Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
File:                     511564A2ED2B11F08C401BDD456F56BC.roa (raw, json)
Hash identifier:          /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=
Subject key identifier:   0F:57:E9:41:79:D8:CC:E8:6D:67:55:04:93:BC:77:57:37:8A:73:85
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0219
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
Signing time:             Sun 01 Mar 2026 18:04:53 +0000
ROA not before:           Fri 09 Jan 2026 07:17:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     148996
IP address blocks:        103.141.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jan  9 07:17:55 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47fc5-cba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:b5:e6:64:b7:1c:b5:f6:55:28:7d:0d:bc:
                    67:6e:91:38:89:ac:77:40:01:b6:1d:b1:6e:5d:51:
                    85:42:80:88:e3:b1:18:97:1f:cc:2c:f5:e9:09:f2:
                    a1:a1:32:0f:94:f5:37:2d:0d:58:18:00:b9:81:33:
                    69:a1:1e:ee:70:f5:3a:d5:32:c4:1a:95:99:80:a2:
                    f4:09:32:f3:8f:6d:38:ed:e3:82:71:24:b8:b6:8e:
                    9a:c6:23:4b:38:d9:3f:05:25:4d:c7:5d:ac:3f:05:
                    b9:c8:51:e5:66:f8:4c:5c:fb:66:c4:e3:e1:28:17:
                    8c:ee:96:02:96:f3:87:f2:bc:54:81:de:f4:99:4a:
                    da:01:0b:b5:fd:4b:be:c4:27:d9:fa:ac:87:81:dd:
                    7d:07:b6:82:b1:76:4d:5a:4e:73:99:67:c7:42:fd:
                    d6:0a:94:67:df:50:53:72:38:22:36:dc:4a:ea:70:
                    c3:dd:fe:b0:32:54:be:17:28:47:5c:e4:19:1d:1a:
                    1a:ba:b9:2e:01:a4:9e:37:2c:11:b4:93:22:eb:35:
                    25:1e:7b:c2:53:c5:6c:c1:16:a8:af:63:0e:7e:8a:
                    fa:da:6b:cf:05:93:ef:d4:fd:90:ae:22:ee:58:6d:
                    a0:ea:d9:cc:2a:ba:15:13:b5:9a:b7:f4:78:d5:46:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:57:E9:41:79:D8:CC:E8:6D:67:55:04:93:BC:77:57:37:8A:73:85
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:76:fa:02:25:b8:ba:d6:37:a9:1a:9e:39:a8:2f:61:68:0c:
         39:5f:f7:44:34:8c:93:b5:67:6f:78:42:15:11:3e:11:ea:94:
         b6:e4:de:c0:15:a1:6a:f2:97:11:3d:9c:ae:b5:2e:4e:4c:93:
         38:38:88:ad:ca:84:d9:e1:1d:b4:01:fc:26:11:04:35:6b:0b:
         c9:60:c8:e9:82:f3:e1:08:fd:56:5f:0a:9a:36:ae:77:3f:d5:
         7b:b3:17:4a:8d:bc:db:d6:1f:21:0a:e7:54:ac:1f:b0:80:80:
         bf:c0:73:17:20:d1:28:be:ad:55:b5:39:ff:a5:ce:9b:46:6f:
         0e:62:56:15:ea:6d:7e:14:35:bb:a9:bc:68:da:87:84:88:2e:
         6e:41:75:56:d5:95:65:37:ca:7e:35:ce:53:5d:38:9e:e4:28:
         7b:f7:f0:c4:d0:d6:96:9d:c3:b2:78:88:75:d6:12:a9:50:e3:
         e1:95:7f:ae:1b:a6:47:32:1b:d3:ad:43:66:60:54:aa:42:d5:
         9f:f1:8a:f7:33:a5:00:b5:08:52:16:dc:4c:33:5a:6c:8d:0b:
         a9:d9:21:b5:d1:27:da:61:d5:33:7d:27:36:04:ed:e9:68:d2:
         b2:92:89:ad:d2:89:4d:6f:53:44:23:05:1d:37:1d:35:5e:36:
         7e:68:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:05 2026 by rpki-client