Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa
File:                     D93244BAF2EF11ED91F08A4FC4F9AE02.roa (raw, json)
Hash identifier:          Hti98hcC+ag2IJ3RoxadOaVc5hLgBIiE7Elxt08Tr5c=
Subject key identifier:   E9:26:2B:48:16:3F:55:D4:1B:08:1A:7E:92:EB:61:55:6D:47:0D:B3
Certificate issuer:       /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial:       0765
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:03 +0000
ROA not before:           Thu 22 Jan 2026 21:18:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132770
IP address blocks:        103.127.164.0/24 maxlen: 24
                          103.127.165.0/24 maxlen: 24
                          103.127.166.0/24 maxlen: 24
                          103.127.167.0/24 maxlen: 24
                          2404:24c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
        Validity
            Not Before: Jan 22 21:18:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44933-49f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:b5:8b:61:f5:d8:c3:f2:77:90:b8:1f:98:
                    24:c0:1b:d9:a5:af:8f:0d:85:1b:b1:e8:23:96:40:
                    71:4b:3c:a7:b6:5c:84:a0:3b:63:4a:d6:e9:c4:0e:
                    ff:e9:3b:20:f7:e8:14:44:1b:8e:8e:19:e4:28:8e:
                    ff:80:4a:06:14:82:91:04:59:50:5b:16:73:5b:26:
                    65:0d:bc:6a:22:10:d0:ce:57:c9:3b:55:58:36:41:
                    0f:de:00:db:13:14:39:6a:e1:a5:5a:04:4e:77:53:
                    13:bf:34:6e:3a:4d:fb:fb:1f:b6:45:17:f5:73:88:
                    35:5e:af:92:57:35:4c:30:44:9e:7a:77:67:f6:1e:
                    a1:dd:80:a8:b3:e6:28:3d:75:e5:03:8a:c1:3c:60:
                    a8:ac:fe:38:85:06:51:04:f5:23:5b:e4:22:77:c7:
                    4b:ac:a3:5e:2c:b3:91:b1:f1:c8:ef:10:fb:88:03:
                    9d:d7:ac:9a:77:2a:86:03:2d:dd:96:6e:8d:6c:0d:
                    2f:ed:99:72:af:05:0b:35:ba:1b:80:32:9a:68:db:
                    7e:c4:e1:e0:b0:40:2e:d6:31:5c:d8:5a:10:67:f1:
                    9b:45:e0:71:c5:f9:c5:2b:6c:97:c1:c4:37:17:9a:
                    c2:5e:2c:34:d7:df:ac:31:4b:0d:c2:5e:01:0e:1a:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:26:2B:48:16:3F:55:D4:1B:08:1A:7E:92:EB:61:55:6D:47:0D:B3
            X509v3 Authority Key Identifier:
                keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.164.0/22
                IPv6:
                  2404:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:28:5e:10:15:6b:ca:58:e4:a3:13:c2:e2:38:1c:b3:47:4d:
         36:85:24:4c:6a:f3:a8:0c:b1:0e:d3:c3:ee:8c:53:e9:a6:67:
         33:df:23:2a:d3:41:fb:48:c5:fa:60:09:e1:d2:7e:6f:0f:82:
         01:6f:72:48:e3:0a:ce:07:3a:08:cb:4e:12:28:48:35:60:ff:
         68:86:f9:10:12:be:bc:e7:5e:cf:c3:c2:be:eb:d5:9e:00:87:
         fd:dd:d2:b5:8c:6a:66:61:3b:52:cd:93:c8:9b:9a:db:7b:c2:
         ad:59:ac:b5:6f:6a:04:fb:66:1f:06:52:ae:1c:6a:80:a5:f0:
         da:b6:48:82:8c:73:61:a4:ad:8c:fb:40:d7:fe:f6:b8:fd:36:
         80:9c:97:cc:48:c6:5c:22:8e:fd:e5:d5:88:fe:42:58:8e:6a:
         fe:32:2d:e3:1a:65:ee:93:27:bd:ca:c9:ec:8a:ef:ac:b2:a3:
         f2:ba:65:a8:20:21:6b:45:92:41:84:9a:61:7d:21:f4:8f:97:
         18:79:70:62:30:eb:fc:7f:01:7d:3c:6d:a6:d7:7d:43:ee:f1:
         b5:a9:90:2d:b3:a0:aa:52:e6:85:fd:d1:87:32:e1:6d:ef:fb:
         ec:89:67:65:63:0f:45:62:70:a2:9f:03:3d:0f:fc:60:37:d8:
         d2:88:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:23 2026 by rpki-client