Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa
File:                     C9A309F60BEE11F1B8168AEE363D8C67.roa (raw, json)
Hash identifier:          qzCZpmfI1dDw7fXbRpeHYT+Qp4Si5AmJFJpDr6hKsFo=
Subject key identifier:   BC:12:74:5F:68:2D:26:51:74:34:ED:06:8C:30:63:57:0F:1F:80:A3
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0D66
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa
Signing time:             Sun 01 Mar 2026 17:21:45 +0000
ROA not before:           Tue 17 Feb 2026 10:52:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        103.135.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3430 (0xd66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Feb 17 10:52:44 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a475a8-7b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:bd:ef:59:e1:98:44:d9:fd:b1:73:6a:2e:
                    b4:12:40:14:d6:e6:4e:19:04:9b:82:e5:1b:96:88:
                    f1:1c:6f:20:ce:ea:b7:7c:f6:11:5f:82:4e:dc:a2:
                    8b:01:b8:01:df:19:05:c9:d5:85:48:c2:21:11:0c:
                    76:ef:1b:61:79:ec:f6:d3:db:13:32:d9:f4:a0:e9:
                    d1:5b:b2:ab:61:e2:aa:26:a5:9a:42:eb:32:3e:ce:
                    d4:39:54:f5:96:93:46:0a:04:c7:03:73:6a:9a:f0:
                    5e:29:58:3c:7e:ee:34:77:6b:5c:12:bf:47:36:13:
                    36:0c:c2:b7:e5:d7:3b:e1:63:61:4a:59:60:14:15:
                    41:43:65:65:95:16:40:37:f4:37:31:0f:07:c1:5c:
                    54:31:ad:40:ea:8c:41:a4:73:32:17:95:73:fb:a3:
                    7a:37:5e:65:94:21:91:09:68:e3:a0:70:33:4b:35:
                    94:31:94:a7:c6:7c:a2:1e:cc:72:69:a3:95:d9:20:
                    10:f1:70:54:e5:e6:60:c1:c9:3c:dc:dc:45:6e:00:
                    71:b2:d9:03:52:e2:3f:7b:45:0b:d6:49:10:b4:87:
                    f5:31:d2:6c:85:39:83:f9:a9:3e:e4:ec:6d:83:04:
                    bf:b1:59:ea:1d:e8:1a:f9:f8:3f:49:30:b4:3a:e7:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:74:5F:68:2D:26:51:74:34:ED:06:8C:30:63:57:0F:1F:80:A3
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:35:0b:3f:04:e7:d5:b5:27:78:67:54:97:c6:b1:ee:53:
         41:50:30:9f:21:70:1f:0e:b3:89:05:51:e3:5c:c4:83:b6:46:
         15:b6:69:7d:1a:fb:c2:f4:8c:8b:ff:d0:e0:99:d1:ad:ed:ed:
         d8:01:f9:15:ca:fe:ca:4c:d6:74:6e:c9:c5:26:38:5a:6e:dd:
         e2:7f:d4:30:d0:f1:d3:74:2c:6a:86:e6:16:30:f6:84:f1:25:
         c8:4e:bc:b1:5b:ed:57:6c:20:42:92:db:12:6c:ee:5b:6a:7b:
         fd:dd:51:a0:79:ac:55:8e:98:51:01:b6:d6:e3:18:ab:01:c1:
         65:fc:50:b8:6a:ba:54:84:66:af:3a:d1:1a:c3:66:76:b4:23:
         eb:bd:63:2b:cd:ef:98:aa:12:ef:b1:d9:c6:2e:6a:96:fc:08:
         c5:ce:92:4b:4a:35:cd:8c:5e:0e:87:5e:d5:71:d2:af:92:61:
         c8:0a:df:21:f8:67:7e:c6:71:83:2a:01:6a:45:b4:6d:46:55:
         1d:d5:52:98:98:0c:3a:c4:1f:2a:3f:01:a2:7a:bb:ab:74:ba:
         11:c3:38:b4:2a:c5:5f:82:e4:fa:b2:a7:80:21:f7:82:90:49:
         10:33:fa:d8:4f:88:ab:3b:c9:7f:aa:7c:7e:06:c8:fb:26:d0:
         4f:5c:1f:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF
NzA3NDM5QUYwHhcNMjYwMjE3MTA1MjQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzVhOC03YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLO971nhmETZ/bFzai60EkAU1uZOGQSbguUblojxHG8gzuq3fPYRX4JO3KKL
AbgB3xkFydWFSMIhEQx27xtheez209sTMtn0oOnRW7KrYeKqJqWaQusyPs7UOVT1
lpNGCgTHA3NqmvBeKVg8fu40d2tcEr9HNhM2DMK35dc74WNhSllgFBVBQ2VllRZA
N/Q3MQ8HwVxUMa1A6oxBpHMyF5Vz+6N6N15llCGRCWjjoHAzSzWUMZSnxnyiHsxy
aaOV2SAQ8XBU5eZgwck83NxFbgBxstkDUuI/e0UL1kkQtIf1MdJshTmD+ak+5Oxt
gwS/sVnqHega+fg/STC0OueVgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLwSdF9o
LSZRdDTtBowwY1cPH4CjMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0
RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUzMDgvQTgxOTE0RTJGNEQ1MTFFOUI5MTdGMzQ5QzRGOUFFMDIvQzlBMzA5RjYw
QkVFMTFGMUI4MTY4QUVFMzYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4daMA0GCSqGSIb3DQEBCwUAA4IBAQCQ0TULPwTn1bUneGdUl8ax
7lNBUDCfIXAfDrOJBVHjXMSDtkYVtml9GvvC9IyL/9DgmdGt7e3YAfkVyv7KTNZ0
bsnFJjhabt3if9Qw0PHTdCxqhuYWMPaE8SXITryxW+1XbCBCktsSbO5banv93VGg
eaxVjphRAbbW4xirAcFl/FC4arpUhGavOtEaw2Z2tCPrvWMrze+YqhLvsdnGLmqW
/AjFzpJLSjXNjF4Oh17VcdKvkmHICt8h+Gd+xnGDKgFqRbRtRlUd1VKYmAw6xB8q
PwGierurdLoRwzi0KsVfguT6sqeAIfeCkEkQM/rYT4irO8l/qnx+Bsj7JtBPXB9s
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:49:53 2026 by rpki-client