Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1EC90968E1F211EEA360BE22C4F9AE02.roa
File:                     1EC90968E1F211EEA360BE22C4F9AE02.roa (raw, json)
Hash identifier:          iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=
Subject key identifier:   29:93:1B:FE:EF:F0:48:68:51:22:75:82:DF:DD:6F:03:B7:B7:2D:D8
Certificate issuer:       /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial:       018C
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1EC90968E1F211EEA360BE22C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:07:46 +0000
ROA not before:           Tue 09 Dec 2025 02:41:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        103.145.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
        Validity
            Not Before: Dec  9 02:41:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a599b2-81f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:61:f6:84:4b:e0:f7:46:6d:1e:0f:a4:a5:
                    41:65:19:e2:ae:7b:0b:6f:31:9a:96:66:07:c2:a6:
                    e4:59:a3:bb:8a:54:9f:39:d5:9f:36:08:71:20:82:
                    cb:28:7b:df:81:b6:46:f6:2f:fa:58:25:b0:15:86:
                    8a:74:93:1a:04:0f:7a:b6:5e:ee:3c:b4:04:d6:88:
                    b3:cd:c8:98:d9:a5:16:c2:24:0c:54:99:92:0d:55:
                    97:b7:f9:12:15:c0:f0:69:29:40:7f:92:4f:44:a1:
                    19:f4:8b:7d:38:c6:31:e2:aa:64:e7:5d:29:5a:d1:
                    11:fd:e4:00:8f:91:d1:c9:42:3d:64:06:7c:b4:b5:
                    7a:cc:cd:40:26:6c:af:f2:b0:cc:da:dd:e8:60:44:
                    3d:c4:4d:81:e8:2c:ab:3c:01:1b:c7:2a:d3:a6:16:
                    24:8b:a8:1c:c2:bf:29:2a:84:22:ac:b4:7b:36:f5:
                    61:47:24:3e:fd:e6:98:ad:6d:c4:e8:e4:df:5f:28:
                    a3:0b:ca:87:79:d0:0d:a1:d1:65:fd:2e:05:15:08:
                    15:12:d6:aa:59:7a:99:01:65:23:5b:7a:ff:6a:71:
                    3d:dd:e4:58:84:35:2c:fb:cb:25:2d:37:7f:61:2f:
                    17:5f:b9:1e:70:5b:31:e0:cf:0a:d1:9d:fe:f0:cf:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:1B:FE:EF:F0:48:68:51:22:75:82:DF:DD:6F:03:B7:B7:2D:D8
            X509v3 Authority Key Identifier:
                keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1EC90968E1F211EEA360BE22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:3e:3f:4d:83:de:bb:91:82:64:33:91:62:e1:78:1a:b5:
         e8:71:93:bf:1c:1c:4e:55:2f:cc:d8:af:cb:43:c7:69:d3:bd:
         6d:99:a1:ce:51:96:cb:a9:a0:2e:f6:32:b0:b1:5a:bd:fb:f6:
         f4:70:43:3c:e9:96:28:4d:02:28:96:44:f3:10:7d:02:43:9a:
         ac:86:ac:62:30:ec:64:ea:4c:dc:8b:ed:a4:d2:2c:84:2f:12:
         8f:28:a5:b2:5e:09:24:ee:ed:2e:40:cf:19:f5:5f:87:93:5e:
         88:b1:d6:3a:d1:b6:e3:99:21:e2:2c:0a:d8:e0:f4:a3:19:bb:
         4f:ac:1f:b2:6a:37:08:41:20:6d:07:4b:00:c0:fe:f7:34:29:
         16:9f:88:59:58:b2:97:84:60:d9:b3:46:d3:b3:4c:bb:1e:8d:
         b9:5b:30:f7:1c:c9:64:88:ca:18:1d:70:a3:af:1a:a3:ed:31:
         7d:9d:2b:8b:97:85:f9:2e:c0:cc:ee:cb:75:dc:13:ca:e5:2c:
         61:e6:41:4a:85:d0:02:9a:be:1c:f1:fb:5e:de:cd:56:59:23:
         5f:c6:b5:b7:47:2e:a7:4e:16:4c:3b:7e:07:2d:78:6f:df:74:
         4d:0d:07:73:71:91:be:7d:ab:b6:fc:e8:a4:f0:02:14:20:34:
         2a:d6:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:02:03 2026 by rpki-client