Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/B791EB5251A811F08D434B5BC4F9AE02.roa
File:                     B791EB5251A811F08D434B5BC4F9AE02.roa (raw, json)
Hash identifier:          Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=
Subject key identifier:   DC:44:87:CD:5D:50:AB:7C:2D:7C:85:E1:0D:AC:FF:3B:CB:54:31:7E
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       07C3
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/B791EB5251A811F08D434B5BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 21:28:15 +0000
ROA not before:           Mon 02 Mar 2026 21:28:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132203
IP address blocks:        103.242.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Mar  2 21:28:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a600ef-8008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:5d:ae:b7:e4:bb:e3:4b:19:68:33:66:fb:
                    32:2e:04:d8:ff:d8:bd:5c:94:bc:16:a5:92:12:dc:
                    91:4b:ed:ed:5d:6e:b8:28:3c:11:dc:6e:c5:bb:73:
                    65:aa:db:91:f7:d2:1f:7a:17:a6:12:55:69:71:04:
                    1c:81:ff:8c:cd:d6:7e:99:bb:46:9f:ed:1a:e7:80:
                    22:6a:6f:7d:25:e3:8d:eb:fb:2c:ac:25:83:38:69:
                    5a:f4:8f:78:66:ae:56:3d:6a:40:01:9b:17:11:f9:
                    37:5e:ae:52:f6:0e:2f:a8:e0:8a:cf:0d:e8:a4:9e:
                    e5:ba:c7:ec:42:36:91:32:d0:88:c9:16:09:fd:1b:
                    c8:36:e0:45:58:98:58:10:34:9f:4d:03:c3:b4:a6:
                    d4:ec:0a:51:b4:49:86:e1:e8:97:2a:c7:c4:25:34:
                    f7:b0:97:db:d6:c2:f0:26:82:27:9a:94:ad:ae:87:
                    ef:05:fa:3d:6f:29:aa:38:94:85:f9:f1:60:ce:54:
                    cb:99:fb:7f:69:83:7c:2e:b6:07:26:29:28:66:bb:
                    b6:8e:fb:e3:e1:e1:cb:c8:72:59:cf:9f:fb:a1:ba:
                    47:81:53:40:c7:7e:32:ad:11:bc:c5:23:20:2a:57:
                    ff:e8:e6:99:5b:63:de:ef:ec:40:ac:37:85:df:50:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:87:CD:5D:50:AB:7C:2D:7C:85:E1:0D:AC:FF:3B:CB:54:31:7E
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/B791EB5251A811F08D434B5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:a0:c3:f8:9e:f4:2d:62:0d:07:9f:87:1f:11:de:64:40:f7:
         62:8d:7b:e3:cf:d2:17:6e:84:bc:53:54:4a:e3:72:2f:ee:c8:
         d7:1b:15:1e:d6:9e:39:e7:9c:e8:fa:b1:5a:bd:f3:1e:80:ac:
         09:b8:fb:2a:2f:86:54:8e:ac:d4:49:26:ce:1c:cd:10:b9:df:
         5d:62:a1:df:45:c5:e9:f2:32:9a:4c:15:c3:e9:fc:b4:cd:64:
         62:b9:0b:4e:c7:60:61:91:06:3f:be:8e:07:6e:2b:22:15:7a:
         cb:8d:bb:b8:cc:27:92:b8:79:9e:c5:d6:a4:7d:a8:92:cc:04:
         bb:bd:6a:92:b9:ab:69:35:15:58:02:b6:01:19:62:76:d4:7e:
         a4:9b:80:84:a6:21:58:c1:ea:04:fb:ca:ed:bf:ac:23:a0:a9:
         78:95:fe:87:f3:66:64:81:88:de:f7:79:ba:ff:4a:94:03:4d:
         4f:69:26:fd:b4:d7:0a:15:be:8c:9c:73:6a:12:7d:2f:d4:ae:
         e9:df:6a:86:3a:fa:41:2f:50:b9:2c:9d:cf:e9:d3:d4:c4:e0:
         9e:07:e0:54:51:0d:76:36:b2:a6:ca:a0:08:94:1e:be:03:68:
         f0:53:99:80:07:73:5f:9d:1e:cf:78:04:87:4b:8e:a3:6d:a5:
         f7:38:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:31:30 2026 by rpki-client