Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
File:                     92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (raw, json)
Hash identifier:          Tt66YBhWZceD9xi7CJ59HIwrlysDS4oNkVI5X7bqodQ=
Subject key identifier:   2D:B9:B9:E9:55:6F:3C:D2:1E:19:69:5B:47:4B:68:1E:AB:9D:68:D2
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       062A
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:51:27 +0000
ROA not before:           Thu 26 Jun 2025 23:33:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142421
IP address blocks:        103.168.40.0/23 maxlen: 24
                          2001:df6:cc80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Jun 26 23:33:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40c1f-0965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:20:f6:66:a5:21:41:44:9a:70:d4:c2:a1:
                    78:d9:ce:e6:f9:37:2f:c4:93:3e:5d:c1:87:44:b4:
                    81:a8:84:f6:44:90:61:50:eb:3b:12:79:57:73:bf:
                    1d:8a:1e:84:09:82:1f:63:04:32:c3:e3:f3:91:42:
                    66:93:db:ef:c4:05:52:35:00:02:b8:be:23:34:a6:
                    04:ac:c4:a5:a4:85:af:69:bb:4f:20:08:f9:d0:46:
                    52:d0:43:79:3c:db:c7:54:af:45:b2:f2:e0:a3:0d:
                    c6:0c:50:78:07:0c:29:b2:5e:7d:25:9f:10:92:26:
                    eb:5c:c7:56:99:77:25:26:7d:86:86:04:26:f1:b1:
                    2c:4c:c3:62:62:9c:25:ef:fd:03:0e:f4:98:41:33:
                    f5:a3:a0:db:2f:89:14:12:0a:de:34:51:a3:b3:ec:
                    a3:c6:9f:48:b4:f6:3d:14:6f:ca:87:90:f0:e4:02:
                    0e:c1:ca:88:23:00:1a:be:58:6f:72:1e:43:5f:25:
                    78:70:0f:0a:27:de:a7:d4:10:c0:0d:cf:a9:48:58:
                    f4:06:b6:da:ec:40:9d:33:ce:5a:35:81:97:c5:3c:
                    b0:c7:f1:38:c9:b8:66:92:8e:30:59:ff:92:7d:e1:
                    13:03:7f:d7:a3:dc:34:c6:db:bb:bf:dd:96:80:63:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:B9:E9:55:6F:3C:D2:1E:19:69:5B:47:4B:68:1E:AB:9D:68:D2
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.40.0/23
                IPv6:
                  2001:df6:cc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:ac:e5:83:52:8a:43:41:ea:d9:be:cd:52:e6:b1:95:fc:
         3d:44:74:a2:6b:5c:28:cc:5b:dc:48:ef:4b:c3:fa:cf:b4:ca:
         66:34:ca:b1:6b:36:d5:57:bb:72:d7:cb:54:36:90:02:a9:c6:
         8f:86:a5:ef:4f:4c:bb:d2:f3:d9:dc:81:c8:66:95:1b:24:c1:
         6b:df:99:57:62:fe:31:e7:cc:51:e7:a4:c3:3f:74:01:3a:96:
         86:1a:53:ce:68:1d:11:f5:87:ce:4e:f3:57:3c:b4:da:97:6b:
         f3:eb:e6:88:18:82:ed:05:2a:bd:ca:84:33:05:f4:83:d4:4f:
         1c:95:be:99:ea:59:a4:f9:1b:03:f9:76:f2:1e:91:61:9e:98:
         22:87:b5:f5:0c:9b:48:77:cb:f0:3b:28:af:47:4a:c0:69:b2:
         8a:1a:ff:44:d6:fa:83:9b:fb:b4:86:b0:76:02:7e:10:3f:40:
         7e:7b:7f:bd:bc:42:5f:3f:ef:c6:a5:0b:4d:c6:8b:d2:98:85:
         89:c6:62:fb:25:18:ce:10:f1:68:b4:c8:64:6d:e9:dd:5d:88:
         e6:d0:43:64:46:f7:32:d8:07:d2:e3:96:f6:53:b5:a5:07:4e:
         89:12:b6:c2:0c:d8:51:cd:c1:ba:cc:a6:b1:76:a5:a1:7d:ce:
         59:ee:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:53 2026 by rpki-client