Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa
File:                     F559B7E2CD8411EF88CD1464C4F9AE02.roa (raw, json)
Hash identifier:          aRUQXx0V0GLFzvhmgfrBz3H8fjolbBpOYARYMTl5fCw=
Subject key identifier:   09:12:DC:F7:11:29:F0:28:2E:C2:EC:34:F5:F3:5F:1B:F0:A8:9D:B3
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       069F
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:42:43 +0000
ROA not before:           Mon 26 May 2025 23:54:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23532
IP address blocks:        103.97.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: May 26 23:54:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47a93-2da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:4d:b4:d5:ff:47:c7:d0:2a:84:b7:57:43:
                    fe:6f:0f:36:f1:ca:3b:40:65:84:be:87:e4:3b:2d:
                    e1:e3:c0:b7:c1:e6:ea:f2:6c:4c:92:47:72:51:e3:
                    42:9c:8a:89:f6:bf:b9:a4:3e:16:61:bc:1f:6f:33:
                    75:b1:ad:69:34:00:78:12:32:8f:d9:76:29:1b:cc:
                    51:0e:4e:5a:cc:3f:b1:ff:f9:8e:4d:9e:7f:c1:1a:
                    34:b8:8f:bc:74:cc:e4:32:04:07:fb:4d:0c:02:a5:
                    83:21:bb:40:73:a0:29:3f:74:0a:8b:5f:fd:d8:74:
                    eb:32:d7:bc:08:22:f9:81:e0:b3:71:e3:ed:6d:c3:
                    3c:25:2f:cb:1c:9a:86:78:20:da:9a:ca:72:b6:44:
                    e2:f4:37:d8:db:38:5e:df:f5:cb:45:c7:e3:f1:32:
                    98:99:27:c1:1f:21:87:d7:c4:94:86:66:90:e0:49:
                    41:64:b9:d6:d2:d3:b6:b8:32:7e:1d:c9:88:ef:75:
                    0b:e1:5f:d1:f8:a9:ce:49:92:ac:ed:29:f6:09:3c:
                    09:90:a0:82:01:14:0c:80:ab:55:3b:f1:54:ae:31:
                    82:4f:ef:29:25:e0:88:78:27:04:05:38:61:69:32:
                    c1:af:a3:f7:5a:df:07:8d:f6:63:4c:6a:92:75:36:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:DC:F7:11:29:F0:28:2E:C2:EC:34:F5:F3:5F:1B:F0:A8:9D:B3
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:77:d7:35:ad:e6:4b:13:5c:c3:a7:98:5e:d4:20:c4:a8:
         71:b2:a3:f9:17:a4:00:c3:6d:1e:dc:a3:cf:9f:bd:ef:c7:cd:
         9c:2d:f0:37:04:77:1c:9e:0d:71:16:c0:1f:c7:d9:1f:4f:03:
         92:50:f4:19:74:27:7f:88:79:78:56:18:45:89:3f:3b:b0:e1:
         dd:2c:29:b8:ae:f4:0a:9c:00:de:c1:b6:cc:3d:38:d5:98:e5:
         9d:3d:2c:a9:ad:8a:d7:22:c0:65:1e:99:83:24:ff:10:c2:09:
         e8:73:f3:1d:18:23:8d:0f:f5:3a:a0:da:0f:80:ac:56:12:fd:
         61:23:43:1f:16:98:16:d5:28:51:a9:5e:4d:5c:cc:46:34:ff:
         4a:71:11:c2:eb:f9:99:e4:95:9c:78:a5:7f:f4:5a:b5:69:b9:
         6f:09:2b:5d:53:6d:70:59:df:44:e4:a2:78:4a:4b:f2:41:0b:
         51:58:89:b5:ce:98:d5:3c:80:41:1c:f8:95:1c:42:dc:48:ca:
         9c:d8:66:1a:18:33:c0:9e:1c:a2:e6:b0:0b:77:62:12:9b:b5:
         90:87:cc:fe:25:d1:99:97:db:7e:4f:2c:61:35:62:6e:5d:09:
         b6:60:f2:31:ff:60:33:72:32:9f:db:71:a5:44:9b:52:8c:70:
         86:bc:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:37 2026 by rpki-client