Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa
File:                     91BBC8880D9711ED8F09C27DC4F9AE02.roa (raw, json)
Hash identifier:          1aa3czYkpSyqjPONv8BwygAakzboZ9Kn6LCrFEhTJOY=
Subject key identifier:   FD:06:4D:19:D7:55:C2:CB:B9:4E:BD:C2:19:62:8F:B9:EC:7B:06:6B
Certificate issuer:       /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial:       0309
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:05:29 +0000
ROA not before:           Thu 03 Jul 2025 02:06:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149990
IP address blocks:        103.190.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
        Validity
            Not Before: Jul  3 02:06:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40159-5198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:81:ad:de:83:ef:50:17:2f:57:d7:15:aa:
                    06:58:4a:2c:a0:0c:0a:51:a4:f9:1f:66:09:a2:25:
                    0d:e3:65:38:a7:4b:f1:37:3a:6e:67:23:92:1b:27:
                    99:8e:60:97:97:18:3d:a7:20:97:0b:66:8f:47:61:
                    8d:9a:29:67:4b:13:53:ac:b7:1b:8e:3c:d0:b5:c4:
                    a2:8f:8b:fa:28:8d:98:6e:63:11:9e:98:38:e5:8f:
                    dd:79:5d:ce:ab:dc:bf:66:ea:1d:98:88:5c:da:1b:
                    50:89:15:eb:41:26:e3:bc:75:0e:18:aa:09:ba:82:
                    20:58:c4:b6:8e:e9:61:eb:b8:b7:b5:f6:9c:1e:e2:
                    30:a3:7f:59:d9:b7:4f:ad:97:ff:16:0a:2a:fd:06:
                    76:cb:42:6f:1f:c4:a1:91:f3:22:ba:90:76:24:19:
                    ea:51:fa:68:09:e8:d1:22:d4:df:c8:78:ec:21:f6:
                    fb:96:93:71:21:3e:b0:14:cb:07:eb:d8:72:b1:e1:
                    91:1a:d2:f2:74:08:92:a3:96:35:2c:06:e7:ef:f4:
                    f4:75:9f:81:53:61:08:82:e8:4b:96:6b:4f:b0:a6:
                    e4:0b:e4:ae:25:0c:73:f1:fd:02:ad:03:70:72:70:
                    b7:68:21:bf:b7:78:8e:ac:a4:27:27:73:25:5b:27:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:06:4D:19:D7:55:C2:CB:B9:4E:BD:C2:19:62:8F:B9:EC:7B:06:6B
            X509v3 Authority Key Identifier:
                keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:ef:88:9d:8f:9a:38:82:4a:a3:1d:d5:10:4f:e9:28:60:
         c6:06:23:dd:0e:15:26:53:b3:02:d4:89:28:5b:3c:ee:61:03:
         ff:eb:66:62:4e:32:5e:aa:e1:07:cc:f8:f3:b9:83:90:c0:98:
         60:d3:0f:81:d6:34:6a:0a:87:8c:04:82:22:33:84:93:56:fc:
         a5:20:12:1e:a0:91:a9:06:73:0b:c8:fb:d9:2e:0a:84:fe:cd:
         54:0e:ac:4d:dc:b0:ad:c8:d1:08:73:cf:5a:4e:f6:a8:94:47:
         13:f3:c6:5f:ff:24:0e:e1:89:95:2e:f5:e2:4f:0e:c2:a4:46:
         c3:1a:32:1f:89:92:51:29:e2:2c:72:01:c4:7f:90:e6:79:e5:
         79:24:53:37:81:8c:2f:0a:e2:f5:d5:e4:31:cc:d6:64:ca:a2:
         7b:3e:c6:7b:ef:0f:27:b2:4c:00:33:13:9c:41:15:4e:1f:48:
         de:a8:34:c3:95:83:6e:a9:ad:24:f7:d6:a4:d3:ae:1c:59:25:
         c5:5e:c6:a3:da:1f:63:21:f7:fe:3c:93:c0:ba:90:25:65:88:
         12:0d:56:fe:19:23:ab:a5:58:20:4b:23:51:0b:f5:99:96:a7:
         17:f6:75:0f:ff:11:8f:13:36:25:33:70:c0:cb:be:05:5e:61:
         71:ab:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:55 2026 by rpki-client