Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa
File:                     F44E1EECCD8411EF88CD1464C4F9AE02.roa (raw, json)
Hash identifier:          LNAhRYJg3M12wy9+EdbC2gimkX7SG11fYwLAn51ZszY=
Subject key identifier:   89:8C:C1:E0:64:18:F8:5A:13:44:26:10:68:B7:13:89:29:CE:7A:F4
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       069C
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:42:41 +0000
ROA not before:           Mon 26 May 2025 23:53:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10103
IP address blocks:        103.97.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: May 26 23:53:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47a91-6888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:5d:d2:05:57:fc:5e:89:f5:ec:62:62:7b:
                    e8:3e:f5:82:d2:ea:97:a9:5d:2e:68:de:9d:53:d4:
                    52:96:15:30:f8:d8:d4:13:91:ad:5c:51:e5:da:4a:
                    fd:cd:57:d4:43:5a:51:5f:99:7e:1b:1e:9f:c7:85:
                    26:06:1f:c7:77:7c:db:2f:c5:86:98:5b:50:a2:64:
                    34:53:5b:61:37:e5:9f:d9:7a:2d:10:2d:8a:75:93:
                    af:01:2f:a0:d0:5b:8c:3d:2e:fb:ed:81:75:86:e7:
                    4c:6c:2f:6b:bc:f8:e2:13:e1:be:27:32:c6:07:dd:
                    ee:19:8c:57:fe:05:3d:50:4e:10:22:2c:04:e4:4b:
                    05:73:8f:a7:6a:cc:b9:22:e5:44:54:b5:b5:be:27:
                    f1:15:8c:d6:40:e1:a4:1c:13:67:23:9a:d1:db:bb:
                    0b:11:e3:a5:d8:55:c3:f8:b8:ff:7f:29:6b:63:3f:
                    9e:26:fc:32:46:f6:17:7a:53:23:66:21:f5:42:21:
                    08:8f:22:68:2a:0d:c0:43:fc:a8:1b:84:39:9c:ad:
                    ca:b1:61:f0:8c:18:1e:4f:a1:be:07:e6:9b:d9:c7:
                    7d:15:03:d7:6d:e0:5c:4f:17:27:47:92:79:ef:f7:
                    a7:9d:d8:3c:67:52:c7:05:1f:e7:37:4e:79:3d:02:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:C1:E0:64:18:F8:5A:13:44:26:10:68:B7:13:89:29:CE:7A:F4
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f3:12:23:42:5c:89:bc:f5:36:a2:56:f8:63:00:8b:5e:7a:
         94:00:28:3d:f3:e0:c3:5f:26:9c:14:a2:a2:d1:34:0c:f7:86:
         78:70:ff:c7:3a:3f:95:b3:51:12:3b:75:6d:36:b9:7e:30:b6:
         ef:b2:0b:b5:65:3e:f5:ae:d0:48:1f:16:29:99:28:a3:86:35:
         87:60:a4:5b:00:95:e4:e9:bb:ed:7a:57:da:c8:cd:5c:45:93:
         2b:4d:b0:4e:60:0c:25:c0:76:7a:8d:2d:fa:b5:19:78:fa:39:
         0f:97:0b:c8:7e:1f:73:3e:b1:53:8a:da:c0:ce:ae:2a:4b:20:
         db:04:b9:e2:26:83:0d:7e:84:8a:24:71:22:91:ff:3e:18:81:
         ce:a4:5a:c4:d0:28:a9:7f:fa:2d:02:4d:8f:9d:46:c7:f0:2a:
         20:a1:64:ae:46:74:b0:49:0a:52:02:1a:1a:da:a8:ac:7f:15:
         c9:36:1f:7e:58:b1:16:04:42:e6:4a:15:46:7e:53:a0:f9:08:
         e3:72:73:40:a9:3a:81:b0:81:57:15:b9:c1:07:d6:b3:b2:33:
         ca:0d:13:ca:6b:c6:98:fa:e0:21:11:eb:11:62:77:48:39:10:
         dc:fc:e7:f6:1c:4e:31:5d:9b:cf:63:40:d0:90:aa:ac:9d:61:
         17:4c:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:19 2026 by rpki-client