Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa
File:                     931A51C07F5811EE82ECE456C4F9AE02.roa (raw, json)
Hash identifier:          iqRn8MuwHOm1OeP7OiaBzMQDUZroez3UjhhvxuLDGhc=
Subject key identifier:   7E:9C:CA:5E:E6:6D:A6:92:E6:FC:01:0C:7D:FF:2E:8B:AA:FC:BA:4A
Certificate issuer:       /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Certificate serial:       0421
Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:50:55 +0000
ROA not before:           Fri 17 Oct 2025 03:06:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140994
IP address blocks:        103.154.154.0/23 maxlen: 24
                          2401:4320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
        Validity
            Not Before: Oct 17 03:06:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4362f-41f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:6b:f1:49:a2:3f:f9:dc:77:9c:f3:f9:f9:
                    45:aa:fd:61:6c:3f:f3:7c:73:0c:a6:db:06:32:1b:
                    62:17:49:ae:2d:98:ba:5f:c3:b5:63:3c:d5:6f:c2:
                    17:b7:cd:85:7b:46:c4:3f:72:92:6f:ba:0d:6c:98:
                    35:fe:55:1d:10:d4:a0:bf:5e:c1:6e:09:b8:93:d5:
                    0e:8e:93:01:5b:2f:3b:29:11:2f:d7:33:8f:01:c0:
                    77:6a:cc:cb:38:2f:ba:83:d1:97:da:e2:1e:da:3d:
                    e0:bf:75:0b:58:e6:ff:26:0a:97:0a:a0:35:53:4c:
                    b6:6b:0b:6b:8f:b9:a0:75:2f:4e:ce:c5:95:ff:38:
                    bb:c4:1f:6a:ad:ca:90:a8:b0:66:22:af:1b:2e:cd:
                    fe:aa:43:06:ab:b5:ce:86:d7:50:7a:28:44:41:78:
                    0b:e9:83:bb:e7:a7:42:55:b7:ef:06:85:c2:b1:35:
                    5a:ef:6c:0a:c7:fe:08:7e:2e:91:a0:b1:53:b9:33:
                    9b:23:a9:aa:4d:9b:8a:44:29:dd:07:ad:13:7e:34:
                    39:25:5b:05:11:bd:8b:70:e6:38:49:f3:90:c5:19:
                    d3:f5:23:0e:1c:be:74:0d:46:5d:40:a8:d2:14:39:
                    03:db:da:c2:14:ae:2e:f6:a7:4a:83:1d:43:d6:bf:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:CA:5E:E6:6D:A6:92:E6:FC:01:0C:7D:FF:2E:8B:AA:FC:BA:4A
            X509v3 Authority Key Identifier:
                keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.154.0/23
                IPv6:
                  2401:4320::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:e0:49:dc:e8:b1:9b:14:d9:b7:3f:90:91:37:2c:7c:4f:
         29:92:d9:b7:26:0d:ef:37:dc:cc:19:d2:f7:e0:1d:5b:7d:1e:
         62:0c:3a:9f:40:6d:da:dd:ac:5f:66:e2:23:b6:32:8f:15:e7:
         9f:a1:ec:41:03:dd:01:3f:c8:b6:93:26:00:11:43:a5:2d:ee:
         3a:7a:b6:88:23:68:6a:9f:ca:14:97:b2:90:72:b9:8c:0f:cc:
         cd:02:18:cb:e4:18:89:04:68:c1:c9:e6:bf:79:8b:9e:c7:9d:
         c1:80:5c:78:d3:9e:fb:09:61:72:2a:12:fc:82:d5:ca:cb:d0:
         7c:9e:63:52:46:36:d4:18:c5:45:bb:da:e8:5a:a7:a6:1a:be:
         fb:be:b6:fb:4a:0d:9b:c5:fb:38:7c:d1:01:41:b6:47:36:d1:
         ce:49:f7:df:62:bf:8d:7c:83:b5:3d:2b:cb:3f:52:fe:af:dc:
         70:a8:c2:a5:02:d9:2a:3d:a3:cb:17:5d:07:bd:2e:fc:af:a7:
         0e:b6:78:b5:02:43:f8:f0:bc:8d:d7:d3:cd:fa:f5:d6:0d:bb:
         20:97:ca:83:89:96:c1:87:b6:c7:8f:55:ad:1b:d6:ef:a3:60:
         7e:97:91:1d:10:d9:3b:fa:b0:a1:df:54:fa:55:83:dd:8c:a6:
         c2:10:78:02
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3
QTk1QjJGNzQwHhcNMjUxMDE3MDMwNjI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzYyZi00MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApb5r8UmiP/ncd5zz+flFqv1hbD/zfHMMptsGMhtiF0muLZi6X8O1YzzVb8IX
t82Fe0bEP3KSb7oNbJg1/lUdENSgv17Bbgm4k9UOjpMBWy87KREv1zOPAcB3aszL
OC+6g9GX2uIe2j3gv3ULWOb/JgqXCqA1U0y2awtrj7mgdS9OzsWV/zi7xB9qrcqQ
qLBmIq8bLs3+qkMGq7XOhtdQeihEQXgL6YO756dCVbfvBoXCsTVa72wKx/4Ifi6R
oLFTuTObI6mqTZuKRCndB60TfjQ5JVsFEb2LcOY4SfOQxRnT9SMOHL50DUZdQKjS
FDkD29rCFK4u9qdKgx1D1r9NpwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH6cyl7m
baaS5vwBDH3/Louq/LpKMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2
OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAzQ0YvMTdENkU0QzJBNjhBMTFFQ0E5QTYzNTUxQzRGOUFFMDIvOTMxQTUxQzA3
RjU4MTFFRTgyRUNFNDU2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5qaMA0EAgACMAcDBQAkAUMgMA0GCSqGSIb3DQEBCwUAA4IBAQBH
pOBJ3OixmxTZtz+QkTcsfE8pktm3Jg3vN9zMGdL34B1bfR5iDDqfQG3a3axfZuIj
tjKPFeefoexBA90BP8i2kyYAEUOlLe46eraII2hqn8oUl7KQcrmMD8zNAhjL5BiJ
BGjByea/eYuex53BgFx40577CWFyKhL8gtXKy9B8nmNSRjbUGMVFu9roWqemGr77
vrb7Sg2bxfs4fNEBQbZHNtHOSfffYr+NfIO1PSvLP1L+r9xwqMKlAtkqPaPLF10H
vS78r6cOtni1AkP48LyN19PN+vXWDbsgl8qDiZbBh7bHj1WtG9bvo2B+l5EdENk7
+rCh31T6VYPdjKbCEHgC
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:12 2026 by rpki-client