Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa
File:                     1B010960CD2211ED8A66486BC4F9AE02.roa (raw, json)
Hash identifier:          4TQYkH8AoWjbT+Svxs5AnQ83Cfk6vgNgAFDSksmAXXQ=
Subject key identifier:   5B:7B:92:EB:B5:C6:94:62:5E:C3:1A:2F:8E:FD:AF:CF:22:3A:A2:9F
Certificate issuer:       /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial:       022F
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:12:38 +0000
ROA not before:           Fri 17 Oct 2025 05:38:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150674
IP address blocks:        103.53.156.0/23 maxlen: 24
                          2001:df1:aec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
        Validity
            Not Before: Oct 17 05:38:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41115-8972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:58:18:a7:1d:72:10:c4:26:9c:57:68:54:
                    79:e7:2f:5a:ad:c1:52:14:17:db:78:ac:a8:0b:16:
                    bd:ce:0c:7b:e4:2b:17:9c:c5:70:6a:3d:33:b3:5e:
                    43:ff:02:5b:06:2a:00:14:1d:60:71:03:ad:ce:34:
                    c4:cf:27:3b:2c:e6:05:d9:73:d9:7f:76:b7:95:09:
                    02:ce:b5:2e:17:17:99:05:30:5a:91:b5:fa:2b:1c:
                    39:46:c4:64:43:81:2e:fe:e2:f1:d7:f0:3d:74:a4:
                    fc:d5:ee:78:67:69:cf:1e:de:13:e0:93:a0:7b:30:
                    5e:87:de:9d:7d:c6:05:e7:bc:a6:75:29:a1:19:c8:
                    e9:e2:54:0b:92:7f:f0:41:72:49:c5:ad:f9:e6:f0:
                    40:c3:ed:d0:cb:5c:de:a8:cb:77:f5:17:61:a6:41:
                    41:b8:a5:ee:e2:bd:d9:15:25:60:70:ab:4c:a9:0e:
                    6a:de:9f:66:88:7a:35:4b:3c:da:99:d4:0a:8f:f7:
                    fc:64:44:ef:18:4e:2f:af:49:7f:dc:8e:d5:91:7d:
                    84:f6:a1:7e:05:bc:12:8f:3f:6a:22:f3:ee:c3:be:
                    d7:4c:64:3e:ec:6a:7c:66:f4:5a:15:de:12:d1:a9:
                    ea:61:82:0a:ed:b5:39:df:5f:b3:8d:7c:e1:06:9a:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:92:EB:B5:C6:94:62:5E:C3:1A:2F:8E:FD:AF:CF:22:3A:A2:9F
            X509v3 Authority Key Identifier:
                keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/1B010960CD2211ED8A66486BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.156.0/23
                IPv6:
                  2001:df1:aec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:55:d0:7c:60:45:99:7a:74:a0:59:45:1a:6c:0f:06:6a:
         db:27:a1:c6:74:6c:f7:6a:7a:c5:fd:be:a8:22:cd:69:24:35:
         a9:6c:9d:83:0a:c3:fa:bd:29:cf:14:59:1a:04:85:33:cc:cc:
         6d:97:3d:7b:3c:dc:7a:3a:3e:a7:fb:9b:23:a4:53:22:3e:9d:
         bd:12:e8:67:53:08:74:f6:f7:da:c3:9a:72:aa:6c:87:49:11:
         d3:cd:64:e6:a8:6c:44:4a:ff:1f:83:8b:4c:e4:4c:e1:8d:76:
         8d:50:13:2b:c7:b6:72:e4:92:36:d7:3c:7c:a5:bf:19:0d:d3:
         05:96:71:c1:d1:6f:83:6d:90:ad:4a:17:2d:2a:03:c0:62:d4:
         83:8e:68:2c:76:59:60:e4:d1:52:8a:ef:57:5f:0c:ca:73:a7:
         68:f7:9d:48:d9:3d:e1:ad:e7:96:ab:a5:11:11:30:95:d2:08:
         56:ae:a7:57:0c:9b:66:ce:da:8c:10:f8:5f:e4:6e:9e:53:31:
         d3:55:01:8a:01:50:30:2e:d5:48:a1:3a:5a:9c:7b:2b:2f:b3:
         1f:53:3c:29:5e:b2:94:28:55:17:87:c1:73:21:cb:2b:6d:83:
         12:6c:46:81:7d:24:9d:ea:ab:d1:57:fd:dd:6a:ff:d4:07:05:
         e1:d5:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:50 2026 by rpki-client