Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa
File:                     020CA7B24E4C11EC8045E71EC4F9AE02.roa (raw, json)
Hash identifier:          yt+ZtKnpbuqQeAQi0WMw2FAsGK7S+Q6MIWDK5QZrGws=
Subject key identifier:   67:89:17:64:8A:62:9E:BE:2E:90:BF:D3:A7:BA:84:6C:DD:53:51:B3
Certificate issuer:       /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial:       0550
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:43:37 +0000
ROA not before:           Tue 04 Nov 2025 23:44:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147190
IP address blocks:        103.174.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
                          rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
        Validity
            Not Before: Nov  4 23:44:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43479-2c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:03:0b:40:05:ff:79:34:3f:0c:15:dc:1e:
                    12:90:06:78:dc:d0:fa:98:26:96:b3:51:cb:06:e5:
                    b6:fd:cd:c3:3d:c8:e7:6d:88:f5:00:d3:38:f0:12:
                    aa:3b:ba:02:ea:97:ba:fc:87:bc:12:f7:77:a7:f8:
                    9a:a7:98:2d:17:9e:a1:e3:f1:e5:66:f2:a0:52:29:
                    12:a8:71:a7:93:ce:9a:80:35:8c:70:82:be:bd:73:
                    7d:e8:9c:6a:58:ec:f2:e6:15:c4:bc:ef:c3:74:cb:
                    9f:94:ba:ce:c2:7a:46:c0:50:61:34:8e:17:0b:fd:
                    23:73:3b:6c:55:ba:c8:53:20:9a:ea:fd:aa:a2:e7:
                    c1:3c:2f:fe:8f:63:f5:a5:c5:dd:4c:71:38:de:22:
                    c2:08:50:5a:63:1f:0f:66:86:62:02:d0:36:91:a4:
                    c9:a9:dd:ef:d7:5e:bb:c5:6d:3d:91:6b:04:c7:98:
                    2d:06:50:eb:64:3f:15:a3:f1:c8:f0:9d:ea:eb:70:
                    4d:6f:34:93:e9:3e:d3:31:55:e9:cc:70:ab:44:75:
                    02:16:29:af:b8:26:e8:af:89:3e:c8:ba:33:63:79:
                    7d:4d:12:e4:80:4f:8c:c1:26:83:e7:4c:29:5c:cc:
                    11:36:2b:34:30:91:72:46:82:4f:96:9c:d6:23:f2:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:17:64:8A:62:9E:BE:2E:90:BF:D3:A7:BA:84:6C:DD:53:51:B3
            X509v3 Authority Key Identifier:
                keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:46:50:ac:4c:6e:07:ac:91:98:08:2f:58:52:43:25:53:
         c9:94:89:ac:a7:08:2f:b6:31:08:60:c2:cd:cf:ab:8e:59:2e:
         7d:a6:a1:15:53:42:de:3d:72:5c:e1:7d:d6:cb:86:de:15:da:
         13:a1:8d:e2:95:55:59:a7:38:77:b5:2e:eb:28:17:ee:56:20:
         34:a4:fa:24:70:1b:b3:93:bd:95:72:91:c0:71:9e:7d:3e:4a:
         12:d1:0e:b8:33:a4:0c:78:b7:2b:a7:19:d8:83:b0:e4:6a:0c:
         63:8d:16:3b:50:28:03:96:e0:c4:6e:09:91:41:74:88:c9:ea:
         03:db:11:3b:21:f4:bb:9f:fd:4a:57:98:a5:c6:9c:e6:c8:9a:
         f4:9a:17:88:f7:85:77:f4:ea:61:74:18:71:08:2f:d9:5a:18:
         eb:8b:34:e8:ba:fb:a0:42:7b:3d:6b:fe:c3:5b:51:e1:b2:96:
         d4:93:8e:b7:25:72:a4:2c:ff:c6:9e:e1:b3:5a:5b:4c:0f:3e:
         3c:72:03:c6:85:c2:51:12:44:22:87:e6:25:ba:aa:ea:4c:cd:
         40:37:9f:aa:aa:3a:2e:e0:db:ad:8b:33:78:ba:9e:56:79:fa:
         e4:d6:8e:1e:98:8e:2a:be:bf:d0:c4:a5:f6:dc:4f:a5:66:b0:
         84:ef:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:09 2026 by rpki-client