Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
File:                     9BA13212344C11ED8F22CB70C4F9AE02.roa (raw, json)
Hash identifier:          PeFV/oLu/csLft0iODoJnYJS2cAXlNVSsKTM91Ov3+8=
Subject key identifier:   8B:6B:01:E4:03:86:36:E4:23:61:F8:E9:F3:13:DC:26:50:92:EB:FA
Certificate issuer:       /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial:       02A9
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:09:19 +0000
ROA not before:           Wed 05 Nov 2025 02:16:13 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138357
IP address blocks:        103.131.80.0/23 maxlen: 23
                          103.131.80.0/24 maxlen: 24
                          103.131.81.0/24 maxlen: 24
                          2001:df1:47c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
        Validity
            Not Before: Nov  5 02:16:13 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59a0f-f86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:0c:43:20:73:54:46:1b:86:f6:57:c3:89:
                    cf:fc:2f:ef:2e:33:e2:da:cd:ad:8d:be:4f:07:7b:
                    58:8e:5e:ce:20:8f:d2:26:9a:28:a3:38:68:72:9f:
                    18:cf:35:6b:68:d3:fa:9d:51:45:ca:ee:0a:3f:70:
                    12:50:3c:d4:82:55:cb:97:ce:a8:ed:a0:b0:f1:70:
                    2c:2a:ab:e9:c7:ab:a4:a1:74:a3:59:89:f6:e5:fd:
                    6c:ad:4f:eb:1d:f5:47:12:44:8f:a4:1b:5b:4b:19:
                    22:f7:e3:b2:e5:63:d0:cc:d3:17:27:49:1a:65:28:
                    38:f3:bd:7d:bc:1d:2b:41:89:4f:e7:56:74:69:05:
                    07:a3:ae:fc:33:04:78:b2:ea:43:7a:2e:eb:45:a2:
                    d4:a1:da:84:59:eb:16:5f:3f:4f:1e:61:43:a6:c3:
                    12:ae:61:38:ae:3b:d0:ca:cf:49:f9:6e:d9:59:20:
                    bf:a2:15:1e:ef:7c:2d:c8:ec:f7:13:03:de:87:7b:
                    6a:13:1e:42:f9:33:e0:e4:9e:59:f6:7f:23:c2:b2:
                    21:36:20:fb:cb:a5:f5:30:68:1d:a7:de:bf:a8:e3:
                    a1:fc:d5:5a:65:d0:55:21:7b:a0:67:a4:f8:c9:5d:
                    45:ed:44:53:6e:0e:b6:83:02:56:53:71:33:f6:91:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:01:E4:03:86:36:E4:23:61:F8:E9:F3:13:DC:26:50:92:EB:FA
            X509v3 Authority Key Identifier:
                keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.80.0/23
                IPv6:
                  2001:df1:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:ea:24:61:b5:b1:c3:d2:96:92:e0:df:03:91:bf:8c:03:
         6b:16:7d:33:f3:3a:57:4e:7f:b5:d9:4d:fb:e2:93:82:e4:62:
         0d:bd:df:0f:c6:ea:d5:da:27:a3:7e:07:db:cc:55:8d:ce:8c:
         e3:65:79:35:af:cb:cc:2c:66:87:c8:7f:32:f8:35:27:52:1c:
         3e:a6:65:03:fb:c2:60:7b:f4:3d:3e:3d:6a:8f:b0:12:cc:7e:
         a5:b6:48:4d:23:18:77:4a:97:1d:12:3f:8a:65:c2:92:67:30:
         cd:7e:76:89:3e:33:95:d2:a4:56:60:33:11:5c:71:db:eb:5c:
         67:0f:fc:c2:70:f8:53:b3:93:2f:ae:7e:c4:e4:4c:6e:f4:39:
         81:f3:92:eb:95:ad:01:45:70:a1:e6:8a:0e:29:94:ff:15:b5:
         26:3f:55:f3:ae:94:39:70:e2:e2:fc:b5:73:38:04:6b:19:c8:
         62:39:cf:32:09:2f:0c:5d:a9:4f:53:48:a9:93:a4:ed:82:a9:
         f2:43:43:81:6d:66:86:62:bd:64:6d:a8:09:8d:a6:75:bf:c7:
         45:d7:f3:d4:a8:6b:45:ce:b4:14:cf:d0:e6:ab:4b:72:04:39:
         d5:e8:37:44:70:59:39:5f:10:24:fe:bc:5c:97:9b:3f:29:de:
         3a:18:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:54 2026 by rpki-client