Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/E5ADB5CAF73A11EAB074A016C4F9AE02.roa
File:                     E5ADB5CAF73A11EAB074A016C4F9AE02.roa (raw, json)
Hash identifier:          /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=
Subject key identifier:   2E:2C:CF:B2:D1:40:1F:AC:C5:2B:E2:62:6C:74:0C:AF:92:CF:B5:D7
Certificate issuer:       /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
Certificate serial:       086E
Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/E5ADB5CAF73A11EAB074A016C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:22:44 +0000
ROA not before:           Tue 04 Nov 2025 21:10:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141178
IP address blocks:        103.155.174.0/23 maxlen: 23
                          103.155.174.0/24 maxlen: 24
                          103.155.175.0/24 maxlen: 24
                          2001:df4:d480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl
                          rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
        Validity
            Not Before: Nov  4 21:10:36 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42f93-c478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:6d:5e:e7:19:ef:1e:f4:13:3c:92:b9:3b:
                    47:10:06:a8:71:73:f1:b8:a7:28:a9:de:c9:3a:04:
                    c1:d8:57:12:78:5a:84:1a:2c:9b:1e:f3:7b:c8:82:
                    36:e6:46:ef:f3:39:08:a8:6e:f8:45:d3:d8:37:07:
                    ac:10:cd:2c:09:6e:1c:a9:6a:9d:cb:75:89:96:8d:
                    90:a2:e7:45:d1:74:45:b7:64:d8:d7:85:f0:4e:6f:
                    4e:9c:0b:53:7e:e9:35:a1:44:bd:72:46:d2:1e:41:
                    c1:de:bb:7e:64:f6:e4:f0:08:6f:18:93:c4:6a:e7:
                    e5:62:bc:ce:0f:e4:0f:c6:6a:7e:b6:eb:54:2c:52:
                    81:48:d5:63:05:60:26:83:a0:93:79:90:b9:b1:2b:
                    30:84:2e:c0:49:b1:19:38:19:e3:69:89:d1:51:8b:
                    d1:e5:e0:8b:21:10:25:94:53:e8:ea:16:c5:02:e8:
                    14:03:a0:8c:01:6e:8a:e7:b4:b0:6a:57:c2:d1:3a:
                    b2:94:65:87:f8:54:f3:04:1f:4f:45:b5:b1:8c:b8:
                    51:07:36:f4:0b:79:c3:ac:d0:9f:1c:f4:65:00:b1:
                    69:c1:e8:05:59:fb:b0:67:23:15:45:89:51:78:b6:
                    67:3a:ee:b6:65:4e:2d:d6:f0:19:54:e3:c7:0e:d6:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2C:CF:B2:D1:40:1F:AC:C5:2B:E2:62:6C:74:0C:AF:92:CF:B5:D7
            X509v3 Authority Key Identifier:
                keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/E5ADB5CAF73A11EAB074A016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.174.0/23
                IPv6:
                  2001:df4:d480::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:23:d4:28:bf:99:6f:0b:3a:06:f5:c7:ad:3c:df:af:e1:
         2d:07:51:fc:c7:bc:45:5f:02:a5:62:4f:a9:e9:a2:ca:a9:6b:
         20:72:d7:f6:57:6c:45:21:1b:08:bc:8c:44:1f:ab:60:6c:cb:
         73:75:fa:fb:94:ec:35:96:42:a0:1c:36:83:ec:b6:c0:67:4e:
         0d:be:76:b3:fa:ce:92:ce:76:a2:83:5b:95:a9:e3:0a:67:ce:
         08:a9:65:a0:fe:ec:38:d1:d9:aa:d5:3d:db:07:56:f0:97:57:
         fc:8a:0c:b9:88:c7:3f:df:dc:2d:a6:f0:65:6d:c5:08:4e:f5:
         d5:3a:3c:fd:de:38:9a:7c:e1:a8:72:ab:e3:1b:84:e4:b7:b7:
         a8:a7:13:41:0c:9c:b5:36:2b:ae:00:e2:3a:49:5b:df:d8:9f:
         89:10:d0:73:c6:58:8b:4f:63:1a:45:00:7b:2f:0d:d1:9b:77:
         df:42:db:ef:db:76:33:8f:6c:b5:1f:ff:0c:13:dd:2f:6e:87:
         a6:70:f1:75:e3:5b:d4:8d:fd:c2:cf:49:02:62:aa:20:aa:53:
         97:e6:55:0f:f3:9c:f0:0a:99:73:01:83:f7:54:f7:19:4d:e9:
         31:1d:b4:98:04:17:be:7b:39:0d:c3:19:b4:65:06:ac:38:69:
         f3:a8:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:53 2026 by rpki-client