Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
File:                     517F49AA822611EB8990276EC4F9AE02.roa (raw, json)
Hash identifier:          RrZk+p0zNBNmCSRZQeBU2yPZoYmWPxbT7RETjVLD76E=
Subject key identifier:   DC:54:4A:CE:92:E3:2A:0B:02:87:71:2B:34:A5:33:27:8F:5A:09:4C
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       06FD
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:44:01 +0000
ROA not before:           Thu 20 Mar 2025 22:33:38 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137967
IP address blocks:        103.163.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar 20 22:33:38 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a40a61-b960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:85:05:f0:8b:2d:aa:e9:5d:e9:46:5b:23:
                    63:3c:72:f4:22:96:99:d6:23:4e:95:02:45:43:3b:
                    62:27:a8:e3:15:fd:59:50:1b:0c:7c:8b:6e:57:91:
                    a0:e8:04:30:68:fc:10:c1:2c:42:45:ac:60:b7:89:
                    2b:10:ba:35:09:82:08:a0:f7:0e:66:db:f1:41:ac:
                    d2:fc:12:6d:af:de:56:90:d3:96:ec:48:73:5f:42:
                    1d:d2:a2:d8:be:51:31:99:69:74:fa:59:82:29:4c:
                    77:41:0f:ee:51:2b:7f:6b:ef:ba:c3:46:20:e4:f8:
                    22:93:f6:5d:9c:28:bd:b6:f8:5e:5b:f2:91:13:a0:
                    45:83:f5:8b:59:19:9d:0a:89:fa:e5:7a:11:4a:54:
                    53:42:45:9f:e7:b8:3e:7c:3c:dc:5c:38:49:60:fd:
                    b5:79:f7:f1:b2:ee:eb:5c:1d:2b:d4:16:25:cd:60:
                    7e:0e:ec:4f:16:fb:fd:18:84:1a:bf:a6:a9:31:21:
                    b7:ff:c8:9d:9e:5f:3e:98:b1:54:ed:b1:67:65:e9:
                    18:3b:e9:fa:b9:eb:e0:ab:7b:8f:0f:ab:05:61:96:
                    24:0d:fa:4c:c9:29:18:0d:9d:24:15:39:b6:4b:12:
                    5f:b6:4d:c5:db:e1:5b:c4:96:70:86:67:05:9b:cb:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:4A:CE:92:E3:2A:0B:02:87:71:2B:34:A5:33:27:8F:5A:09:4C
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:27:ea:4e:2e:a7:ee:00:24:42:60:43:ba:56:21:ea:6a:
         5f:f0:c2:22:b2:5e:ef:77:6a:83:a0:d0:44:84:ff:e6:1f:ba:
         ce:92:c5:76:da:6b:9b:93:b5:b5:47:d3:6f:64:e0:2e:98:a1:
         1c:88:58:51:86:67:33:93:f7:71:90:d2:6a:86:5d:4e:64:07:
         d7:ab:8b:d2:e8:a6:0c:9d:cc:8b:f7:68:89:78:e6:04:01:f3:
         aa:ed:19:86:82:5d:72:c7:5b:1b:11:aa:f9:c5:48:69:4b:9d:
         51:2e:6c:2d:00:e0:73:52:61:a8:e2:24:3f:0a:c9:b5:59:73:
         04:a8:2c:d5:9f:ae:21:c4:49:fe:76:11:58:d9:e7:4f:03:8e:
         a8:e0:af:43:27:2e:45:37:56:04:51:a9:54:a6:8d:c6:7f:cc:
         e7:7c:b2:bb:d0:57:1f:7b:d9:f2:9a:81:ef:a3:63:16:73:4e:
         da:15:10:9e:bd:71:30:e6:4c:d6:75:29:37:16:da:68:5f:20:
         ac:c9:fd:30:9c:95:a2:e0:8e:4f:80:cc:68:46:d0:d2:6e:d4:
         21:7a:02:74:3b:74:29:cb:00:a5:74:63:0b:f5:66:aa:a5:fc:
         71:03:f9:5a:98:d6:57:e1:d3:04:b3:f3:6a:d1:ff:d7:9b:66:
         51:6b:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:51:03 2026 by rpki-client