Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
File:                     A91AF6A8CE7811EF89FA3944C4F9AE02.roa (raw, json)
Hash identifier:          /XptYTwhi0uVDIVVDFau7tevix2taawngS3ewC7+5mA=
Subject key identifier:   D7:23:39:77:45:67:ED:2D:5B:DE:9B:63:0E:F9:0C:1B:11:98:6E:9F
Certificate issuer:       /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial:       0254
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:59:11 +0000
ROA not before:           Thu 29 Jan 2026 02:22:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149023
IP address blocks:        103.176.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
        Validity
            Not Before: Jan 29 02:22:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4381f-3b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:16:cf:ae:fe:4c:dd:12:e5:0f:5f:13:e2:
                    c1:c3:45:42:1f:94:b3:ec:53:29:c0:bc:20:22:44:
                    87:ff:9d:3f:be:f3:07:77:5f:eb:d1:57:1f:98:ae:
                    d0:76:9e:9f:e6:53:a4:d3:f5:cb:5a:46:e4:73:ba:
                    ec:4c:b2:42:4b:05:b6:38:03:3e:a4:15:69:96:f2:
                    59:1f:f1:ca:64:40:93:9f:ce:6d:c6:af:c5:b3:2c:
                    04:3d:7a:93:ab:a4:8e:2e:34:d2:0e:d4:58:71:4c:
                    9f:82:b4:d3:cb:44:7b:45:08:ec:23:9b:5a:e6:74:
                    51:52:13:b8:5c:5d:75:bf:f8:23:92:5a:0d:f2:ed:
                    95:ab:eb:d0:20:b3:0a:4d:01:4b:91:b0:02:b9:22:
                    bb:04:76:57:ab:01:ad:7c:bc:e1:de:bf:06:7c:60:
                    72:98:01:8d:c7:04:b4:59:e6:b8:e5:af:e4:1d:d1:
                    38:5e:58:48:2b:53:f0:73:aa:5b:c7:34:0d:91:72:
                    e6:79:cb:81:0e:9e:a8:50:31:49:69:f1:56:1c:d5:
                    f9:47:8b:03:e0:4a:fb:83:7e:2b:d1:7d:88:ab:b0:
                    b1:4c:41:72:40:6b:1e:2e:b4:cd:30:70:39:74:26:
                    87:ab:64:ea:f6:72:60:ca:bd:0e:51:28:8a:16:1d:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:39:77:45:67:ED:2D:5B:DE:9B:63:0E:F9:0C:1B:11:98:6E:9F
            X509v3 Authority Key Identifier:
                keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:83:70:ac:08:2d:60:82:3b:7c:83:61:1e:ab:55:22:ba:88:
         4f:41:ca:ec:88:77:db:07:60:ab:93:97:24:5e:6c:52:85:3b:
         7e:e0:d1:db:e7:79:0d:18:aa:5e:7a:90:f0:fb:78:6e:14:c1:
         e2:ad:5d:78:1e:e1:36:7a:b6:f6:ff:eb:e3:6c:e2:b3:11:8b:
         3c:65:7b:e3:95:5e:52:31:28:01:3d:34:98:08:62:83:10:df:
         46:71:f2:c7:01:bb:3d:d4:bc:5e:14:77:ed:67:5c:14:89:95:
         a7:f7:50:92:5a:43:d6:4a:23:93:b2:3c:4b:72:6c:7d:41:8b:
         5e:5b:c4:55:e6:c0:a2:88:7f:00:bb:e2:15:30:71:c2:2b:9d:
         36:e5:83:f3:00:bc:8d:72:c8:f3:f0:03:10:e5:47:63:dd:69:
         c5:75:8b:0d:91:74:64:35:f6:4d:c1:9a:e6:22:63:47:03:16:
         e4:a0:a8:ae:ae:cd:b0:b0:0a:d1:29:85:db:b7:d6:b7:ef:ef:
         1c:f9:18:49:00:4f:13:ae:e1:38:3f:c3:aa:e8:50:e1:67:a5:
         7c:ef:f6:e7:48:f3:68:4b:ae:11:cf:5e:d0:cd:a9:e9:cd:68:
         47:36:12:6b:e5:ff:c4:d1:4c:e5:7e:16:ab:6d:26:97:41:61:
         dd:7a:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:46 2026 by rpki-client