Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa
File:                     2A425550ADCA11EC9AD18044C4F9AE02.roa (raw, json)
Hash identifier:          xPGpz8DL8ktRdkErUAI2qz+k2Ed7ll35xRQkBX7lQE0=
Subject key identifier:   EA:E1:8F:93:8E:14:54:02:EC:DC:4B:6E:E9:DC:D7:74:34:ED:71:5D
Certificate issuer:       /CN=A91D15BF/serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E
Certificate serial:       0427
Authority key identifier: F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:02:27 +0000
ROA not before:           Wed 03 Sep 2025 01:16:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137976
IP address blocks:        103.119.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl
                          rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D15BF, serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E
        Validity
            Not Before: Sep  3 01:16:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40eb2-e44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:91:25:cb:3d:ee:4a:de:42:7d:b7:ba:9d:
                    d1:2e:0c:56:24:91:d2:e0:86:f2:7b:56:1d:7e:8f:
                    9d:68:13:2f:e3:68:a5:df:fa:59:e0:26:7e:bb:81:
                    6b:e6:0e:bd:b2:c0:b0:c6:06:28:f4:8c:c2:88:39:
                    94:35:23:81:5e:6c:4f:54:10:d2:83:0b:a6:d0:74:
                    60:24:f9:ad:04:3b:52:a6:d7:17:84:7e:e5:8d:62:
                    9c:a8:69:1a:60:1e:5d:c4:8f:bd:79:22:9a:ef:04:
                    fd:76:50:3b:2b:e5:41:03:0c:f3:e5:90:f2:d0:d9:
                    db:2e:cb:46:06:57:53:e9:a5:90:e8:3f:f6:03:7f:
                    6d:b0:f4:bc:71:96:a7:24:36:8c:04:a9:c5:66:db:
                    6f:5c:96:5e:75:ba:a9:28:41:fa:8e:33:88:eb:46:
                    0c:83:67:d2:e3:a3:e9:42:e5:24:14:71:cc:d7:be:
                    84:b9:8e:27:43:32:e9:0e:a3:f4:e0:25:b2:de:44:
                    34:2e:14:21:34:01:92:97:0c:e9:c4:f6:da:e8:6a:
                    30:84:65:63:dc:22:fc:08:2e:db:b9:2b:5e:ed:8b:
                    27:77:b1:b8:84:5a:b1:18:7f:4e:ef:b3:04:98:fe:
                    89:11:fd:1b:6d:d4:d3:55:f7:ae:60:12:dc:db:61:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:8F:93:8E:14:54:02:EC:DC:4B:6E:E9:DC:D7:74:34:ED:71:5D
            X509v3 Authority Key Identifier:
                keyid:F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:52:92:5e:68:f4:31:82:5e:56:ae:51:f8:03:7c:4a:ba:
         76:42:7d:fa:32:76:18:4a:3c:37:9c:ca:67:72:83:d1:55:51:
         2c:14:cc:36:56:bf:fe:99:c2:7a:83:22:82:03:f7:4e:f5:b7:
         df:70:d3:df:3e:1a:45:5c:c5:1a:3c:93:99:78:35:98:d4:b9:
         fd:cb:34:0f:01:4b:17:1b:4c:74:dd:bb:64:2e:d4:d8:6a:25:
         02:be:e5:cd:89:20:46:0c:64:6d:74:fb:46:47:b6:3c:b0:d2:
         8c:0b:24:ca:b5:42:cd:84:db:fa:b8:0e:bc:bd:74:ca:f0:e3:
         64:32:b9:46:3a:05:70:8b:42:4f:47:90:36:68:ba:be:96:fe:
         e9:f2:eb:35:a1:a0:5a:ab:84:fa:87:80:b1:30:21:a2:34:9b:
         f1:82:d8:66:23:e5:34:40:35:6c:68:d0:7f:c7:67:bd:e7:ad:
         35:37:05:d4:80:01:14:d0:72:57:d7:d7:67:b2:37:e3:78:86:
         03:e1:1e:73:ca:b6:7e:33:17:2d:cc:39:0e:1e:b7:d0:6f:32:
         5e:5e:a4:40:eb:a2:7e:23:9e:1f:c9:be:e3:22:c9:61:8b:90:
         fb:0a:f7:99:df:b4:9f:c7:35:5d:ba:c7:28:ad:79:58:30:1e:
         d2:7f:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:36 2026 by rpki-client