Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa
File:                     F4C73FCACD8411EF88CD1464C4F9AE02.roa (raw, json)
Hash identifier:          dvfJXQq1EbLSwTmXVBbNhnU/w2dtpCOPHLknOXmP8c4=
Subject key identifier:   B5:9F:4A:05:EE:07:A7:78:35:15:28:F5:E6:E8:2D:60:4F:C1:04:53
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       069E
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:42:42 +0000
ROA not before:           Mon 26 May 2025 23:53:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.97.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: May 26 23:53:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47a92-fbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:40:d1:a1:1a:0b:32:d6:05:cc:77:78:ad:
                    12:b9:de:0f:31:43:17:eb:0d:bb:c4:26:7a:05:e7:
                    12:b0:4c:65:9b:3f:d5:1e:72:50:59:e5:f4:69:66:
                    df:ad:b7:49:3d:a7:1f:d6:41:6f:fb:e5:43:a8:36:
                    46:37:39:42:a7:83:31:0c:6c:76:8e:d8:75:e8:17:
                    f8:39:32:6b:5b:f5:a4:a9:cc:75:86:ec:aa:7f:bf:
                    73:23:a7:c4:36:88:80:68:1f:6d:e8:4f:1c:e2:02:
                    eb:5f:02:35:04:be:ce:48:eb:a9:fa:62:e7:a4:4e:
                    c6:1f:0a:da:07:99:7f:7a:b6:87:01:cc:02:a2:b2:
                    72:ff:9b:56:fc:ab:7d:2e:b3:95:98:ef:d3:3d:f6:
                    60:9d:e1:47:33:63:5f:ad:79:fc:5c:7c:e2:65:d9:
                    02:e1:68:6a:b2:d5:26:1a:90:5a:34:5d:c4:03:f9:
                    eb:1d:49:8a:4e:af:20:5e:0f:d0:07:6f:dc:ff:28:
                    44:1a:22:dd:0f:4f:0f:88:6f:2f:47:af:1f:25:b9:
                    3c:55:1c:51:e0:67:7b:f0:87:1d:08:98:38:f3:b4:
                    c5:47:0e:61:bb:9b:4f:e4:a6:d0:4f:1a:c8:b4:61:
                    48:19:69:91:47:c6:34:96:df:2d:45:8b:ad:c8:d6:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9F:4A:05:EE:07:A7:78:35:15:28:F5:E6:E8:2D:60:4F:C1:04:53
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:43:42:ef:54:f9:06:99:74:75:0f:a6:6a:20:66:af:9e:04:
         56:35:8d:05:86:7f:60:44:e9:f7:45:7f:a0:f8:dc:92:2a:ff:
         1b:bd:30:4d:ab:00:9b:3c:ba:fe:e9:a3:2a:d9:ed:2a:bf:16:
         55:8c:fd:04:c7:9d:bf:07:79:06:2f:04:00:89:39:db:f5:53:
         31:fc:f4:f5:05:e9:9a:14:57:47:71:42:c3:a0:50:0a:e5:bc:
         a5:ef:16:d2:24:fa:47:2c:7a:2f:80:ec:dd:2a:87:9a:a9:fc:
         de:99:fc:8c:b7:dc:7e:a8:d0:96:d0:61:ff:c4:66:0c:79:2b:
         79:15:4e:e7:fa:f6:d1:5e:b3:91:59:6e:b8:75:14:c9:c5:a3:
         01:89:74:ae:fc:88:ac:b1:36:f3:a8:29:57:55:18:19:a2:be:
         3c:df:58:81:4e:ab:ea:36:d1:24:5b:92:96:da:0d:2c:80:2b:
         5d:86:81:86:e6:57:55:4a:f5:ea:e0:fa:d2:88:38:43:3e:02:
         66:82:31:60:03:2a:4c:7d:e7:4c:90:f6:c4:88:75:63:f5:92:
         79:61:ba:21:6e:aa:b8:03:f3:b4:59:ab:26:7c:a7:f6:58:8b:
         50:0a:a3:46:62:67:ef:71:5e:31:05:67:4e:99:69:09:42:a9:
         d1:0c:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:59 2026 by rpki-client