Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
File:                     6091D05229FC11EB861CCA7FC4F9AE02.roa (raw, json)
Hash identifier:          0iiqZOwTOdunhzu7xr1TU0hPXfMeSWYQaRpR8izF2Uc=
Subject key identifier:   09:A3:F1:7E:59:67:40:24:72:7A:74:E4:3D:E5:7D:02:F5:46:BC:DC
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       07D7
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:26:28 +0000
ROA not before:           Thu 04 Dec 2025 20:34:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139751
IP address blocks:        103.158.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Dec  4 20:34:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43074-b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:d3:00:02:b0:5d:de:1f:17:06:18:dc:0f:
                    f7:91:71:04:53:16:b1:d8:c9:fc:43:30:04:19:2d:
                    f1:f3:c9:08:cb:48:b0:eb:5a:e8:a0:f2:f9:0a:16:
                    b9:78:93:a6:04:e0:b6:be:4d:6e:cb:a5:6e:80:8b:
                    b3:a2:1f:17:b0:25:e1:b5:e5:e0:e8:1c:54:77:55:
                    c2:f3:0f:39:ee:64:5b:80:d9:68:18:38:f2:2a:b2:
                    3b:cb:2e:52:26:ce:1e:c3:b2:b1:25:30:08:66:ff:
                    8d:fc:5d:70:84:75:ad:f2:22:d0:20:5a:40:ab:90:
                    28:a2:29:57:6f:4f:1b:0d:81:18:d2:7c:51:09:4e:
                    b1:aa:f9:17:8f:ad:bf:eb:50:37:9f:96:97:3f:f9:
                    e8:65:86:98:74:fb:df:6b:6f:a4:c7:d4:ac:07:6b:
                    07:f3:47:45:19:f7:4f:d9:bf:d9:88:aa:f6:77:73:
                    73:87:31:74:e5:ce:48:0e:6a:57:eb:5e:80:57:de:
                    07:f0:8e:69:51:d7:55:87:5e:d9:a8:41:21:f6:6f:
                    72:ce:47:f0:19:0c:14:06:3a:01:0f:9c:a8:84:5d:
                    44:77:24:f8:9a:01:a4:bc:4b:47:fe:5e:56:aa:07:
                    6c:65:e3:72:c1:b9:b0:0f:f4:42:23:30:98:d5:26:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:F1:7E:59:67:40:24:72:7A:74:E4:3D:E5:7D:02:F5:46:BC:DC
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:06:76:2d:9a:6e:0c:c7:a7:eb:cd:70:07:24:84:4b:40:
         51:31:27:ad:12:38:0a:1f:19:6b:29:81:25:e4:27:cb:fc:30:
         92:f9:c2:1e:f1:42:ee:36:28:67:97:8b:70:cc:26:bf:ba:81:
         a1:90:3c:98:35:08:22:fd:58:26:5f:53:22:19:8e:ec:aa:54:
         5a:c4:54:8b:6f:70:72:9e:56:9a:41:5d:93:dd:8c:4d:31:57:
         2f:91:03:cd:f9:7c:67:5c:28:4c:4a:21:f1:c7:64:23:98:e3:
         48:74:b6:0b:ac:68:fb:6f:68:bf:8f:8d:4c:aa:b2:23:f7:c4:
         26:4e:ae:49:83:56:9e:c3:e1:95:cc:92:74:80:ec:f3:6f:ba:
         72:e8:d3:1b:cc:9d:65:d6:ad:8d:ff:09:7f:53:07:ac:6d:b7:
         ee:19:4d:55:e1:6d:6c:c2:99:02:dd:c7:8d:eb:95:d1:d3:6a:
         ac:16:79:d8:2e:77:ae:20:13:c5:79:aa:2c:e5:47:29:36:4c:
         8b:0c:f0:ae:75:b1:cf:69:b0:98:0a:f0:10:9f:3c:3f:94:fd:
         d1:46:3b:5a:38:0b:b4:ce:6b:d7:15:e9:6d:0b:37:2e:1e:a7:
         b7:8c:2f:75:ce:f2:c9:bf:0d:07:98:b2:9f:c7:10:63:4c:97:
         60:64:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:05:26 2026 by rpki-client