Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/DF7FD23EE48B11F0B28D676E446F56BC.roa
File:                     DF7FD23EE48B11F0B28D676E446F56BC.roa (raw, json)
Hash identifier:          MvAZpBBfzrvXSC5HnLnuI4m+JdyG6kQTIbtPzd4cNds=
Subject key identifier:   35:38:67:4F:9D:64:98:46:87:23:F7:29:4E:84:BD:B4:97:73:CC:62
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0EAD
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/DF7FD23EE48B11F0B28D676E446F56BC.roa
Signing time:             Mon 02 Mar 2026 14:42:04 +0000
ROA not before:           Mon 29 Dec 2025 07:56:25 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150249
IP address blocks:        103.83.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 15:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3757 (0xead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Dec 29 07:56:25 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a5a1bc-1af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:c5:b8:9b:f3:a6:2d:36:75:c2:bc:60:99:
                    27:37:8f:3c:cd:2c:7b:5c:24:ae:07:48:3c:25:92:
                    dd:12:63:16:09:98:2e:a6:ae:c8:46:8f:e8:81:5a:
                    44:49:15:6c:80:ab:3e:36:0f:a4:ff:80:62:d6:ce:
                    65:0b:1a:37:f8:65:5b:62:66:f2:f5:56:59:c8:65:
                    4b:21:a8:e4:24:42:b2:39:e7:e4:83:0c:f9:a6:0c:
                    eb:8a:fe:09:7b:71:2b:52:76:af:a9:f7:03:17:89:
                    b6:d5:71:23:99:ac:96:89:c1:a4:86:9d:4d:16:10:
                    55:93:36:3c:44:1c:61:af:b8:58:ca:45:17:bc:84:
                    b7:92:61:72:ca:93:af:94:03:8e:a3:c2:b5:61:3e:
                    32:d5:91:df:f1:28:0a:d9:7d:68:b5:ec:27:da:b7:
                    dc:b4:3b:79:9d:37:62:f4:c6:10:0f:c7:2c:42:ea:
                    2b:1f:b5:8b:46:5b:df:61:0e:4e:25:00:4e:1b:4d:
                    9f:f6:41:67:77:00:01:b7:c5:f4:b1:d2:d0:38:6a:
                    e1:0a:f6:3d:1e:f6:48:b6:88:ca:0b:dc:af:14:0e:
                    39:86:30:6d:92:7e:ae:86:8d:8c:e6:0a:8c:c2:a2:
                    0a:bf:cc:fb:f7:ff:53:9c:1e:69:fc:9f:14:f3:1e:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:67:4F:9D:64:98:46:87:23:F7:29:4E:84:BD:B4:97:73:CC:62
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/DF7FD23EE48B11F0B28D676E446F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:cb:16:39:32:b6:d1:b1:6b:95:73:9d:bc:9f:d5:5d:13:
         71:42:c5:d0:4c:ed:63:cf:b8:58:d0:cd:e3:c3:f2:2c:9e:0d:
         1e:7e:23:f3:6c:4a:44:6d:96:d0:af:5d:41:e5:da:ad:b4:cb:
         af:e6:9a:74:95:23:da:7d:19:e2:3e:b9:48:1e:c5:89:2d:aa:
         47:17:b7:34:fa:fe:81:e5:90:a2:7a:0c:3d:e1:62:54:ad:41:
         ff:1f:18:bf:e4:c4:73:86:db:84:bd:16:8c:d6:d5:84:9c:c7:
         43:2c:4a:50:a1:da:01:5c:8d:7b:12:1d:f4:40:49:1b:19:69:
         d6:4b:11:54:7a:62:d1:a3:b1:94:05:ce:87:69:51:e9:ca:0d:
         53:02:ca:a6:51:07:4d:80:96:12:06:25:28:06:a1:e2:d8:2a:
         c7:09:79:84:d4:11:0b:a0:59:a2:39:f7:41:a9:96:9a:e0:f6:
         8c:d8:8d:3d:af:11:1d:a8:6f:d4:e7:80:dc:f5:99:d7:c5:f8:
         15:ba:6d:8d:c0:f8:32:01:d7:3e:41:7c:e0:9e:84:d5:a3:a6:
         db:d7:05:ad:b0:ca:2a:d7:74:cc:fa:6f:89:6a:c3:8f:4f:a7:
         2c:cc:7f:8e:b0:b3:de:52:49:d1:bb:80:32:ac:ae:dd:87:87:
         69:70:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:52:25 2026 by rpki-client