Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
File:                     078AE946642A11EAA019224CC4F9AE02.roa (raw, json)
Hash identifier:          31whv5fvX3GHhn8oNBBfKndDfzOhLiKe+vMmbXanShU=
Subject key identifier:   A0:4B:D7:56:FD:86:CA:55:7E:88:48:EF:D3:B6:0B:DB:EA:17:B0:0F
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       0BB6
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:57:51 +0000
ROA not before:           Sun 26 Oct 2025 19:38:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135554
IP address blocks:        103.123.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Oct 26 19:38:01 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a445df-9ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:8e:e8:f9:be:6c:49:68:ee:ab:d3:f9:89:
                    9e:f6:dd:b3:50:a1:51:e9:6b:6c:fa:cf:fa:e8:0d:
                    6a:e5:db:7e:ca:a9:26:7a:93:05:af:c9:ba:12:66:
                    55:99:44:a1:32:3e:95:da:71:a2:fd:7c:70:43:32:
                    50:0b:33:15:42:9c:20:76:32:c4:76:15:69:d9:18:
                    15:e4:5e:97:ff:c2:c6:0c:15:73:35:19:92:2b:88:
                    e9:69:9b:2e:ac:c6:a6:25:15:f2:79:50:ed:f9:50:
                    df:c7:b4:26:01:94:8c:2d:57:f7:6a:83:1c:95:f7:
                    4f:17:97:0d:85:ab:13:a9:44:6f:c2:41:a5:39:4c:
                    48:9c:57:04:cd:36:bd:d3:47:b8:83:e0:42:97:07:
                    79:c1:7c:62:45:a5:dc:01:61:87:81:c9:fb:66:c6:
                    bc:f7:c2:12:1f:56:a0:bb:04:98:0e:86:bb:2e:f1:
                    b2:92:62:29:72:65:8e:43:4c:f5:2c:6e:12:da:8b:
                    26:7e:56:de:64:6e:79:76:7f:31:95:f5:07:39:5c:
                    3a:7f:f0:22:6f:2e:6c:15:c3:7c:48:88:85:67:4c:
                    ab:b3:a7:ad:9f:9b:0a:2a:f5:b5:45:c1:bc:94:a0:
                    27:aa:62:7f:42:e0:f3:11:4b:10:ae:bc:cb:ce:cc:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:D7:56:FD:86:CA:55:7E:88:48:EF:D3:B6:0B:DB:EA:17:B0:0F
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:62:e4:f5:c7:27:d4:21:b1:c3:dd:16:6f:c0:7c:5e:2c:
         a3:9d:55:2f:7f:25:f9:a5:fd:77:c0:89:a2:82:61:af:c7:71:
         a8:1e:34:79:81:46:ac:b2:fa:72:da:52:1b:b1:81:77:ac:ac:
         b5:d6:53:df:da:72:e3:c9:42:79:df:02:4d:be:fb:9a:7e:d3:
         c1:e3:ce:17:78:00:2b:11:53:31:3a:e5:80:db:b7:6b:f8:ab:
         62:51:72:13:3c:07:b2:e3:a9:ff:5b:78:e1:8e:6b:d9:db:68:
         ae:90:42:d8:48:5f:2c:be:b3:fd:c9:3c:92:d9:c4:03:8d:0a:
         ab:d3:06:53:03:e1:ab:ec:57:44:e1:6b:37:a5:26:e1:07:2c:
         41:27:7b:8d:8c:79:b1:7a:b6:ea:ad:ea:5a:ee:93:e4:1b:3a:
         e1:e4:74:b2:85:55:f8:c5:74:c3:6a:4a:b4:76:86:87:1b:ec:
         97:c2:a2:e3:22:5a:ee:d8:27:56:f2:15:41:a2:cc:58:69:43:
         8d:7d:f4:fd:6e:4f:f6:c8:c0:95:cc:d1:73:2c:11:dc:9e:02:
         af:03:97:2c:85:bc:da:ee:a7:d3:0f:24:bd:0f:f9:00:6b:e4:
         de:b7:b6:f9:94:4d:31:2e:e1:4b:6d:dc:8a:a7:76:78:67:e3:
         66:1b:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:43 2026 by rpki-client