Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
File:                     261A4C3432B611EBBB18F11EC4F9AE02.roa (raw, json)
Hash identifier:          u+6wnGx2BCNffz/w+UONTWtqIYdeVxC/HbLsF2PYqHg=
Subject key identifier:   56:1C:CE:35:CA:7C:DC:4F:25:E0:EB:0A:95:5A:A2:07:00:6E:02:DD
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       07F4
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:40:19 +0000
ROA not before:           Sat 10 May 2025 21:39:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139006
IP address blocks:        103.91.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: May 10 21:39:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40983-0d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:4a:ee:94:ba:35:c5:ac:24:84:fb:a7:f5:
                    56:8a:53:36:3e:aa:0b:84:0c:6e:ec:05:78:67:aa:
                    77:bb:2a:96:3b:8f:42:7a:fc:b0:03:5e:61:d2:85:
                    2a:c4:b6:39:8b:2d:04:21:10:88:cd:5f:c2:59:5e:
                    27:de:a7:5b:8b:96:6d:e4:79:1c:69:32:79:8c:e8:
                    73:dc:51:a1:69:83:4f:59:30:a7:f7:95:14:2b:f5:
                    87:af:8c:93:27:af:be:99:e2:f6:31:33:6f:4c:5e:
                    b8:e9:f7:07:e1:ae:ce:84:09:dd:df:f0:f9:ae:b5:
                    c8:98:0a:a9:1f:f0:89:2a:29:3b:4f:1a:06:a9:31:
                    5b:ca:86:3c:a1:aa:8f:4f:c4:e8:dc:33:1d:72:bc:
                    87:32:da:9f:ff:e0:d7:ec:0e:3e:76:67:4d:12:9b:
                    70:60:61:3b:3a:13:89:c6:0b:9a:86:16:97:11:db:
                    85:5e:98:45:5f:30:98:75:4d:5f:86:70:50:13:72:
                    2d:de:40:93:ee:07:ba:69:72:2a:b3:36:b8:30:b0:
                    0d:ce:4c:25:51:82:09:ce:46:e3:80:3a:3b:97:1f:
                    55:97:19:0a:9c:4b:ed:9c:0e:67:d1:6e:ff:3b:b4:
                    05:59:4a:a9:91:48:f2:5e:8d:ab:1c:71:71:16:23:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1C:CE:35:CA:7C:DC:4F:25:E0:EB:0A:95:5A:A2:07:00:6E:02:DD
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:07:07:47:64:62:1b:d1:36:db:c0:58:61:f0:f3:a2:a8:16:
         0e:78:17:6f:b2:57:df:be:d7:13:fa:23:96:1a:d8:b7:0f:60:
         63:fd:d3:87:e2:49:d3:a3:8c:af:20:e0:24:47:50:6c:3d:5f:
         bd:17:d0:0d:a0:2d:ee:52:de:fb:b5:24:ad:3a:66:10:34:cd:
         4e:b9:8e:97:f1:12:70:7d:25:3a:74:fa:3a:61:29:b5:34:8c:
         05:09:6b:bc:64:db:eb:09:53:69:1f:cb:ef:0a:80:3a:62:76:
         b2:17:04:9a:30:40:9a:ab:77:17:a9:ae:6d:d5:ff:4b:39:4d:
         f8:2a:53:18:5c:28:c8:53:99:0f:fa:20:aa:24:d6:11:86:f1:
         33:fe:cd:da:21:23:9a:3d:e7:03:4d:90:5c:1c:0e:0d:2b:0e:
         fb:7d:6f:f2:dd:eb:6c:c1:8a:e6:97:b3:a2:3d:79:9f:f6:4c:
         58:3d:42:85:75:6e:64:f5:6b:0f:0a:3d:60:d1:ec:48:5b:73:
         0d:12:f7:72:67:ab:e4:c2:cf:ab:34:e8:38:ab:96:27:8d:c2:
         1e:a5:53:48:8e:37:6a:44:42:34:99:12:cd:79:e9:00:a7:1a:
         0c:60:02:b6:c2:15:f7:a1:59:73:ed:a4:5d:84:2e:33:de:31:
         24:83:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:54 2026 by rpki-client