Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
File:                     99B10EC4BD3511ED837DED0DC4F9AE02.roa (raw, json)
Hash identifier:          6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=
Subject key identifier:   E4:53:1C:56:72:4F:47:DA:4C:69:2F:2E:50:A1:2A:F1:DA:CF:B8:C2
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       023B
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
Signing time:             Thu 05 Mar 2026 02:36:15 +0000
ROA not before:           Thu 05 Mar 2026 02:36:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150723
IP address blocks:        103.99.35.0/24 maxlen: 24
                          2001:df1:e7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Mar  5 02:36:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a8ec1f-7a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:98:9e:75:3e:c3:cf:44:08:d0:11:6f:af:
                    a1:d3:f9:8d:ae:a0:82:94:de:d0:f2:ad:bd:1a:d9:
                    ad:46:d2:b0:64:e8:e1:bf:4d:4c:18:86:c4:e8:03:
                    d9:46:11:c3:e5:09:3a:23:98:b8:6a:00:c1:2a:9c:
                    ed:b1:1a:41:b8:d5:8a:b1:fc:2a:63:1b:32:11:ea:
                    4b:05:ed:53:4d:b4:71:d9:db:14:00:15:8c:10:7e:
                    66:5a:fd:6e:76:b4:f9:45:35:0e:08:94:e2:96:7a:
                    66:aa:03:74:6b:a4:7e:40:a5:5c:97:b7:ea:56:06:
                    e9:30:b0:d6:7b:e7:cf:9d:d3:34:f9:87:76:a0:be:
                    b1:17:fa:d8:fa:55:4c:06:d0:1c:3a:fa:67:4b:cb:
                    3e:0f:42:af:5c:c5:65:1a:6a:13:2f:f8:4a:e4:3e:
                    78:ff:89:a9:b8:8e:13:03:94:13:e8:26:46:fe:69:
                    41:01:82:d5:3e:00:62:0a:04:96:60:b0:7c:1d:82:
                    17:94:4b:fc:f6:47:64:e3:55:32:32:89:41:33:b1:
                    11:ad:91:bc:39:cd:18:ac:79:3e:4a:cc:66:c3:dc:
                    56:09:9a:a9:80:b7:a2:96:b6:af:c1:7a:41:12:47:
                    59:9d:36:d3:46:50:ad:9d:55:f8:d5:5f:a0:e5:19:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:1C:56:72:4F:47:DA:4C:69:2F:2E:50:A1:2A:F1:DA:CF:B8:C2
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.35.0/24
                IPv6:
                  2001:df1:e7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:a5:2d:08:66:09:d2:ff:b0:e0:99:2d:b7:e7:1d:6b:54:42:
         fc:f3:14:d2:2c:f0:c1:8c:4c:41:90:33:bd:9b:63:09:71:7b:
         79:54:2e:57:c1:ff:33:07:ed:ab:94:14:fe:24:74:05:47:ad:
         8b:88:a1:ba:68:d9:de:d5:27:de:d8:4a:ad:8b:f1:15:a2:50:
         0e:e1:a3:3b:09:2f:da:44:f4:2f:7d:3f:d0:1e:af:ed:6b:95:
         76:d7:b0:13:4c:ce:37:4e:c2:00:23:02:1f:cb:58:24:9e:e2:
         cc:86:09:9b:b7:9f:6f:a5:7e:6f:1b:f0:b9:3c:9b:95:a9:be:
         34:00:d6:c3:66:e8:ad:f5:fa:de:96:f8:f3:66:88:16:98:4d:
         37:dd:26:69:89:52:5a:71:30:41:a0:33:b9:9d:b4:be:52:dd:
         bd:52:07:48:28:51:b3:3f:3a:ec:12:ac:2e:90:5e:34:2e:1b:
         40:48:57:44:39:8e:63:3e:a9:92:98:2b:11:a5:6e:1a:09:93:
         83:e3:b4:37:a3:2f:d5:59:6c:a1:7c:d3:f7:94:65:7d:98:ec:
         eb:2a:41:66:17:17:62:59:1f:9e:a5:a2:66:ed:12:15:34:57:
         86:c4:a5:78:db:ae:be:bd:e8:ef:df:ed:90:e8:96:d3:3e:86:
         44:0a:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:20 2026 by rpki-client