Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
File:                     507476EE6BD811EFBDD72932C4F9AE02.roa (raw, json)
Hash identifier:          irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=
Subject key identifier:   BB:77:42:05:28:75:A4:B9:FC:D4:14:EF:CC:80:27:A3:72:96:21:DC
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       0188
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:16:04 +0000
ROA not before:           Thu 03 Jul 2025 05:43:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137185
IP address blocks:        103.230.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Jul  3 05:43:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59ba4-e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:a3:b0:1f:72:b7:d2:62:36:f4:0b:84:d2:
                    bb:80:b5:6d:69:10:d4:ca:e4:c4:4e:0e:3c:b3:38:
                    49:79:75:9b:2e:1d:21:9e:c4:1e:d2:97:01:e3:11:
                    f4:33:a6:90:65:ad:6e:ba:6d:89:2c:06:39:84:30:
                    ed:05:3b:9d:4c:4b:0c:0e:72:e0:c6:e4:24:2c:b8:
                    e7:6d:5d:40:39:b5:a6:c5:fc:cf:e4:0f:7a:44:fa:
                    2c:99:49:5c:0e:a9:25:61:7e:d5:94:15:2e:6b:c3:
                    8b:47:69:38:d8:00:d7:69:a9:65:5e:dd:85:a2:36:
                    99:16:28:10:db:72:85:43:45:cd:8c:56:49:9d:ba:
                    dd:83:9e:8a:dc:e1:34:c3:33:f2:1e:43:03:55:1e:
                    19:1f:c1:90:3f:0c:c1:b3:78:92:0c:74:fe:d9:98:
                    08:a1:77:ac:87:fc:26:29:fa:ae:de:31:45:c6:93:
                    b3:a6:fa:04:ac:b9:68:6a:c9:f7:01:1b:ca:ea:4f:
                    41:9a:05:97:c3:69:51:e4:5f:14:69:1c:f6:17:8a:
                    59:fc:d3:52:1a:d9:45:23:52:58:a3:9d:00:22:16:
                    4f:e5:73:81:58:30:ac:f6:f9:8f:5c:ff:2c:29:a5:
                    a2:2b:58:d9:a3:30:76:4f:1d:e7:4f:61:9d:7b:16:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:42:05:28:75:A4:B9:FC:D4:14:EF:CC:80:27:A3:72:96:21:DC
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:77:97:05:8a:d1:50:42:3d:4c:05:a9:a7:e3:a6:3e:45:c2:
         f2:19:ed:f3:4a:db:dc:be:5d:e0:09:7e:0f:29:3c:1e:40:e2:
         7c:ce:c4:57:da:be:de:ed:bc:ad:be:fa:00:b1:0d:ed:33:bf:
         03:8b:98:f4:aa:e5:68:c5:36:62:ff:0b:63:90:43:e4:c6:14:
         d1:66:4a:10:92:32:9f:46:82:40:c8:24:cc:50:c2:a9:1e:dd:
         bc:32:e1:dc:fa:d5:e4:09:35:6d:81:d5:9e:9e:44:4f:7c:51:
         c5:9f:02:94:06:51:ba:0b:a8:69:ee:80:d4:00:5a:68:a9:7b:
         01:6c:a9:1a:a5:de:47:d1:74:a6:db:c5:c2:13:15:74:13:38:
         90:de:bb:cb:1a:8a:00:3f:4e:3a:b3:dd:45:15:7f:98:58:91:
         49:de:67:77:5a:da:0b:6e:d0:fb:76:c8:5a:9a:99:1b:7b:3b:
         bf:7e:d8:2a:f2:28:6a:4d:06:b3:88:54:82:24:af:d7:25:1e:
         84:26:c2:7b:e1:18:94:10:96:44:fe:39:7e:72:0f:93:73:54:
         13:93:c6:fa:ee:dd:76:ea:c5:49:55:f7:0d:78:65:e1:80:3e:
         d2:75:1e:fe:8b:bd:ad:28:56:31:df:fe:84:cf:8b:17:37:2f:
         59:9f:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:34 2026 by rpki-client