Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
File:                     F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (raw, json)
Hash identifier:          DRPYHt96EX1APt3QQLSOdPENVuq6bm635GQlVX6wlt4=
Subject key identifier:   F6:3D:DE:BA:45:BE:6E:A5:1F:4A:A2:CF:F1:DE:16:B8:04:74:D6:90
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       03A5
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:38:06 +0000
ROA not before:           Sun 15 Feb 2026 01:21:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134715
IP address blocks:        103.179.206.0/23 maxlen: 24
                          2400:4e60::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Feb 15 01:21:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a584ae-d27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:24:33:09:67:a8:a0:3d:69:d5:47:e6:c0:
                    e6:bc:a5:88:97:2b:9a:5b:fd:c6:6b:1e:6e:84:a3:
                    87:a0:39:31:42:dd:94:fe:ed:26:d1:fd:66:c3:0b:
                    b5:18:c9:36:1b:dc:bb:21:f4:43:53:e4:45:7a:85:
                    6d:11:62:2c:7a:64:e7:ee:ee:37:bd:ce:8c:b9:65:
                    06:07:c6:94:8c:d7:8e:1c:cf:b8:8b:23:02:09:9d:
                    72:dc:88:68:e0:62:e9:89:ec:dd:8b:49:5f:97:9c:
                    62:17:61:94:dd:20:43:0d:3f:c5:df:3f:b2:a0:53:
                    28:9c:c6:47:62:3c:66:f1:77:86:93:88:a7:75:97:
                    be:48:c2:b3:c9:f6:02:93:6a:ff:48:68:7d:43:c3:
                    ff:c8:6d:8b:62:d4:42:6d:6a:ef:ab:e7:2a:a5:85:
                    4d:06:ce:15:36:62:79:94:89:85:e4:68:57:67:17:
                    2b:7d:a8:e1:5f:d5:26:93:d7:c6:86:9b:3e:6e:56:
                    32:ce:9e:66:72:43:96:ad:0d:fb:a7:96:e4:51:5d:
                    d5:41:72:64:34:3a:b7:bb:93:a2:d4:da:4c:22:e1:
                    79:12:77:ae:1d:d8:59:af:ce:10:50:45:f6:1d:a5:
                    b2:41:b2:ad:b1:6d:eb:b4:48:44:34:0c:aa:d4:1d:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:DE:BA:45:BE:6E:A5:1F:4A:A2:CF:F1:DE:16:B8:04:74:D6:90
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.206.0/23
                IPv6:
                  2400:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:45:c9:29:6c:32:24:9f:54:91:09:f8:a7:a2:96:54:19:d2:
         c9:37:57:c1:7c:57:d0:fe:2c:30:bd:65:d2:c1:98:e1:87:e0:
         ff:1f:db:dc:4b:f5:66:d2:c7:ba:0a:f8:26:c6:1f:e9:1f:5b:
         7f:56:72:35:ea:da:1a:42:be:66:5f:fa:16:c5:c2:e0:e3:8b:
         70:06:28:ef:cd:f8:5b:87:75:e0:0f:5c:7b:ab:d1:e3:51:ca:
         96:b8:ab:6e:c7:0e:d0:8c:3f:4f:06:e8:8d:a2:b8:e9:6e:eb:
         91:1d:09:c8:df:b2:f6:42:39:ff:08:d8:9e:f9:d7:ac:b4:a9:
         ef:1c:64:64:4f:42:c1:64:0a:9e:c1:ca:c4:0e:ab:04:f8:68:
         e0:d2:98:20:e3:32:b7:c4:27:dd:68:cd:61:ce:34:ff:b4:9b:
         85:18:2a:31:ad:fb:3c:a4:a1:66:ff:fd:fd:50:e0:87:1a:1b:
         cb:b0:f7:e7:24:40:67:e2:d8:02:0b:60:ba:a6:96:13:d5:79:
         cd:d4:3e:6d:7e:33:9c:7c:34:65:49:2a:ac:06:5b:00:67:8b:
         9b:49:21:d4:e9:fc:32:9f:e6:e8:cc:75:8e:80:c2:6c:8b:a4:
         79:f1:27:4a:7d:0e:a7:77:e2:aa:8d:cf:0d:b7:54:30:ba:9e:
         af:83:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:42 2026 by rpki-client