Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/91FC411C836411EE80C08641C4F9AE02.roa
File:                     91FC411C836411EE80C08641C4F9AE02.roa (raw, json)
Hash identifier:          y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=
Subject key identifier:   CA:13:F5:07:42:BD:9D:71:08:0D:AB:A9:CA:B9:3F:37:B5:E9:6F:85
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       01B1
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/91FC411C836411EE80C08641C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:40:52 +0000
ROA not before:           Wed 03 Sep 2025 04:52:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Sep  3 04:52:46 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3ed84-3bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:9c:1e:5d:1e:68:20:da:56:47:5f:26:bc:
                    32:a2:b8:a0:78:50:8e:59:cd:6a:82:43:1b:58:2e:
                    40:5c:a4:24:2f:ff:25:c7:ce:11:19:c0:bd:d0:d5:
                    bf:17:1f:e3:f5:e5:b5:0a:3d:9a:66:7c:93:83:7b:
                    c2:07:2a:2f:f2:b8:6a:17:25:e3:91:d8:b5:41:e4:
                    f3:ce:73:6d:2d:35:3f:4a:12:c1:1e:19:5b:b5:1e:
                    6a:64:f5:50:b8:44:82:b5:61:6e:8e:2d:59:de:ad:
                    36:01:8e:99:fa:9e:28:a8:4c:bb:21:49:09:51:21:
                    10:c9:d8:c0:0b:4d:eb:11:d9:16:ca:5c:e6:e1:55:
                    93:93:06:16:98:bc:a0:9b:a7:1d:9f:ec:43:82:f1:
                    9f:10:35:7e:75:20:06:ce:bb:06:1f:23:0d:80:f5:
                    e4:de:83:dc:31:45:22:6e:80:15:08:e1:6e:f1:e2:
                    be:9c:96:85:e4:69:87:a1:5a:02:c6:f9:b4:55:86:
                    0d:dd:33:25:70:d9:37:57:16:54:2a:91:4b:e4:72:
                    62:e6:53:ce:49:f0:94:1d:04:4d:5d:14:39:e6:31:
                    3a:f3:59:21:17:02:14:4f:30:71:e9:6c:69:9f:d8:
                    5b:76:2d:c5:c7:06:cc:77:d3:37:46:c2:bc:9a:71:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:F5:07:42:BD:9D:71:08:0D:AB:A9:CA:B9:3F:37:B5:E9:6F:85
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/91FC411C836411EE80C08641C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:3a:7a:8c:96:fe:3c:ab:12:b0:cb:c5:8a:b1:5f:90:11:
         c0:13:76:dd:2c:73:68:21:7c:10:88:bc:7c:b2:03:d5:e1:24:
         3e:54:7d:c0:ad:9e:c1:8a:21:f7:4e:ad:ac:c8:e3:b1:ac:da:
         98:83:90:21:5a:4c:ce:05:24:91:f5:5a:8d:36:47:b3:6b:6a:
         bb:3b:4b:c5:44:1e:57:32:73:05:49:5b:2a:5d:a9:42:20:8b:
         9d:6d:40:f6:a8:14:e4:45:26:2e:99:1f:7d:72:9d:f0:3d:44:
         23:4b:b2:d5:46:bd:a1:47:88:67:b9:6b:82:77:ed:a7:c2:dd:
         e0:3f:54:70:ca:53:d3:ed:25:d0:5d:5a:e7:6c:f0:40:89:45:
         46:5b:72:6e:35:66:ec:60:f0:de:75:84:fb:6c:f8:6d:32:c4:
         4f:04:da:fd:fd:3e:ec:14:3a:7f:63:df:db:c1:88:46:5e:fa:
         60:ee:52:76:79:5b:ee:f1:eb:18:85:fd:a6:c9:36:f3:89:fe:
         f3:f7:84:e6:45:a4:9b:92:fe:ad:a2:4f:c5:be:35:be:d9:71:
         92:8a:32:4b:51:af:96:3c:73:d8:27:a4:0f:d7:d8:76:e2:9c:
         49:92:c5:35:28:42:d1:c8:6e:c1:14:56:bb:ab:8a:03:7d:30:
         a7:08:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:27:11 2026 by rpki-client