Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa
File:                     91268A4A06F311F09EDDC851C4F9AE02.roa (raw, json)
Hash identifier:          8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=
Subject key identifier:   5D:81:02:E5:7A:65:50:12:09:58:6C:DA:45:04:BB:89:06:0D:7D:BE
Certificate issuer:       /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial:       3540
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa
Signing time:             Fri 06 Mar 2026 15:14:24 +0000
ROA not before:           Fri 06 Mar 2026 15:14:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        103.247.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13632 (0x3540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
        Validity
            Not Before: Mar  6 15:14:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69aaef50-3e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:95:f8:34:2b:b4:c1:d7:0d:28:81:41:c8:8f:
                    fd:20:5f:d8:0b:b9:96:7d:53:06:28:d2:f0:13:f7:
                    de:09:c3:49:b8:95:dc:1e:3a:71:41:5b:f6:a4:97:
                    a1:d7:01:58:8a:7c:9d:b4:3e:36:19:58:aa:f5:36:
                    e7:66:b0:6a:cf:98:41:bb:f9:ca:72:f8:80:68:a9:
                    73:36:1b:1a:99:38:38:08:78:8e:f8:4b:c2:84:47:
                    ea:93:81:da:48:bb:b7:c2:4a:e1:f3:df:b6:c8:f5:
                    32:61:c0:22:b8:5e:10:52:b7:a1:af:50:36:65:e8:
                    7c:36:48:23:14:e2:c4:2c:57:69:70:94:48:b2:26:
                    0b:73:37:de:6e:f1:ee:7f:d3:55:e9:da:e4:ba:f7:
                    ab:7f:1d:8a:fd:9f:c9:76:fa:70:0c:9f:51:3a:16:
                    74:f6:74:a2:47:f4:3f:f5:f6:42:68:50:30:1c:5f:
                    ba:b7:cf:d3:c2:95:73:dc:26:29:4f:5f:52:ac:df:
                    70:d3:49:96:07:13:59:2a:8a:c4:c3:25:c5:bd:c8:
                    4d:48:97:fc:51:3f:13:63:41:69:f9:df:1d:3a:24:
                    a4:bc:93:b2:9e:37:5e:c6:2c:db:0b:b5:22:45:8a:
                    83:f0:26:bd:44:8c:ba:79:e3:24:b9:7f:10:d6:b2:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:02:E5:7A:65:50:12:09:58:6C:DA:45:04:BB:89:06:0D:7D:BE
            X509v3 Authority Key Identifier:
                keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e4:57:59:37:00:71:0e:99:60:71:59:2a:30:08:bf:10:7f:
         52:95:a4:71:6f:05:40:36:02:f8:a9:ef:4f:6a:a3:fa:b9:1a:
         dc:b3:1a:e2:af:06:4a:37:ae:78:a4:53:15:d9:38:fa:c4:d9:
         a1:78:8c:aa:0a:42:da:76:de:83:52:7a:90:b2:a2:e4:a7:70:
         1a:eb:00:e4:6f:7d:72:e6:db:68:33:37:39:9a:67:ee:17:00:
         05:e9:b4:59:e7:d4:5b:3f:5c:dc:c2:76:55:09:76:b1:68:fa:
         b5:5f:1b:6a:1d:26:1c:4a:9e:22:14:ec:90:bb:d3:d9:37:65:
         b1:24:9c:24:14:e4:ba:b7:fc:77:ca:52:f1:09:6b:0e:b9:97:
         ba:5c:3d:41:9f:aa:f7:2f:21:1b:55:86:89:88:3a:ad:7d:eb:
         37:58:7b:68:71:68:d8:99:8d:88:01:0b:a8:fd:53:16:1d:e8:
         91:14:95:f9:16:f1:a1:8e:d4:e5:50:25:0d:5e:0f:db:e8:c4:
         5b:54:c9:47:2e:ae:cf:7d:9e:31:2c:15:e1:fa:d2:2b:ab:c3:
         0d:3c:5e:26:f8:03:09:53:41:13:fa:80:58:1f:9d:cd:ea:17:
         77:79:86:0e:b9:d2:73:0b:c8:ff:f3:c6:2b:25:af:86:fe:76:
         ba:13:66:f5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0
RjlCQzY0MjkwHhcNMjYwMzA2MTUxNDI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFhZWY1MC0zZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA75X4NCu0wdcNKIFByI/9IF/YC7mWfVMGKNLwE/feCcNJuJXcHjpxQVv2pJeh
1wFYinydtD42GViq9TbnZrBqz5hBu/nKcviAaKlzNhsamTg4CHiO+EvChEfqk4Ha
SLu3wkrh89+2yPUyYcAiuF4QUrehr1A2Zeh8NkgjFOLELFdpcJRIsiYLczfebvHu
f9NV6drkuverfx2K/Z/JdvpwDJ9ROhZ09nSiR/Q/9fZCaFAwHF+6t8/TwpVz3CYp
T19SrN9w00mWBxNZKorEwyXFvchNSJf8UT8TY0Fp+d8dOiSkvJOynjdexizbC7Ui
RYqD8Ca9RIy6eeMkuX8Q1rKobwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF2BAuV6
ZVASCVhs2kUEu4kGDX2+MB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE
QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkZBMjkvMEYxQTRFNjQxREFBMTFFMjhFNzI3REE1MDhCMDJDRDIvOTEyNjhBNEEw
NkYzMTFGMDlFRERDODUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/dLMA0GCSqGSIb3DQEBCwUAA4IBAQAb5FdZNwBxDplgcVkqMAi/
EH9SlaRxbwVANgL4qe9PaqP6uRrcsxrirwZKN654pFMV2Tj6xNmheIyqCkLadt6D
UnqQsqLkp3Aa6wDkb31y5ttoMzc5mmfuFwAF6bRZ59RbP1zcwnZVCXaxaPq1Xxtq
HSYcSp4iFOyQu9PZN2WxJJwkFOS6t/x3ylLxCWsOuZe6XD1Bn6r3LyEbVYaJiDqt
fes3WHtocWjYmY2IAQuo/VMWHeiRFJX5FvGhjtTlUCUNXg/b6MRbVMlHLq7PfZ4x
LBXh+tIrq8MNPF4m+AMJU0ET+oBYH53N6hd3eYYOudJzC8j/88YrJa+G/na6E2b1
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:18 2026 by rpki-client