Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa
File:                     8126464A232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          LHyE9JquxrZVA6+YxqyZyhj2fRXxq3kNX+szFQORjMs=
Subject key identifier:   1B:76:8D:CF:F2:34:84:0D:DF:53:43:A0:87:91:F1:3C:0D:03:99:E6
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       080A
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:46:38 +0000
ROA not before:           Sat 30 Aug 2025 22:13:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135386
IP address blocks:        103.153.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 20:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 30 22:13:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46d6e-2293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:56:73:84:03:d8:c2:6d:09:62:aa:f8:b7:
                    c7:61:76:4f:aa:73:22:50:42:bd:11:f0:1d:99:be:
                    8f:25:92:a2:de:84:f2:f1:12:26:eb:95:c9:86:9e:
                    27:ff:88:73:9e:d0:4b:36:96:a7:8d:a0:a7:2f:aa:
                    4d:e5:3c:b9:bc:dd:b3:54:f9:e2:12:58:81:e9:e1:
                    a4:15:ce:f5:5b:95:05:21:2d:20:da:3a:16:29:fb:
                    73:e5:71:33:88:29:ee:fa:d3:c8:62:a6:71:4b:fb:
                    51:e2:4a:19:c8:a7:8a:a0:62:23:70:5e:26:d8:a6:
                    b9:b4:8d:d1:3f:f2:83:4c:6d:9e:68:56:72:3e:8f:
                    8f:86:30:8e:5b:8c:16:93:4a:a5:d7:bb:d3:7c:45:
                    85:22:23:7e:47:d8:f1:45:4c:0d:07:f5:01:3c:84:
                    5a:48:46:f1:d9:8b:ad:63:30:be:8a:71:5d:9c:02:
                    87:5e:ce:b2:c6:80:a0:7b:1f:25:bd:d3:95:44:0c:
                    18:b6:c2:96:a1:87:94:87:b4:45:d8:4a:a4:e7:42:
                    45:ba:e4:bc:51:ec:ae:3a:79:22:82:f2:f3:e9:44:
                    22:42:7f:ff:f5:44:1b:18:0e:e4:2b:a7:bd:9e:89:
                    cc:54:06:47:0b:3c:b0:55:02:1d:7f:bf:fd:a6:b2:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:76:8D:CF:F2:34:84:0D:DF:53:43:A0:87:91:F1:3C:0D:03:99:E6
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:dc:80:d5:3f:b9:c3:5f:34:a6:84:a1:a5:1e:c2:08:86:
         d9:65:a5:e7:0a:18:b9:95:b1:f7:c3:36:65:fc:df:f5:d8:de:
         3d:02:b0:0f:f3:2f:aa:9e:05:f4:1e:e8:b2:10:93:1e:10:10:
         9f:d4:41:4f:48:f0:a9:4e:7d:e3:21:f6:8e:c6:c5:de:df:df:
         6e:69:8a:92:d3:f7:78:aa:34:0b:7f:a8:6c:82:6b:24:9d:c4:
         3a:ab:2c:7a:9f:89:bd:83:aa:9d:db:08:eb:91:12:a5:90:20:
         13:be:8e:99:ba:9a:44:e2:df:25:cb:cd:01:31:02:d1:99:d8:
         72:56:28:6f:9a:66:01:4d:0d:0a:7f:22:cd:85:28:f3:6c:a4:
         5e:86:64:0a:76:cc:e6:35:59:ac:2a:80:35:f1:f5:1e:6a:a5:
         42:75:95:50:7a:38:a0:43:71:d3:33:61:77:3c:3a:ce:9c:54:
         86:c6:05:eb:27:02:d1:53:52:71:7e:69:6c:88:e9:22:4f:41:
         ff:dd:34:14:b7:33:7f:17:81:c0:42:ef:37:b9:81:06:49:d4:
         8a:aa:38:71:79:60:0f:43:e1:e8:f6:8f:44:69:89:de:00:7a:
         99:84:2e:1d:7d:7f:c0:2a:97:1c:29:e1:09:55:6e:93:b8:1a:
         bd:a1:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:09 2026 by rpki-client