Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa
File:                     91BBC8880D9711ED8F09C27DC4F9AE02.roa (raw, json)
Hash identifier:          pq1sN488GNHUbs+EVGc5uH9VNIIGFOPoj1uisyqem+A=
Subject key identifier:   75:4D:48:85:40:5D:BD:3E:FC:CA:EE:E1:3C:29:2E:84:10:87:6B:9E
Certificate issuer:       /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial:       0369
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa
Signing time:             Sat 29 Aug 2026 00:50:41 +0000
ROA not before:           Sat 29 Aug 2026 00:50:41 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149990
IP address blocks:        103.190.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
        Validity
            Not Before: Aug 29 00:50:41 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a922ce0-143d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:2c:a3:02:22:f2:76:24:78:d5:18:e2:7e:
                    32:44:dd:8c:47:f6:34:ff:09:aa:92:64:71:6b:fe:
                    bb:73:26:ff:5c:03:6b:30:b6:87:c8:18:56:ed:eb:
                    7d:df:4a:d4:3b:81:8f:2d:ef:05:ba:13:98:c0:58:
                    a1:4f:20:18:02:85:25:98:8b:7d:82:1c:ef:40:2c:
                    4c:37:a2:f4:36:c8:1f:5b:ef:da:18:88:ec:39:56:
                    48:44:0c:4d:0a:d0:2d:f7:10:6e:3d:5d:64:6e:7b:
                    f8:0d:0f:57:a9:0c:be:e5:13:06:9f:30:3e:fd:2b:
                    88:ff:39:f1:55:3d:40:9c:86:e8:bf:7c:75:e3:8a:
                    70:91:8c:c5:db:48:80:eb:d2:af:60:c7:f6:c4:78:
                    8f:95:64:aa:52:5c:0d:25:73:be:69:35:99:2c:c7:
                    e8:8a:75:b3:f2:ca:6c:a0:80:34:e0:e4:9f:25:09:
                    c0:13:1e:d9:dc:68:e7:b5:ee:4e:40:a2:55:56:1f:
                    2b:a5:ee:50:ba:90:68:d1:dc:44:08:54:e1:6b:0b:
                    a7:05:3f:8c:27:49:f7:d8:5a:e5:42:e0:7b:6d:94:
                    23:50:c8:57:0e:65:d2:98:33:b9:b0:33:ff:04:5a:
                    3c:27:5d:94:12:cb:c6:36:df:94:31:c7:54:30:57:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:48:85:40:5D:BD:3E:FC:CA:EE:E1:3C:29:2E:84:10:87:6B:9E
            X509v3 Authority Key Identifier:
                keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:77:e1:77:69:7c:60:a2:6e:d6:bc:fa:4c:e3:12:c4:41:
         02:ea:33:c4:92:80:cb:a7:19:09:22:1d:ef:0d:39:32:93:36:
         58:a9:5a:ec:d5:b8:d1:15:45:54:cd:3e:f1:52:f5:c5:c2:b6:
         e8:eb:4e:83:f4:58:89:80:c9:1d:87:90:11:21:20:4c:5d:48:
         c6:28:2f:a8:e5:5a:0a:5e:45:0e:1d:1c:79:c3:94:70:e8:82:
         b9:ea:16:3e:95:ff:1c:9d:c8:c1:fa:e9:36:8c:b1:10:86:88:
         9f:27:5a:53:c7:cc:e5:19:4f:c4:4e:9e:73:11:b2:17:a0:cb:
         19:e1:f9:38:8d:27:0c:45:9d:41:27:de:e7:7e:ab:a1:e7:32:
         c9:2e:c4:6d:66:44:67:de:8d:ad:39:10:fa:76:19:b7:ad:13:
         05:8e:46:bc:62:9d:78:b9:88:e1:ae:23:84:34:28:ed:cc:36:
         00:d9:d2:10:15:e3:e2:ab:dc:5a:ad:43:87:ef:c4:11:ba:95:
         1f:36:4c:28:74:f2:b3:74:c7:3e:c7:cd:2c:7b:4b:2a:45:fa:
         12:54:ac:f2:6a:9a:2f:78:e2:1b:42:33:bf:52:28:3e:f3:c8:
         c3:83:77:e2:23:09:bf:0e:3e:84:9c:57:07:38:0b:84:73:1f:
         42:b6:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:17:11 2026 by rpki-client