Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa
File:                     4F12B4886EEB11EC8699607FC4F9AE02.roa (raw, json)
Hash identifier:          pn9LmjcYfqtWkrqq70s413/aWhMNAUVc8lSHHO31hw4=
Subject key identifier:   50:97:6F:D6:DD:14:04:59:4D:42:CA:60:6F:0F:8D:08:EC:2E:72:A8
Certificate issuer:       /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial:       04A9
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:43 +0000
ROA not before:           Tue 03 Feb 2026 00:19:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149421
IP address blocks:        103.179.24.0/23 maxlen: 24
                          2001:df0:4540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
        Validity
            Not Before: Feb  3 00:19:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45fdb-6032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:18:00:13:02:20:b9:e9:ff:5d:da:83:9f:
                    48:9d:1f:76:34:9b:38:e9:f7:e8:31:27:a2:f3:ae:
                    58:ad:65:b7:01:7f:b8:fb:a7:45:97:15:3c:f5:7e:
                    77:8a:11:5f:ec:2d:93:e5:8f:0e:bd:2a:7b:d3:37:
                    cc:9d:a1:75:57:e1:60:2a:8f:79:6f:0e:8d:74:79:
                    e7:2b:b2:53:7f:e5:e2:02:19:8e:18:9d:b7:cb:67:
                    56:44:d2:3d:bb:c8:ce:71:5e:c8:97:bc:77:01:46:
                    76:c4:1b:ac:fd:76:f7:40:01:30:3c:10:9e:28:d9:
                    62:74:93:33:cf:42:53:15:09:3a:ec:df:6d:f4:59:
                    14:54:56:2f:45:25:49:cc:db:00:1d:0e:17:cd:a5:
                    d1:ea:db:a4:30:87:6f:a1:b7:d9:ce:6e:a3:da:9a:
                    94:aa:cf:fe:e2:1d:ff:4a:e8:ff:ac:b7:21:a1:6b:
                    ca:02:39:a3:39:20:41:4a:91:3e:95:fb:e3:b1:74:
                    8d:70:f8:b7:ad:74:78:c1:71:61:d9:28:f7:4a:a1:
                    1e:34:16:3a:5d:47:5a:75:e5:92:0d:ae:c4:9f:26:
                    03:77:9d:46:81:a9:83:9f:2e:1d:f5:3f:fc:4c:5c:
                    9b:d0:8a:19:60:ae:aa:21:4b:7b:a1:ca:80:be:99:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:6F:D6:DD:14:04:59:4D:42:CA:60:6F:0F:8D:08:EC:2E:72:A8
            X509v3 Authority Key Identifier:
                keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.24.0/23
                IPv6:
                  2001:df0:4540::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:65:79:40:07:18:a0:29:16:27:88:b9:ae:44:17:05:00:
         b6:89:13:9c:5f:d7:ce:2e:3d:9d:ff:df:32:dd:f1:1f:09:d3:
         2f:b5:55:fe:db:68:ce:85:a4:37:cf:c3:b7:b6:a8:cf:63:58:
         a4:df:12:d0:a4:8a:74:4d:21:ce:00:96:b0:17:15:8d:4e:6e:
         ad:88:4c:88:60:15:3e:35:98:23:34:9b:72:f0:ad:3a:98:90:
         b1:5a:ff:b6:1d:4a:a2:5a:e2:eb:6d:2d:83:10:f6:dc:a6:39:
         bc:50:e6:e3:f8:47:a5:9e:b4:f4:bb:39:5e:20:39:08:47:e6:
         77:e7:71:dd:76:5c:07:6b:7f:6f:a8:e0:1e:0f:49:90:b6:49:
         0e:cb:b9:77:d5:4d:b9:8a:01:19:7e:49:8c:80:21:41:e7:3b:
         95:a2:5b:6a:ee:51:73:60:60:4b:de:c9:ff:8f:0f:f7:5a:1c:
         27:d9:cf:8f:c2:1d:04:cc:33:ef:9b:80:8d:f0:10:25:de:58:
         87:69:4a:e1:e7:8c:60:12:50:27:1c:bf:be:3d:cb:1b:7b:57:
         fc:03:3f:03:f5:bf:34:8a:68:21:d9:60:e1:ce:83:48:a7:6b:
         91:29:66:2c:8d:57:38:38:7f:4e:8c:cf:b3:90:53:34:95:74:
         e0:2d:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:08:49 2026 by rpki-client