Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa
File:                     06D9E242335211E79AC36F87C4F9AE02.roa (raw, json)
Hash identifier:          WoeF+ehZO26Tn0BFlZwa6DzoBxWlNOms/5FLnHV2m6M=
Subject key identifier:   A6:48:76:64:AD:70:03:B1:F3:67:EC:04:74:C7:5D:F6:F5:1A:1C:52
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1B47
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:14:40 +0000
ROA not before:           Mon 26 May 2025 16:25:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64515
IP address blocks:        103.87.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6983 (0x1b47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: May 26 16:25:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42db0-2a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:26:1f:07:92:d1:89:91:ed:5f:81:7b:93:
                    4f:d5:bb:94:3c:80:ea:b7:f7:17:d6:ff:76:a2:5d:
                    a9:6e:eb:88:24:f9:5b:44:51:af:31:20:87:7f:eb:
                    72:72:a7:55:ca:69:d2:cc:12:1c:7b:a6:c7:98:41:
                    f2:e1:9a:6b:99:e5:59:b0:e5:58:2e:9d:ac:cc:68:
                    a7:5a:84:76:b3:f0:1c:c3:06:da:da:62:b7:40:f6:
                    2e:aa:a7:68:fb:6f:17:4a:7a:ba:e4:66:27:73:ec:
                    36:09:b8:21:dd:3b:82:d6:60:bc:b2:20:0f:b3:18:
                    97:dd:fe:f4:38:7c:80:d9:56:8a:4f:cc:39:96:25:
                    1b:b5:72:c7:9e:1d:ea:71:57:57:57:c9:9b:cc:d6:
                    08:68:b8:6f:83:12:bd:ba:ce:88:eb:99:1e:82:38:
                    a4:94:5c:ad:19:e2:61:d3:71:3b:ff:7e:8b:a6:4c:
                    f0:08:7f:4f:84:06:2d:29:31:f3:ab:14:68:e3:a5:
                    59:fe:fe:97:36:25:ff:14:b8:8f:57:68:e2:8d:13:
                    db:44:0e:e3:31:30:1c:a3:89:55:58:11:0b:32:48:
                    e8:b2:2b:0b:fa:68:1b:42:30:f0:ad:21:a3:29:94:
                    cb:af:f8:fd:45:43:79:b0:60:9c:34:12:e8:be:31:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:76:64:AD:70:03:B1:F3:67:EC:04:74:C7:5D:F6:F5:1A:1C:52
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/06D9E242335211E79AC36F87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:01:00:4d:23:43:e8:ef:9a:9d:14:86:b3:45:f7:be:fb:10:
         5c:b4:35:2c:e8:20:e4:f7:7b:9c:56:a8:ab:31:b6:94:d8:2d:
         13:6d:ee:dd:0f:4a:f8:9e:36:77:aa:32:c3:0d:26:94:77:8d:
         0f:ca:26:96:39:5b:c5:1c:c5:46:6d:84:36:b8:a7:5a:ba:0c:
         81:a4:10:96:38:e2:c0:8d:d0:fc:1c:28:fb:a1:3a:07:71:cb:
         ec:03:d3:4a:7a:e3:5a:a6:47:40:8d:dd:1b:de:3b:92:a0:3d:
         ac:6c:46:07:48:30:d8:9a:35:8e:9d:88:fc:42:04:80:44:ec:
         f3:2a:c9:6a:8a:2f:81:0f:88:5b:e2:02:42:3a:2f:1d:e5:74:
         e3:86:6c:18:08:d3:ff:e7:0a:71:aa:15:5f:6b:38:b4:4c:09:
         7f:22:f9:98:58:32:b4:d0:73:1a:bc:05:2f:27:b3:92:11:d7:
         a6:47:67:b0:2f:37:ba:8b:34:a5:33:c4:24:eb:47:a7:5b:4d:
         80:0f:60:61:57:48:2d:17:67:e8:0b:bc:e2:1f:9c:68:34:0f:
         e9:2e:42:d9:73:53:aa:b0:b7:06:14:97:49:80:8b:ae:70:f6:
         d2:73:dc:c9:c2:cd:13:fd:cb:4f:d3:e8:dd:21:e8:79:1e:9b:
         1d:4a:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:03 2026 by rpki-client