Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa
File:                     5A67D452A12F11EF8CA59833C4F9AE02.roa (raw, json)
Hash identifier:          TVZEMQkioXWbGgb416Q+WbjBATZ2qWj4T5UhR1U0HoA=
Subject key identifier:   1D:AA:2A:CE:71:55:D5:2B:A3:80:98:BB:E1:01:37:7A:10:24:04:54
Certificate issuer:       /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial:       0596
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:39 +0000
ROA not before:           Tue 16 Dec 2025 23:19:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     400342
IP address blocks:        103.174.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
                          rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
        Validity
            Not Before: Dec 16 23:19:33 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a473c3-5677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:25:1b:6c:6b:32:4c:00:c9:83:2d:31:e5:
                    1d:72:ed:05:d3:e4:18:f9:c7:9a:69:f4:5b:b2:2b:
                    aa:d3:ae:cb:72:b4:5f:ee:14:f6:69:f1:7e:38:d9:
                    89:86:81:8b:24:bf:ce:8c:1e:65:40:d4:99:e4:3a:
                    ff:83:83:64:f9:8b:51:6f:35:5b:a9:e4:d0:bb:35:
                    7a:7b:c5:39:52:61:b9:4c:52:97:39:aa:3f:0f:73:
                    c0:23:e4:25:68:11:ce:78:c0:db:05:bc:6d:bb:df:
                    f0:59:f4:18:95:e9:2c:c6:48:c2:70:e2:2f:a0:8b:
                    06:51:f2:e7:22:ec:10:a9:13:e1:43:b3:e2:5a:7e:
                    de:2e:01:ff:b1:51:ec:71:31:90:d6:53:ee:ba:6b:
                    80:b5:ca:32:e9:c0:82:03:49:aa:ee:f2:b5:87:e1:
                    c3:ae:ea:ea:86:65:f5:92:aa:e5:ad:91:1a:1b:d7:
                    8c:48:3e:5c:bd:f2:c7:7e:63:cd:c5:95:cf:b3:1c:
                    c0:27:45:ec:15:4c:c0:8a:46:ac:a8:fe:de:5e:af:
                    ac:4c:89:85:0d:02:61:7c:bd:17:4e:f8:17:2c:b6:
                    5b:7a:0c:90:b9:b9:91:85:b4:a7:f4:22:5e:22:86:
                    61:c2:c7:74:1c:02:91:1d:79:7f:d1:98:68:26:53:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AA:2A:CE:71:55:D5:2B:A3:80:98:BB:E1:01:37:7A:10:24:04:54
            X509v3 Authority Key Identifier:
                keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:c5:30:7c:16:a1:92:05:2b:16:a4:9e:fa:a7:37:5f:cf:c9:
         16:54:13:cd:34:33:b8:0b:2a:f5:db:94:22:d7:79:8b:8f:77:
         48:90:11:03:7b:ba:f9:59:3f:1f:19:c0:50:e3:8c:ba:42:06:
         35:04:78:8c:31:cb:48:5b:90:77:16:f6:67:5b:84:19:1f:a6:
         3b:54:2a:77:3b:82:b2:30:c9:03:b9:b8:ba:13:9b:65:f9:c6:
         57:d7:13:68:3d:a1:44:6b:d3:af:42:ce:80:a8:03:26:7f:d4:
         eb:86:03:b3:e6:af:83:cc:5e:f6:6a:bf:5c:78:c5:5d:7c:77:
         b1:b6:16:c4:aa:c8:c1:3a:5a:76:d8:f7:53:19:79:78:64:32:
         7f:12:a6:7a:db:ad:11:68:61:e2:93:01:6b:30:d1:01:f2:7d:
         1e:eb:97:7d:99:7a:a8:18:7d:b6:1e:17:19:05:d0:c1:89:c4:
         d3:28:74:3a:0e:62:8f:13:4e:08:b7:5e:21:b3:eb:e3:fd:76:
         61:34:07:70:7e:1d:a4:49:1d:3d:29:03:f1:42:71:6e:66:71:
         34:47:b3:28:ad:06:ba:7c:c4:33:76:35:8d:6c:be:66:27:31:
         09:f3:ec:a5:f5:19:fc:85:cd:5c:2f:ff:56:cd:75:5f:7b:23:
         b6:4d:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:56 2026 by rpki-client