Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
File:                     591B98DE548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier:          ZZOQZPDyiLZTqV8WbUexxdia9It2J3YHCvfk5XQ2eMo=
Subject key identifier:   11:95:7D:29:E5:2E:D3:EF:F3:68:13:E7:42:A9:5B:EB:61:3A:07:A6
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       0789
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 21:27:54 +0000
ROA not before:           Sat 04 Apr 2026 21:27:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132369
IP address blocks:        103.148.202.0/23 maxlen: 24
                          2405:d6c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Apr  4 21:27:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d1825a-e15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:a4:6b:eb:59:cb:36:32:23:34:e9:93:c8:
                    d3:f9:32:09:8e:89:29:e4:6b:46:ca:f0:92:3f:81:
                    60:37:5c:b2:bf:5a:ab:61:cf:27:bf:34:ab:f4:44:
                    e5:32:f5:f5:10:f9:51:7d:3d:1f:35:35:b9:65:0d:
                    ce:8d:56:9d:17:f2:51:dd:e6:c7:a6:03:0e:29:c9:
                    c1:63:5c:98:66:a9:0f:3e:d3:c0:e9:c8:13:24:0e:
                    70:0b:2d:22:fa:a0:9e:b6:2c:16:51:a1:2c:90:11:
                    b1:74:5c:af:62:c0:ee:d1:82:31:a2:7b:8e:07:6f:
                    de:a5:4a:ce:6d:b9:e8:9f:53:21:5c:93:09:94:fc:
                    fe:bd:39:d8:a7:6e:56:42:4d:ce:42:f6:5c:a0:1c:
                    b3:ef:43:b5:a9:26:78:d7:1c:5e:7f:5f:dd:a3:da:
                    c7:3f:18:de:b5:2c:94:0c:eb:c8:1a:6d:6a:aa:87:
                    e0:48:aa:23:d2:6d:35:ee:65:ae:3d:07:03:39:27:
                    d8:d4:f3:01:f3:74:57:a6:22:0e:a4:5e:df:27:2e:
                    aa:ef:34:52:09:a3:5a:26:1a:ba:dd:bb:18:2c:ba:
                    8d:0f:29:26:37:0c:ee:08:fb:40:fc:57:9e:fe:8f:
                    a5:c6:08:6b:97:96:0e:ae:20:77:6d:a0:93:7d:31:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:7D:29:E5:2E:D3:EF:F3:68:13:E7:42:A9:5B:EB:61:3A:07:A6
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.202.0/23
                IPv6:
                  2405:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:8e:3b:93:ad:fc:03:46:ed:c6:29:28:2e:4e:6d:e3:f2:5d:
         e2:54:bc:06:24:01:73:ad:da:16:46:4d:25:d6:46:70:bd:10:
         0d:4a:dd:0e:5e:7a:e1:2b:9b:6b:a1:ad:50:6e:74:b3:a4:cf:
         24:89:d1:4d:75:1b:74:ec:fb:ed:a4:ea:5b:e9:a9:76:c2:49:
         5b:67:1e:84:11:0c:61:6a:57:51:b0:45:c3:20:92:0a:a2:c9:
         25:d7:95:40:24:d9:78:80:82:2c:3f:09:c7:1d:65:b6:90:f8:
         8c:da:38:ab:41:68:48:59:ec:1c:02:26:62:65:33:dd:28:45:
         dc:bf:c2:b5:6e:2f:1e:89:2b:28:d8:49:55:2c:bc:dc:08:cc:
         71:fc:ca:4c:68:86:f4:43:5d:58:7e:28:dd:79:d7:e6:fe:b8:
         37:b2:d0:0a:12:9e:9e:73:2d:f3:57:f1:7e:00:8f:ef:6f:32:
         2f:6f:83:c5:49:e2:dd:36:34:3a:d8:cd:5b:a2:31:99:4c:0f:
         ec:6e:d4:83:32:3b:97:05:61:71:75:47:19:5b:d8:a8:b1:4c:
         20:8b:f9:f2:1a:fd:f7:47:0f:82:04:3b:89:02:79:8f:78:c6:
         84:65:fb:53:c5:5e:8b:14:33:b4:df:1c:e5:1e:d8:f0:13:2e:
         a1:30:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:10:12 2026 by rpki-client