Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
File:                     9EA2D73236D311EF89295180C4F9AE02.roa (raw, json)
Hash identifier:          vNb59XfrJrniQoC4B5nywtbnafzXLeklwV+6oTZ56io=
Subject key identifier:   BA:9E:FF:1B:C1:85:48:E8:4B:DB:82:E0:6B:67:8B:2A:82:3D:6D:73
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       0714
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:47:57 +0000
ROA not before:           Sun 02 Nov 2025 22:42:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151952
IP address blocks:        103.143.185.0/24 maxlen: 24
                          103.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Nov  2 22:42:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46dbd-5e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:d1:3a:cb:95:6f:b1:9a:3f:b7:3a:c2:49:
                    e1:2b:39:86:97:96:9a:b4:d4:79:42:b8:34:86:ce:
                    2e:53:f3:7a:ee:ae:56:68:04:6d:14:ed:d3:6d:d6:
                    7e:06:5f:01:fa:de:c2:bc:b4:13:1a:3a:27:c5:01:
                    17:0e:34:cf:a8:bc:35:70:c3:b7:1a:0b:ab:7c:65:
                    e7:f7:b5:24:30:c0:d1:c2:b4:60:21:c9:2e:0e:b3:
                    b8:e9:6b:39:b6:06:f1:95:6c:2d:01:e4:17:20:88:
                    65:60:99:0e:47:9b:ce:9b:b4:0b:76:d9:f9:9a:d5:
                    9d:03:63:38:b2:13:16:27:c9:69:e9:49:ef:d3:bf:
                    7f:5a:9d:6c:80:99:b9:e9:c6:e8:e4:6f:c2:fb:3e:
                    51:60:3f:41:9e:13:3f:6c:97:16:85:58:c9:08:ca:
                    c0:44:48:09:1b:ca:85:18:6d:56:a7:77:37:59:6d:
                    70:ce:ed:e2:7a:2d:86:6a:70:9b:9f:1d:fb:70:83:
                    78:a6:50:44:5b:94:8b:37:c9:20:10:89:01:74:d3:
                    99:6d:91:80:21:b0:95:53:3b:27:ae:1c:78:e9:85:
                    bc:33:f5:97:22:37:50:2e:4b:e3:70:b5:8a:e1:9c:
                    f1:c7:72:35:5a:8d:f4:4a:08:0f:e6:a7:8b:88:09:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9E:FF:1B:C1:85:48:E8:4B:DB:82:E0:6B:67:8B:2A:82:3D:6D:73
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.185.0/24
                  103.168.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:28:a7:25:99:97:02:65:f5:a8:8e:75:ee:1c:93:fb:dd:
         17:8a:df:ed:42:30:8f:bb:f4:86:15:ea:cc:54:19:01:b1:45:
         03:93:54:8b:22:77:00:14:8e:c5:f8:23:a9:65:a8:db:8f:9d:
         b3:2c:78:fb:a8:3f:08:a8:5c:25:46:17:b6:e7:58:42:f2:83:
         33:dc:6b:40:71:36:16:c9:62:2a:b7:20:d6:2f:2e:e6:fe:88:
         9d:16:63:c8:e7:25:e4:92:0f:bc:44:59:54:6a:0a:23:0b:e6:
         d6:7b:65:76:85:eb:39:85:20:53:de:6c:79:c8:68:c1:5d:76:
         ac:56:24:8c:4d:ef:25:be:80:70:2f:f4:bf:6d:e4:32:a8:d9:
         81:e1:a6:b0:05:0c:3f:77:aa:40:c2:a0:85:e4:a4:fb:58:b8:
         16:0a:f7:8a:25:01:63:a0:ff:ef:44:04:b5:cb:73:52:ca:ab:
         6a:c6:37:63:4d:17:d8:b7:89:c5:db:00:cf:00:0e:1c:49:63:
         c5:a0:67:2e:ab:b2:ee:48:d1:58:06:70:da:9e:74:60:93:e2:
         67:88:45:38:ca:fd:d2:54:56:f8:bd:a5:1f:5d:93:e5:18:90:
         fa:b1:b2:e1:8a:3e:f3:18:9a:0f:32:fc:f6:f8:37:c6:e4:d3:
         23:38:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:53 2026 by rpki-client