Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1C9AFC389AEF11EC9717F22AC4F9AE02.roa
File:                     1C9AFC389AEF11EC9717F22AC4F9AE02.roa (raw, json)
Hash identifier:          I2it0EyHeNbous/dvGzRRmnmQTMjDIw5uUwfnarruwA=
Subject key identifier:   29:EC:8D:F5:08:82:1F:0D:E8:17:5D:58:47:6D:3D:6B:07:97:D4:43
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E37
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1C9AFC389AEF11EC9717F22AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:17:15 +0000
ROA not before:           Thu 28 Aug 2025 14:54:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149079
IP address blocks:        103.182.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24119 (0x5e37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:28 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c6b-ff55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:69:5c:48:a9:c1:0a:ba:9e:c1:67:9e:13:
                    9c:de:33:ed:f0:bd:ff:16:86:7f:dc:2d:1d:ec:7e:
                    0d:9c:22:04:c0:18:a6:2a:4b:b6:dd:04:73:e5:fe:
                    07:80:55:e4:e0:bb:d0:be:6d:43:99:fc:b6:df:95:
                    4a:bc:7d:4c:fc:4c:b7:61:12:d6:9d:da:d2:c2:8c:
                    61:7b:0a:38:e3:a8:f4:e8:3e:d8:d2:9e:4c:45:3a:
                    d1:f9:c5:8d:8d:d7:97:d9:eb:3e:d9:be:f5:27:65:
                    16:8a:dc:31:3b:a5:39:13:30:f4:ca:73:c5:59:7d:
                    a7:eb:0d:e9:05:06:8e:f3:bc:f5:08:00:a5:6d:b5:
                    4d:6f:42:98:2a:fb:81:d5:0c:8c:c9:46:fa:53:7f:
                    f0:49:9e:16:ea:a3:e6:59:a2:00:5c:11:60:3d:9f:
                    d7:86:76:6f:f5:78:46:8a:02:0a:57:07:62:88:1c:
                    e8:a7:47:b9:48:2d:0f:56:01:f3:a4:03:cc:5c:68:
                    04:f1:18:ef:ee:0d:07:8f:56:7b:1a:0f:f7:c4:0e:
                    22:cb:73:3d:86:4a:1e:27:a8:1f:52:ad:92:37:30:
                    92:d3:ce:d1:c4:16:3c:f2:a3:44:b0:fe:c8:8e:4a:
                    65:58:85:04:69:62:4d:dd:c2:10:6e:29:73:3f:00:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:8D:F5:08:82:1F:0D:E8:17:5D:58:47:6D:3D:6B:07:97:D4:43
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1C9AFC389AEF11EC9717F22AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:20:15:02:c4:67:21:d4:bd:b8:c6:9b:a2:d5:1b:af:b1:85:
         1d:b7:10:7b:5f:37:fe:ca:10:f2:04:4c:50:e4:e2:a0:00:cb:
         e7:4e:2e:25:b5:8e:a8:33:51:ad:c3:c9:cb:92:b1:a5:75:74:
         46:80:8e:b6:01:56:f3:68:18:16:33:17:ed:b5:fe:a6:b9:3b:
         77:5e:7c:52:c3:9e:d6:62:89:8b:0c:72:9e:5f:0f:84:01:3f:
         95:9e:2d:67:b6:53:2d:70:fb:34:3b:22:9c:e3:4f:92:2c:f3:
         85:d1:7a:62:aa:3f:26:b2:f0:3a:b8:41:97:49:d3:19:e1:7f:
         2a:42:81:d0:ef:86:9e:f6:7f:b2:db:ac:d5:56:cf:d8:48:ef:
         98:1e:7c:2b:12:bf:bd:53:e0:ad:8f:f9:49:b5:8f:15:be:46:
         92:c4:b3:9b:08:0b:d9:11:9a:b6:ac:4c:18:6a:fa:5b:6a:6d:
         01:55:ca:0a:05:ba:96:34:27:8d:f8:a2:e5:91:43:57:e3:b1:
         3b:5d:ae:d1:40:ef:c6:8a:75:3e:ce:13:3d:a3:3f:ce:38:76:
         66:ff:8e:60:53:ec:54:56:ae:b6:ae:77:60:34:39:2e:26:21:
         bf:b2:e5:b6:98:19:3f:0c:c9:ed:6d:4a:cc:0e:b3:b1:1d:54:
         4a:df:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:01 2026 by rpki-client