Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/154E7E02762211EBA80A6D61C4F9AE02.roa
File:                     154E7E02762211EBA80A6D61C4F9AE02.roa (raw, json)
Hash identifier:          C0ESLiEnAX5h0tC7phozNCWEJw6YCgeY9oR14gnaKkU=
Subject key identifier:   0C:B6:A9:F9:E9:01:85:05:57:C8:E6:42:F9:31:84:15:D1:DC:9A:D6
Certificate issuer:       /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Certificate serial:       0717
Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/154E7E02762211EBA80A6D61C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:42:32 +0000
ROA not before:           Wed 04 Jun 2025 22:21:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45780
IP address blocks:        103.90.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
                          rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
        Validity
            Not Before: Jun  4 22:21:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fbf7-2a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:36:7b:02:be:b8:f4:73:71:c5:1f:fe:2d:
                    52:c7:44:18:ed:e6:27:e9:17:92:88:87:b1:b3:d2:
                    7f:9a:1d:0c:69:66:54:32:97:df:5b:49:af:c6:ec:
                    ad:aa:19:66:4c:fb:38:bc:1d:26:ed:a1:00:5b:bc:
                    f5:07:d0:6f:9d:73:e2:a6:72:eb:8e:57:a9:43:c0:
                    4e:d2:de:d2:59:51:a7:5a:35:f8:73:22:77:3b:2a:
                    06:ce:3c:e3:d7:6c:c9:d6:4b:ad:f0:c4:b6:1c:a8:
                    47:39:0a:5a:7f:e7:38:e0:42:5d:f6:dc:71:5c:91:
                    b9:34:91:7b:6f:b6:8a:80:54:bd:4b:e6:1a:2a:25:
                    e0:a6:7c:43:47:cf:49:5c:eb:85:8a:8e:21:d5:dc:
                    a5:58:50:8a:11:78:7b:1c:d2:23:f5:e6:c1:11:98:
                    8a:64:bf:df:50:4a:3c:39:d8:06:47:10:c3:db:b6:
                    8d:b6:ec:b5:1f:35:29:e2:2b:b8:0f:cb:be:98:53:
                    b1:c3:3f:fc:e8:7f:0e:5f:15:0b:cf:df:47:2a:39:
                    26:df:8d:25:75:3b:45:8e:eb:ca:9d:e9:18:86:b4:
                    35:97:95:58:18:9d:74:af:09:24:df:d5:d7:3b:98:
                    cb:1a:ee:4c:71:d0:3b:19:ef:6b:34:6b:fd:d3:5f:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:A9:F9:E9:01:85:05:57:C8:E6:42:F9:31:84:15:D1:DC:9A:D6
            X509v3 Authority Key Identifier:
                keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/154E7E02762211EBA80A6D61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:a5:51:2e:ef:bb:35:2b:23:cf:52:5b:ce:07:21:03:04:63:
         6b:32:79:bc:2f:d9:aa:79:02:b6:fe:48:94:f7:ca:dd:c2:13:
         7c:bf:53:1f:0d:4e:e7:ea:6b:0b:ef:1c:31:cd:d2:51:1b:f4:
         af:10:a1:b5:9d:41:27:0c:61:69:87:3d:fa:fa:27:3a:43:20:
         91:35:b6:39:79:48:68:5a:7e:41:72:3b:c0:2a:21:50:bc:cd:
         25:cb:b5:09:0b:6b:bc:a2:15:0e:c2:9b:42:f4:2f:ae:cd:d2:
         27:0b:81:a4:f4:b3:ec:c3:bc:f6:75:e1:7c:82:bc:b7:12:65:
         08:71:88:8c:95:40:2e:e3:2f:b7:0f:90:69:89:48:ac:68:02:
         1b:60:8d:e5:6c:79:ff:26:e1:f4:91:64:74:76:f3:03:72:dd:
         31:42:d6:3e:c9:5a:b8:11:ce:be:d8:55:c8:be:d1:64:70:e8:
         63:84:40:ef:62:e5:63:f8:7b:85:7c:57:a9:00:a3:46:e8:fc:
         fc:40:04:ea:ab:9b:01:20:86:75:a3:c3:d9:8e:9f:b9:f4:cf:
         ec:4e:9f:93:4f:4d:e3:57:6a:36:98:7e:e3:75:b5:c2:62:99:
         d4:9b:4d:d4:9a:fb:99:7f:76:3a:10:04:18:e0:ed:2b:d0:47:
         38:66:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:56 2026 by rpki-client