Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
File:                     54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (raw, json)
Hash identifier:          7fUCyyZYoAQZX6oLKSwqjZm0tD9DSJyL9N4WSJjNtpo=
Subject key identifier:   4B:BF:4F:0A:EF:40:10:69:59:DF:97:CC:85:D4:7A:C1:6D:BE:3E:2A
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       035C
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:01:03 +0000
ROA not before:           Sun 03 Aug 2025 02:08:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149856
IP address blocks:        103.188.248.0/24 maxlen: 24
                          2001:df0:c9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Aug  3 02:08:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4004e-4aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cb:98:62:1d:5a:63:36:c3:5b:54:68:28:6c:
                    0d:3b:c8:4b:f5:87:87:88:5c:90:cb:c6:7c:d0:7d:
                    07:ac:c0:78:6e:46:42:8b:74:50:20:63:33:3b:35:
                    86:68:c2:09:9c:da:9d:bf:22:3f:bf:13:e8:c0:56:
                    94:b3:f0:85:56:9d:65:bc:cf:7e:66:f1:f4:f2:1c:
                    11:ba:75:d6:71:47:b3:ad:7f:ec:e5:d2:8e:0a:5c:
                    43:fb:79:e4:bd:01:47:63:8c:70:86:3a:f7:e9:0f:
                    67:32:d6:9f:f2:ab:54:64:f6:d6:2c:43:dd:36:45:
                    37:4e:cd:9a:7d:a9:50:05:d6:b8:ec:11:04:c0:cf:
                    79:f0:43:d2:16:99:df:69:3f:21:23:62:e6:8e:e7:
                    d4:11:58:9e:68:43:f4:b9:6a:ee:d6:65:34:c6:b2:
                    bb:d3:50:d3:81:39:a6:65:62:6d:ec:56:ca:2f:56:
                    4a:57:cf:1b:be:f3:5d:f8:36:33:06:36:e9:38:6f:
                    9d:01:65:2f:b0:3b:66:5a:b6:ed:87:e5:a0:77:98:
                    52:e0:be:47:fa:95:65:03:86:28:fd:5c:2a:01:af:
                    79:2a:8e:4f:0c:da:0b:c6:dc:b5:f8:76:ed:83:f1:
                    1c:a4:88:c2:6a:a7:2b:80:56:f2:cd:21:75:ca:75:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:4F:0A:EF:40:10:69:59:DF:97:CC:85:D4:7A:C1:6D:BE:3E:2A
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.248.0/24
                IPv6:
                  2001:df0:c9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:7b:f1:ce:03:a4:a6:a3:ec:5e:0d:ee:44:a9:10:6f:34:
         71:00:db:ff:e5:8e:0b:09:a0:31:b3:e0:73:ae:02:3f:32:54:
         26:ea:88:de:3c:c4:40:98:3c:5a:d5:87:9a:fb:07:e0:7d:da:
         0a:49:df:07:c1:e3:d5:30:cb:e1:d6:25:67:66:18:65:6a:3d:
         49:af:f0:e0:22:9a:e1:67:f5:e5:19:cc:06:ff:c9:bf:1d:e0:
         ee:5a:f2:5c:bc:1c:24:be:59:1c:33:2b:a4:c0:8a:13:02:b5:
         91:29:86:81:04:bd:3a:05:94:4d:1b:32:87:51:ee:f9:0b:5f:
         dc:58:3e:4a:5b:8a:ca:02:4c:2d:a0:b8:d2:b4:cf:26:ff:f7:
         de:c6:67:ff:2f:07:a4:b0:49:01:85:33:91:7c:e4:e1:36:a2:
         67:9b:83:dd:11:7c:cf:e1:81:82:22:af:77:c0:84:d5:bd:b8:
         c3:3c:e2:d5:d5:7c:ea:c8:92:b7:61:47:5e:66:cd:04:a0:60:
         e8:ac:d6:8a:12:6a:ef:85:2a:20:bf:66:35:4c:e8:18:b3:17:
         da:4f:95:50:86:0d:ac:34:88:f3:f5:2d:85:da:52:be:58:01:
         32:59:fb:5b:3a:f0:ce:d8:62:fb:39:10:14:b3:6e:14:20:58:
         72:e6:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:38 2026 by rpki-client