Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa
File:                     221560BEAF3711E98F7FF448C4F9AE02.roa (raw, json)
Hash identifier:          4YOqsH9CEAXmrPqX2m0DJ1akKt/5vl2kzgH56yvwZsA=
Subject key identifier:   67:26:53:53:3F:D2:B0:91:CB:2E:16:30:25:DF:31:5A:47:DD:DC:FF
Certificate issuer:       /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial:       189A
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:55:32 +0000
ROA not before:           Mon 08 Dec 2025 16:25:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137042
IP address blocks:        103.102.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
                          rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6298 (0x189a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
        Validity
            Not Before: Dec  8 16:25:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45364-6a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:05:25:4e:11:2b:4e:42:59:02:1c:bd:f9:
                    eb:7a:37:ce:18:5e:ad:4b:e9:55:df:7a:68:07:d4:
                    2a:b0:8a:6c:1d:eb:8e:90:78:1a:24:b1:6c:14:c8:
                    c6:b8:9c:1d:d8:d8:9c:0f:eb:95:5c:03:ac:3c:2a:
                    7a:fb:e9:14:1f:6e:49:ed:72:89:a2:4b:46:c4:4a:
                    5f:e0:1f:7c:a6:74:48:e9:be:94:26:ca:6f:3e:21:
                    25:b7:49:f7:a9:fb:00:d4:59:19:45:8a:a8:76:77:
                    7d:60:c5:d0:7e:80:35:1b:07:32:eb:f0:78:90:a5:
                    10:68:b0:7d:22:83:ea:0e:29:89:fc:07:39:93:62:
                    ae:c1:e7:58:43:b4:05:b9:15:73:b6:37:8e:7d:9c:
                    70:41:01:71:49:fa:1f:36:0a:df:39:8e:6e:6f:8a:
                    28:93:69:fd:c6:af:8f:2f:13:ab:61:c4:62:d8:e1:
                    91:a2:30:ba:39:97:49:94:69:dd:37:1e:7e:89:d3:
                    89:b1:80:af:aa:17:9f:44:1f:c6:ee:1c:8a:ca:82:
                    77:f7:91:ee:fa:1e:dd:d2:b4:35:46:eb:79:06:10:
                    e2:df:a9:f3:9b:eb:59:3a:a3:af:45:c7:a0:5f:32:
                    14:ee:10:f2:18:f2:49:0c:e3:86:10:a1:5a:03:09:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:53:53:3F:D2:B0:91:CB:2E:16:30:25:DF:31:5A:47:DD:DC:FF
            X509v3 Authority Key Identifier:
                keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:23:7b:61:f2:d8:0f:73:2a:1f:eb:d9:0f:9d:49:04:ac:
         54:b5:78:29:b0:f3:b0:18:83:90:9f:b2:6e:b8:e6:c1:73:1f:
         8f:20:93:01:1c:aa:2f:84:8e:04:f9:e2:c6:34:67:5a:e2:ed:
         db:e3:0a:56:22:93:a1:a1:a3:f9:0a:39:96:5e:de:e9:89:18:
         8a:bb:14:ea:e5:30:ae:bf:53:74:9a:71:8b:50:7c:6c:91:1d:
         23:28:37:5e:17:b7:0f:b3:9e:3d:89:f3:20:db:1a:7d:39:5d:
         b1:64:97:9e:2c:a2:5b:d2:87:9b:06:56:23:bf:5e:26:54:76:
         c4:a1:24:c1:44:ad:74:4f:a8:fd:c7:d9:61:1d:e3:9d:2d:1a:
         c1:c4:1f:eb:53:86:8b:bc:71:2a:58:24:a7:43:48:71:bf:b5:
         9b:18:6d:20:8f:32:dd:de:ba:ff:22:d7:d1:0a:03:88:b4:b5:
         7b:bd:e8:8d:02:cd:d1:8a:2b:85:31:10:c2:4a:b5:22:bd:cf:
         84:f9:43:49:61:06:61:ff:df:95:18:6c:79:29:47:a0:dc:7a:
         41:22:b3:79:c4:63:80:d3:05:9b:b2:35:33:f2:e1:73:53:83:
         96:a6:53:71:c1:43:03:ce:72:76:d0:2b:e4:39:b0:e8:2b:f5:
         a7:5b:d3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:31 2026 by rpki-client