Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/91269EDA6D4111EC8A648F1EC4F9AE02.roa
File:                     91269EDA6D4111EC8A648F1EC4F9AE02.roa (raw, json)
Hash identifier:          GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=
Subject key identifier:   11:BC:50:AB:4E:F8:20:21:8D:F5:AD:74:00:91:FC:09:20:08:AA:45
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1D5E
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/91269EDA6D4111EC8A648F1EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:59:18 +0000
ROA not before:           Tue 18 Nov 2025 16:04:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        103.11.212.0/24 maxlen: 24
                          103.11.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7518 (0x1d5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Nov 18 16:04:31 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47066-d2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:0d:86:b6:a7:88:51:76:7d:a4:55:fd:6f:
                    f4:39:7c:ae:5b:f5:09:54:4e:77:5b:f2:dc:19:95:
                    41:21:21:7b:45:53:6e:0b:d8:1d:93:e0:2f:ff:8c:
                    b4:17:a0:58:2b:39:0f:fb:49:8b:61:d4:c1:44:de:
                    60:d3:65:be:38:44:e1:99:6f:bc:74:11:a3:d2:05:
                    5a:4c:5d:f3:5e:01:b1:1d:3d:63:c0:95:6d:a2:23:
                    6e:4e:63:b5:67:f6:00:87:65:80:2d:9f:ba:65:64:
                    d2:09:39:0e:b5:51:f0:e5:b2:1f:c7:40:48:0a:d4:
                    df:72:68:eb:95:7d:93:72:f4:7d:d1:1b:11:46:7d:
                    95:18:18:67:26:5b:6e:87:13:04:b6:3f:1e:36:11:
                    90:ab:32:2a:3b:cf:e7:39:c8:4a:25:eb:3a:82:2f:
                    71:02:8d:ee:df:a6:21:4b:cf:65:b8:fd:cd:c9:f4:
                    34:0f:24:74:cd:e3:b6:1c:fa:9b:90:71:6f:7a:15:
                    d4:d1:44:5c:13:56:f5:b3:51:88:77:46:f2:6d:eb:
                    21:ff:ca:2c:98:07:7c:c0:bd:ae:30:32:9d:59:6c:
                    db:78:be:21:cc:30:cb:cc:fa:01:39:6c:4f:43:b7:
                    6a:7a:7e:8f:9b:03:a3:7e:ff:47:d9:4e:bd:3b:ff:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:50:AB:4E:F8:20:21:8D:F5:AD:74:00:91:FC:09:20:08:AA:45
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/91269EDA6D4111EC8A648F1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.212.0/24
                  103.11.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:83:16:32:87:f2:df:c9:78:28:91:99:18:9b:58:a8:82:
         b3:22:d7:8f:18:32:b8:91:71:9b:b4:fe:60:36:9d:1b:8b:bd:
         17:4a:7e:7e:57:e6:50:5a:c8:18:31:3d:a5:ca:c7:ff:60:e6:
         cd:2c:7a:34:7c:e6:db:bc:54:1e:28:11:2e:a9:fa:43:55:df:
         0b:1a:54:23:09:03:6e:31:1e:77:bf:6c:35:6c:13:07:46:56:
         e0:a1:ac:2c:b3:14:0e:be:97:ca:9f:45:61:4e:0b:4a:dc:b8:
         38:a8:70:a4:fc:ab:2f:52:17:5e:3b:71:1f:fa:59:41:22:0b:
         7b:fd:b9:9b:87:ce:cb:be:07:9c:35:e3:1c:c2:ca:c3:77:5f:
         cd:22:2a:35:46:48:a8:c3:1f:10:ed:ec:dc:f5:61:a4:cc:df:
         89:15:aa:9f:c6:22:fe:d0:36:36:b4:30:0c:b5:2b:73:de:2c:
         f5:44:c2:24:f6:38:e5:4b:5e:d9:69:59:7d:d7:af:04:da:c9:
         12:ef:90:49:cc:f1:a1:71:26:84:a2:b2:2c:c5:23:49:e4:b5:
         ea:48:50:6b:61:81:8a:41:b7:ad:de:9f:54:de:d0:0c:54:0a:
         86:1b:00:61:b2:32:ed:07:fd:12:b8:c5:f8:b3:d7:23:1d:09:
         9a:1b:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:20 2026 by rpki-client