE02.roa (raw, json)
Hash identifier:          jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=
Subject key identifier:   A3:04:5D:B5:51:42:0A:56:22:F0:1B:0A:46:CC:60:E4:B4:7F:FD:22
Certificate issuer:       /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Certificate serial:       01F9
Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/27DB37683BD211EE8094355FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:08:34 +0000
ROA not before:           Fri 31 Oct 2025 03:47:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133093
IP address blocks:        103.126.80.0/24 maxlen: 24
                          103.126.81.0/24 maxlen: 24
                          103.243.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
        Validity
            Not Before: Oct 31 03:47:27 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45672-8e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:4f:4c:e1:f8:0e:e7:bb:a5:0d:05:f7:a8:
                    e8:a0:6d:2d:f1:4c:09:3d:50:05:5a:74:7d:20:43:
                    e6:e3:df:6f:0f:98:af:f5:69:a2:ed:3a:12:69:b4:
                    e1:09:e9:76:91:40:72:5d:0a:c6:72:a2:53:14:09:
                    7b:5e:37:b0:17:2b:ad:bf:78:95:83:82:06:4c:e0:
                    93:7c:48:20:10:bb:92:07:55:3c:a8:c8:27:0a:6d:
                    70:cb:01:d9:3c:84:76:5d:d7:a2:84:d3:07:1a:ec:
                    4f:a3:f3:ec:85:07:74:40:fe:47:01:0f:1b:84:06:
                    54:c3:e9:79:52:78:f3:50:db:f2:92:0c:72:83:93:
                    ca:7c:8c:97:58:fe:f2:42:d6:a4:df:28:58:85:6b:
                    61:73:b2:ea:60:bb:f7:c5:fa:ec:78:31:18:42:5c:
                    2a:8b:61:81:8f:57:f3:7d:ee:32:cc:a8:f4:8d:d7:
                    07:f5:b2:4a:0c:bd:ab:90:84:fb:ea:48:31:27:14:
                    f4:4d:ab:1f:e0:b6:e2:0a:5f:39:db:50:6e:61:60:
                    c2:06:07:43:75:4c:d1:58:0e:38:03:6f:a8:8a:0a:
                    3c:4e:01:3a:43:9c:64:b9:5c:ca:ad:e1:c7:a7:f9:
                    da:da:01:26:4f:1d:ee:d8:8e:58:b1:ad:e8:77:48:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:5D:B5:51:42:0A:56:22:F0:1B:0A:46:CC:60:E4:B4:7F:FD:22
            X509v3 Authority Key Identifier:
                keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/27DB37683BD211EE8094355FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.80.0/23
                  103.243.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a7:4e:b8:3c:3d:e7:b4:60:ff:90:0e:f0:4d:47:c5:22:45:
         b0:53:61:f7:1a:f7:66:7e:da:de:e0:a7:19:48:b1:0f:33:d2:
         34:68:e2:90:3a:16:e3:5c:ed:8c:a5:fe:23:c7:bd:1d:82:90:
         78:1d:e8:ed:78:7d:d3:85:7a:30:8a:bc:01:1f:70:85:d8:8f:
         f9:dc:76:75:78:90:ea:34:1f:3f:08:d0:ac:da:84:6d:fe:fa:
         43:40:01:7f:e2:17:c6:b8:65:cb:6a:af:1f:8c:4d:4c:10:81:
         ab:46:f0:40:05:70:49:6f:27:ac:db:49:0c:d5:4f:94:c2:b2:
         d4:04:de:0a:07:5c:38:12:31:d4:c1:1f:54:07:4b:60:11:83:
         5d:b3:38:92:90:df:08:35:37:e9:29:8e:65:40:ee:32:6d:76:
         3c:27:d1:69:02:05:0e:49:a4:78:fb:a2:03:8d:49:29:02:2a:
         45:88:d4:a9:fb:37:64:da:33:64:b3:67:a8:ec:1d:dc:53:00:
         62:d7:35:c7:e8:0d:5d:84:b1:4e:7b:c2:6e:3b:8e:c2:6c:84:
         aa:72:eb:1b:b8:d9:74:fe:43:22:6c:a5:42:76:c2:9b:ac:c9:
         a2:f1:06:14:c1:19:14:1d:31:6b:c1:ef:68:bb:09:48:21:a5:
         50:35:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:39 2026 by rpki-client