Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
File:                     9C581C28B07511EF9D153813C4F9AE02.roa (raw, json)
Hash identifier:          h3uFBbPJ0AuoIW5QK3aikk6YYruZ0svwOwDRKDt3+H0=
Subject key identifier:   49:76:D9:7D:77:CD:23:6E:16:56:71:D0:57:1D:D9:8A:8D:9A:A5:98
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       054C
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 23:19:19 +0000
ROA not before:           Mon 26 Jan 2026 23:19:19 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Jan 26 23:19:19 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6977f676-665a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:bf:98:f9:f4:a4:20:2a:6d:4e:31:22:5d:
                    ee:5e:21:3e:79:36:fa:f5:f0:26:9e:6a:39:5f:14:
                    02:09:ce:f9:a7:ec:0b:a0:87:17:36:aa:c4:c5:64:
                    bd:36:37:9f:fb:8a:6a:f1:f8:24:66:53:b5:ed:83:
                    59:67:4e:26:47:86:3e:70:14:a9:c4:ff:ac:a4:be:
                    da:e1:b4:51:c6:1a:72:90:b4:a1:0e:8d:c5:78:e5:
                    ca:fe:2b:12:b4:5a:f0:62:ca:ca:ca:37:9c:7a:20:
                    a8:cb:98:c6:fd:b7:9f:fc:27:16:b8:ef:69:a3:58:
                    a4:88:cb:36:9d:3c:0c:3c:df:55:80:45:f3:6f:c8:
                    4b:d6:8c:f5:c1:a0:fc:49:0f:90:f6:61:45:80:31:
                    cd:c2:be:6f:b6:6c:96:f8:cc:26:01:27:f5:3d:3c:
                    2d:f9:33:4e:45:86:b2:87:1e:7c:05:92:4e:3a:47:
                    09:50:07:f3:e7:4a:93:a6:8b:7d:46:03:e0:de:a7:
                    11:32:7b:e6:d4:7f:92:b2:f9:d5:99:ba:01:a8:f6:
                    b2:9f:fa:8e:7e:ee:30:86:ff:ed:81:5a:4e:57:94:
                    4d:a0:72:fb:e6:4f:f4:d0:44:19:e6:33:ca:10:57:
                    d6:3d:8e:89:41:9f:c8:39:35:00:6d:94:02:47:17:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:76:D9:7D:77:CD:23:6E:16:56:71:D0:57:1D:D9:8A:8D:9A:A5:98
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:18:5f:5b:88:0c:13:01:21:af:ed:59:be:57:2a:77:de:
         98:a3:84:3f:d2:72:8c:45:19:bf:46:95:2e:77:b0:68:6f:fd:
         8b:0d:80:a2:7a:25:06:14:ce:c2:ab:82:d6:d8:1a:36:4b:b2:
         b7:41:8b:98:ea:28:40:ca:e7:fa:bf:08:e9:c0:ca:1c:63:45:
         d1:d3:25:bb:77:ae:c1:e1:5c:e0:9d:7e:e2:6e:37:55:39:5c:
         bc:09:76:09:cd:cf:ec:9d:f5:c1:c3:66:58:ad:28:f2:7f:17:
         e8:08:23:14:36:38:fb:6c:18:6f:24:0a:57:38:bb:d8:3c:1c:
         ab:23:63:eb:63:e5:fc:52:53:d3:0a:67:8f:21:bc:f8:1e:7f:
         d5:67:47:9e:d5:77:f5:46:de:fe:b7:2f:17:78:34:8a:5d:e7:
         00:ff:0c:d1:34:60:23:f1:61:83:40:27:a8:13:11:86:1e:12:
         3f:21:3a:ed:c6:9f:f5:c5:29:7a:e3:5a:83:8e:c6:97:86:f7:
         20:dd:70:51:3a:d5:1f:eb:c1:56:a6:96:8d:c2:88:f3:11:c7:
         02:5c:01:ac:4b:3b:b4:66:f2:c6:6b:75:37:ea:b5:8f:10:3e:
         35:db:65:8e:04:f5:8f:4f:8f:3b:a0:4a:70:2b:f5:0e:b8:ee:
         ab:c6:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:00 2026 by rpki-client