Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
File:                     1069D50EB54B11F092E79246C4F9AE02.roa (raw, json)
Hash identifier:          sMAmYlXlaGfYX483zQnKNNyggh6fdl5j3X0veZpEvVk=
Subject key identifier:   5B:29:CC:DD:C6:BE:6D:1C:3F:FF:D2:FF:CE:79:9F:48:2B:29:DD:5D
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       086A
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:51:59 +0000
ROA not before:           Thu 30 Oct 2025 04:44:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151622
IP address blocks:        103.8.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Oct 30 04:44:05 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4528f-f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:6d:b4:08:0a:b9:dd:6b:c3:a8:02:8b:2a:
                    fd:6b:25:ae:3d:99:b7:86:90:ee:ed:22:85:bb:cd:
                    68:71:90:b8:bd:18:aa:14:00:9e:25:73:ac:eb:0d:
                    2b:f0:88:e6:88:d7:8c:e0:a1:dc:7f:7a:2e:3e:53:
                    f4:5c:b9:90:80:2e:97:f5:bc:35:12:8c:93:7f:ac:
                    0d:25:30:ce:94:88:28:27:bd:6d:4a:69:02:1c:16:
                    4e:60:b3:67:91:75:3c:4b:ca:78:5b:3d:2c:21:37:
                    cb:5d:c8:b4:0c:6c:1c:db:a0:cf:67:79:4a:57:70:
                    07:7f:c2:d3:c5:02:d4:e5:b1:c9:28:48:ab:5d:87:
                    64:84:79:50:32:71:c2:ce:65:d3:fd:b0:1a:73:f6:
                    50:75:32:dd:ad:36:40:25:9c:dc:e8:ea:c5:11:56:
                    ff:89:4a:ae:8a:fa:99:57:4b:27:19:14:a3:75:74:
                    ed:c9:fd:7d:96:3c:0c:af:e5:c3:21:79:7a:60:29:
                    ce:c0:3c:15:47:8d:2e:30:0c:0c:10:f9:41:72:a9:
                    ac:8e:58:52:4b:0b:d0:ad:e0:24:6a:cf:72:57:30:
                    01:80:b1:3c:1a:51:e5:dc:a9:6e:09:e9:08:5e:b3:
                    f7:3f:8c:37:17:84:d4:8c:06:0b:1b:ad:3e:65:8e:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:29:CC:DD:C6:BE:6D:1C:3F:FF:D2:FF:CE:79:9F:48:2B:29:DD:5D
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:3c:2a:f7:1b:88:9a:d8:86:56:4d:1a:18:de:31:26:e3:
         af:b8:18:6c:5d:a0:6f:3d:90:96:e7:8f:87:13:1a:44:e4:54:
         0c:85:5d:db:04:44:11:36:6c:43:16:33:30:3d:75:c9:41:67:
         bd:a5:84:fe:9c:b9:6a:e4:48:1c:c0:4f:a4:f6:62:7f:ea:e0:
         d1:bb:67:2d:ba:88:9d:92:cc:1e:85:ed:ba:ca:82:a0:1e:fa:
         42:9c:30:bf:c4:e7:21:88:66:4b:ea:d2:8c:4c:ca:6f:d4:4f:
         e1:22:71:f2:07:0e:72:77:35:85:c9:9d:b0:4e:b3:33:5c:79:
         5d:04:41:a8:e6:0c:81:78:b5:08:85:5d:1e:9c:b7:e9:e1:dc:
         8d:5b:72:dd:f7:23:ee:ad:95:48:74:34:16:f7:cf:34:4a:f6:
         0a:fc:a4:b8:ef:b7:70:4a:43:ee:52:eb:d6:a2:50:f2:01:09:
         97:f7:1b:9b:6f:fb:39:f2:8c:11:ce:d5:5e:4c:c6:30:da:24:
         ff:5f:6d:7a:5c:c7:57:c3:94:6f:af:ec:e8:25:24:ca:d9:01:
         82:09:7f:f1:a5:31:18:42:dd:bf:03:30:fb:c4:29:76:be:3d:
         e0:8f:f1:77:8e:34:35:40:9f:97:1b:47:d7:a7:2b:73:5e:5d:
         bc:45:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:28 2026 by rpki-client