Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/92EBC90CABD111F0B4462F16C4F9AE02.roa
File:                     92EBC90CABD111F0B4462F16C4F9AE02.roa (raw, json)
Hash identifier:          Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=
Subject key identifier:   D9:85:0C:FA:B2:F3:02:8A:66:36:9B:E0:DA:65:D3:53:56:99:2A:9F
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       012E
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/92EBC90CABD111F0B4462F16C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:43:02 +0000
ROA not before:           Thu 15 Jan 2026 05:23:59 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.204.252.0/22 maxlen: 24
                          203.76.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Jan 15 05:23:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a1f6-724b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:89:77:a6:04:25:40:78:01:7a:8c:6f:47:
                    be:91:92:35:c2:2c:8f:49:86:c0:4a:4a:a7:59:03:
                    bb:34:86:c6:21:80:66:8d:8a:48:6b:4b:c0:41:9b:
                    62:96:a9:e6:11:5c:6a:d9:c7:25:48:f1:0c:28:91:
                    cf:0e:3b:b1:4d:52:07:e8:33:20:df:3e:01:cb:34:
                    62:1a:43:ec:08:21:f3:14:40:46:4b:3d:c1:3e:e2:
                    e0:1f:cc:9b:38:b6:7f:1f:fa:a9:7f:3f:cb:47:41:
                    aa:37:fd:9e:80:0b:e6:b0:b2:92:be:0b:ed:fa:70:
                    9a:b3:81:65:35:e5:77:ae:e1:93:9b:ae:e8:56:e6:
                    d9:d5:c3:96:c1:83:e2:54:b3:56:89:c6:b3:6d:6f:
                    3d:e6:7e:54:cc:db:37:fb:2f:0b:d4:b9:bc:18:98:
                    78:5a:c9:e5:4e:d1:ad:26:08:f9:68:2e:f4:ab:d2:
                    f3:1e:a9:81:46:b4:46:89:42:48:88:63:6c:3d:28:
                    85:85:a0:24:ff:8f:82:bd:7e:bf:f0:85:36:ec:ac:
                    c6:6f:af:9a:ec:b4:c2:4c:cd:2d:4a:5c:a9:ce:e3:
                    da:58:20:40:62:be:7f:e8:6c:ab:c8:32:15:e5:ee:
                    ac:59:52:8f:48:40:db:a8:e9:3b:b3:7d:e0:73:f7:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:85:0C:FA:B2:F3:02:8A:66:36:9B:E0:DA:65:D3:53:56:99:2A:9F
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/92EBC90CABD111F0B4462F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.252.0/22
                  203.76.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:64:26:fb:a1:04:a2:a3:db:ad:49:41:33:68:07:a3:73:57:
         31:cc:b3:c6:47:c6:33:27:02:a5:df:05:dc:66:8f:c4:9f:88:
         f8:36:31:27:8b:5c:de:13:df:5c:67:6f:7b:73:ac:73:94:6a:
         2c:89:b7:3c:78:a7:50:c2:1f:64:d8:9a:79:41:52:35:16:eb:
         02:3e:50:27:f1:31:d2:4e:7a:dd:b7:62:6d:fc:f2:79:3e:a7:
         6f:84:86:4d:50:4a:f3:d7:62:ea:bb:70:64:fb:38:d8:03:9d:
         40:ba:75:2d:31:ca:12:7a:77:d4:15:56:b2:36:4e:b7:19:69:
         29:8f:66:19:7c:ea:4e:35:6e:da:f8:2e:37:ab:48:e0:6f:5b:
         69:da:54:c6:eb:e3:9c:4c:18:29:ec:6d:e8:01:80:e4:52:37:
         88:30:d8:43:69:01:be:ea:b5:d4:70:6e:9a:37:c1:14:79:97:
         6b:be:a5:fd:bc:25:5c:18:40:7c:21:35:f9:01:cb:f8:06:1c:
         66:0c:19:28:95:3f:da:a3:a7:2d:d5:7b:e0:75:82:77:6c:49:
         f6:1a:f0:17:05:f7:03:7d:8f:6d:f0:b9:a9:0c:e6:0c:73:bf:
         f1:a7:1c:03:79:b7:0e:50:ff:f9:55:ae:d3:a2:56:53:c9:59:
         36:5f:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:26:53 2026 by rpki-client