Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
File:                     D249CE5EFE8911EBA7BEB564C4F9AE02.roa (raw, json)
Hash identifier:          HxGVgQ5mQeFQPmOLe2NezXsD0aWH7y416+Q0f4AH5ao=
Subject key identifier:   7F:45:AF:6F:B5:B5:F9:93:75:D4:FD:A4:17:BF:35:B9:F9:A2:54:A3
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       05C5
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:46:41 +0000
ROA not before:           Fri 17 Oct 2025 01:34:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136427
IP address blocks:        103.155.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Oct 17 01:34:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45f61-1195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:a3:c2:b4:ee:8d:0d:98:65:41:e5:91:1c:
                    a7:2c:f7:52:ee:32:ac:24:b7:ac:c8:63:ef:d6:21:
                    c2:d8:d9:96:ba:b3:ae:13:7e:b2:1c:b5:3e:b1:00:
                    d4:96:25:6a:21:e9:3d:f5:e0:9e:70:75:7d:1f:77:
                    7f:8a:80:24:dc:03:7d:f2:c2:02:2f:82:69:2c:45:
                    94:62:94:fa:76:fd:72:1f:18:1a:a2:6e:f6:db:9c:
                    0a:10:c3:8d:d0:c9:59:8f:0c:d8:f9:93:3c:b6:09:
                    31:24:10:e0:3d:ce:b0:42:72:7f:63:9f:10:cc:b7:
                    53:bf:50:43:ec:56:4c:68:22:fc:47:be:6e:bc:af:
                    a8:e8:e0:80:55:47:10:e3:6e:41:52:d8:24:42:7e:
                    4e:4c:f4:db:3c:43:a9:3e:ad:4c:63:ef:1a:fa:96:
                    ee:05:5d:a7:62:e7:5f:0c:5d:3f:02:5f:36:96:69:
                    96:b5:61:cf:f7:5a:9c:34:a2:e9:aa:94:fd:58:24:
                    ae:c6:a1:3c:36:a5:89:a4:ca:1c:7b:43:bb:28:0e:
                    98:ec:55:bf:c9:94:e3:fe:50:70:30:bc:1b:f9:a6:
                    51:8c:6e:05:1c:72:45:53:c9:90:90:fd:66:62:08:
                    28:44:78:40:ea:93:5c:f3:f5:01:ce:7c:5f:b7:9e:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:AF:6F:B5:B5:F9:93:75:D4:FD:A4:17:BF:35:B9:F9:A2:54:A3
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:be:51:19:77:a9:5a:0e:f7:21:9b:71:cf:81:47:80:ce:
         1f:04:e5:89:64:ad:05:ce:87:c7:91:ec:6c:25:e8:67:95:1d:
         99:17:8a:5d:7a:a8:89:64:b0:aa:27:4a:a6:23:bd:56:b2:11:
         ff:df:3b:8f:e3:b8:34:a1:9c:da:fb:3b:92:98:32:a4:28:cf:
         88:56:f6:24:fc:3d:3f:32:77:41:4f:b5:5b:17:24:aa:5e:df:
         04:0f:3e:10:19:a3:85:db:14:dc:ff:aa:48:55:fa:e9:2f:9c:
         e6:a7:d9:a7:78:c7:94:8c:d4:8c:91:75:75:08:5f:85:59:fd:
         9d:51:9f:02:da:32:54:29:65:e9:4f:4b:1c:9b:4f:d4:7b:2b:
         c6:f9:da:27:f5:34:6c:3f:94:fd:08:c8:da:8c:f0:e8:24:00:
         08:e1:ae:d3:4c:ea:17:10:1e:63:b3:a0:cc:f8:40:97:86:33:
         70:9d:bd:9d:cf:9a:92:21:44:85:82:d9:5d:7a:ea:ce:12:05:
         ea:8e:f2:16:95:25:6d:5a:94:2c:78:e2:77:a1:dc:0c:1f:7d:
         76:78:5b:15:dd:87:da:90:df:40:79:4d:1f:65:ac:9d:be:4a:
         fd:45:60:2d:cb:f2:d2:1d:0a:a4:13:ba:93:8b:04:0b:0d:60:
         47:21:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:27 2026 by rpki-client