Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa
File:                     82B99B1C6B9F11F09CD3A334C4F9AE02.roa (raw, json)
Hash identifier:          PZ66UMp5duF5Xm5XD0SlInLynDFoHk/dCmXT0Ll5x3M=
Subject key identifier:   CB:12:C4:94:E7:89:D3:96:88:DB:CC:20:8A:94:12:38:C9:B5:7B:70
Certificate issuer:       /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial:       0290
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:15:22 +0000
ROA not before:           Wed 03 Dec 2025 00:30:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132707
IP address blocks:        103.37.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
        Validity
            Not Before: Dec  3 00:30:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4661a-20b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:34:54:c8:1f:c2:67:4b:03:44:e2:de:fa:
                    b2:d8:73:fd:e7:2f:7c:93:79:ec:a4:95:3a:23:0a:
                    5c:50:57:fa:8e:5a:7d:9c:de:0d:8d:8c:f9:5a:bc:
                    54:4b:91:60:77:12:e0:d6:ae:45:51:80:b6:ee:85:
                    63:95:36:9f:d2:24:43:11:ab:38:0d:a9:90:c3:0e:
                    c1:37:86:6e:79:d7:a5:c1:b5:6e:c6:4a:21:96:29:
                    63:71:b7:d1:66:34:2e:c0:6d:b6:a0:5a:55:c2:0c:
                    08:bb:77:51:44:c2:e9:44:a6:48:99:d4:ba:56:41:
                    fa:15:05:88:d8:56:11:02:c4:e3:f1:9e:74:8c:de:
                    42:c4:6c:f8:80:59:15:d3:d5:bd:ac:01:74:27:62:
                    b8:92:d1:6c:ab:38:a7:60:44:74:9d:61:bc:a1:9e:
                    f4:c6:df:18:ce:22:b8:37:c2:6a:46:57:35:1f:6c:
                    9f:0f:4c:ba:55:4a:72:f9:6a:1d:1a:7a:3d:c9:9d:
                    30:46:19:c6:20:e5:5f:1c:0e:b1:78:12:a2:12:a4:
                    0d:26:a0:60:88:15:f3:3d:69:49:3f:f5:35:12:46:
                    4f:d8:b5:0c:78:e0:db:10:d3:eb:6d:b0:27:de:c4:
                    1b:cb:80:b0:cc:a2:c5:8b:e5:bf:be:a0:7f:b0:28:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:12:C4:94:E7:89:D3:96:88:DB:CC:20:8A:94:12:38:C9:B5:7B:70
            X509v3 Authority Key Identifier:
                keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d9:6f:e5:15:cb:50:48:49:5b:7e:de:19:4f:54:de:a4:ef:
         e3:0d:af:c2:41:d3:6e:da:31:ab:6a:36:f3:30:12:b5:3f:51:
         fc:e9:88:66:e9:90:6c:de:e5:8b:f6:e9:df:ea:64:69:af:15:
         5f:17:73:d6:56:ca:8c:4e:8e:fa:75:9f:9d:bf:a0:dc:40:b8:
         ec:46:74:2e:ac:0b:9b:71:74:37:9f:ea:80:ed:3c:0c:f5:e8:
         64:fc:80:fd:1e:cb:81:39:8e:58:cb:1d:54:90:2c:63:08:90:
         05:bf:c9:c8:bc:28:9f:fb:78:66:94:c5:bc:10:e4:aa:16:15:
         a1:20:af:ee:a8:20:bf:6f:d2:b9:dd:e3:47:b0:69:78:09:2c:
         36:4d:8b:c2:64:80:b1:22:d4:33:cc:a7:48:b0:c3:cf:59:77:
         b6:21:33:90:52:f3:6f:b6:19:83:d0:0b:1a:25:29:25:4d:c6:
         37:6d:0e:95:91:ad:a2:3a:9b:a2:f8:3d:f8:b8:c1:80:e4:f0:
         01:49:a6:7b:92:34:b9:9a:9c:96:54:f2:df:30:86:8a:12:8e:
         ce:0a:11:3e:e4:db:bb:fd:3f:47:34:a2:12:bc:59:c7:b6:1f:
         bc:c1:77:a9:41:0c:cf:ec:1e:86:33:88:29:e6:de:7f:2c:5c:
         77:79:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:15 2026 by rpki-client