Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
File:                     02817064DCD811F0A33153DF516F56BC.roa (raw, json)
Hash identifier:          A0XhDPuStyqiQYD+/HDNtMid0Z+VUqgdpsSkPHtmU0U=
Subject key identifier:   4D:CE:11:ED:45:6A:7A:BB:56:82:CC:A3:D7:08:7C:62:94:C5:D7:85
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       05A5
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
Signing time:             Sun 01 Mar 2026 18:04:02 +0000
ROA not before:           Fri 19 Dec 2025 12:42:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132210
IP address blocks:        103.101.236.0/23 maxlen: 23
                          103.101.236.0/24 maxlen: 24
                          103.101.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
        Validity
            Not Before: Dec 19 12:42:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47f92-dd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:2c:d9:6b:c4:26:50:04:f2:0c:2b:7f:46:
                    2a:19:f2:df:f2:d9:9c:1f:23:1b:8d:85:28:d4:bd:
                    f5:77:4a:ca:13:a0:8d:a4:ac:19:69:b9:ea:36:26:
                    ba:94:72:b0:dd:e1:53:55:3d:82:47:93:f1:a8:ab:
                    b1:c5:02:70:6e:44:eb:23:3c:db:71:1a:f4:82:e3:
                    aa:e6:93:a8:40:7d:6e:36:2d:d8:4f:ad:51:6a:88:
                    24:94:2f:82:da:ae:72:27:58:04:42:6d:02:20:66:
                    c4:aa:3a:da:74:39:63:07:d8:71:38:15:a2:3c:6e:
                    0c:95:fa:a9:2f:33:cd:e0:23:29:11:95:d5:63:0c:
                    bc:fa:21:be:b3:db:2e:a7:44:25:d4:59:5a:91:a6:
                    6e:92:b7:e8:50:15:e4:5c:be:2a:15:92:75:03:d2:
                    d5:32:fd:23:da:87:9c:36:db:d8:55:4d:8b:3a:4a:
                    62:d7:8a:aa:09:27:4b:3c:1e:87:d1:36:2b:ee:5a:
                    99:44:b2:73:82:f9:3f:7c:77:20:63:db:cf:bf:0e:
                    a4:5a:c6:6c:b6:b5:1b:43:62:b3:31:e5:c1:92:01:
                    0f:ad:5c:d8:40:f1:5b:fe:86:8b:32:10:d3:b4:80:
                    91:e3:56:b3:71:9f:c2:02:6c:8b:6f:71:53:70:cd:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:11:ED:45:6A:7A:BB:56:82:CC:A3:D7:08:7C:62:94:C5:D7:85
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:61:32:0f:fb:09:8c:c3:43:4c:2a:37:79:f0:fd:9f:67:ba:
         90:9b:e5:79:ac:08:cd:8e:15:8c:64:74:e2:c7:f4:62:64:43:
         67:f2:3c:21:67:78:64:e0:bf:50:15:65:c9:ec:1a:83:64:dc:
         cb:b4:d0:5f:e6:49:fc:00:8e:6a:9b:41:29:b0:a3:9a:0a:28:
         46:da:5f:97:68:3c:e3:22:f8:d2:9a:cd:4f:87:6c:f5:ce:40:
         16:cd:10:74:ca:69:c0:35:27:23:90:a1:93:f5:42:20:18:96:
         07:7c:fe:e6:4f:9e:aa:02:66:05:05:f5:2d:f0:6f:ab:04:de:
         13:85:c5:58:3f:c0:bd:0c:d6:67:e5:2d:64:03:67:72:fa:28:
         f1:4f:94:71:ef:4f:6b:70:4f:08:ff:4c:16:69:99:4b:71:a4:
         2d:bb:2e:1a:e6:23:0a:9a:8a:c9:94:e9:2a:3a:d1:58:71:05:
         8a:16:bf:40:9f:c1:39:25:d1:f0:3f:12:f4:08:e3:cf:5e:ec:
         ad:45:1a:0d:f7:51:6e:1a:ea:ab:cb:53:58:c6:16:55:07:65:
         0e:42:3f:72:79:48:89:71:fe:3d:c9:0a:14:94:a0:bf:61:8b:
         45:18:07:02:bf:ec:29:c0:04:44:0f:83:99:49:3d:d9:19:d9:
         d5:fc:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:01 2026 by rpki-client