Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
File:                     92967BBA78F811ECAF1C286CC4F9AE02.roa (raw, json)
Hash identifier:          OC1wYvk7HdnATgeP8AW3eH45pm98AkZGK4N7Ka/dybY=
Subject key identifier:   13:F5:CE:50:ED:6E:4F:CB:09:25:5B:BA:71:A2:5D:98:40:BB:F3:08
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       06C2
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
Signing time:             Sat 02 May 2026 23:27:53 +0000
ROA not before:           Sat 02 May 2026 23:27:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133449
IP address blocks:        103.229.128.0/24 maxlen: 24
                          103.237.143.0/24 maxlen: 24
                          103.237.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: May  2 23:27:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f68879-0a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:04:91:46:a9:b2:45:ea:bd:50:3a:83:32:
                    76:94:06:4a:23:ad:95:ba:8f:a7:a4:0e:e4:2d:28:
                    4f:26:f9:db:1a:46:d0:c2:cd:38:e2:ec:1d:b5:62:
                    5b:9c:81:f9:91:6e:d3:1b:29:c9:f2:7d:c9:81:c0:
                    2e:4c:00:60:f6:22:6f:23:79:dc:ac:7f:04:ef:19:
                    3a:20:78:93:9a:a4:3f:0e:e5:6d:c3:31:75:3f:8c:
                    56:3c:ec:a8:8a:12:bc:92:6f:a1:8d:5a:0b:ab:56:
                    8b:6e:00:0b:ea:0e:c3:a6:3b:86:33:79:cf:06:cb:
                    b9:b1:94:92:81:c4:1f:20:d4:d8:f2:bd:21:76:58:
                    ad:d4:8a:eb:72:8d:93:c3:1c:17:20:51:cc:8e:4f:
                    df:01:70:43:ec:68:d6:85:10:0e:6f:f2:ac:8f:f5:
                    d0:16:f6:9d:f7:ad:c9:35:e9:3a:72:7f:5a:ed:f3:
                    7d:bf:d0:52:46:30:16:4d:dc:57:c5:df:31:22:fe:
                    86:4a:d1:97:f9:77:df:0d:cf:95:e2:aa:88:54:96:
                    7a:fa:30:5d:1c:a5:81:58:20:a1:03:03:16:d9:cb:
                    54:9b:fb:2c:8d:3b:f5:77:c8:ce:65:7e:11:54:c9:
                    9d:49:ed:fb:fe:b1:4f:cc:bf:51:4f:a4:0f:e6:24:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:CE:50:ED:6E:4F:CB:09:25:5B:BA:71:A2:5D:98:40:BB:F3:08
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.128.0/24
                  103.237.143.0/24
                  103.237.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:45:88:e9:9a:57:a2:ed:cc:7d:b5:06:f6:c8:d7:c8:d9:
         10:8b:18:12:76:ad:f1:75:41:98:43:cc:f3:3f:6c:3c:93:f1:
         f4:d0:95:ad:a6:65:1e:27:bd:b4:6f:d3:14:5d:cc:f0:83:75:
         03:6c:a9:9d:94:79:7d:d9:9c:8e:b5:10:ad:6d:9f:d5:2d:ae:
         82:c7:4f:42:3b:cc:77:7c:77:bc:44:57:d2:9a:fc:63:a3:85:
         78:19:87:15:34:69:09:e5:0b:81:e6:87:6f:cd:c3:c1:79:65:
         cf:0d:c1:3c:b8:0b:b3:48:15:73:91:f3:c9:45:9b:7e:a0:d9:
         cc:92:51:be:d8:41:53:46:c1:2a:97:fe:cc:c9:6c:86:ef:35:
         d7:1a:2b:8c:9a:ea:d8:27:8b:89:5c:91:f0:e5:36:b1:a8:84:
         3b:4f:6c:2f:de:d5:81:33:7b:60:a9:a3:1a:b6:e1:59:a2:ca:
         36:66:d6:4c:4e:b5:c0:97:41:ce:f7:06:a1:d1:83:03:08:26:
         dd:46:53:c0:e7:b7:9a:95:ab:76:c2:ce:d5:9b:28:23:72:d5:
         52:d4:a6:de:9d:bd:b0:ae:a0:57:26:1d:6f:8d:42:a1:b2:7b:
         73:4c:e0:1f:3a:6e:17:8a:ab:20:63:f3:2c:51:2e:2b:b2:3a:
         76:13:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:20 2026 by rpki-client