Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa
File:                     AFFF3716479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier:          hag+MUbq2Bfcf/v0P/fLMJSbYbpkOhegxdRU84PbHuI=
Subject key identifier:   6A:5C:BB:51:DD:17:E7:02:EB:BE:39:E9:DB:D2:23:6F:06:38:4D:1F
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       050C
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:01:26 +0000
ROA not before:           Sun 30 Nov 2025 22:55:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137385
IP address blocks:        103.174.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Nov 30 22:55:53 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a454c5-c944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:a2:b6:e0:f4:a3:31:4f:0e:01:01:2f:45:
                    0c:94:84:99:07:fb:81:28:1a:be:c8:8a:2f:8e:37:
                    cd:79:75:e6:73:98:3d:59:07:13:9f:7a:cd:0d:51:
                    69:e1:f4:68:be:3c:d9:83:37:a6:fd:5e:c6:5c:ba:
                    2b:55:53:26:c4:51:33:3b:db:61:d0:67:e4:84:0d:
                    a1:43:57:ae:5e:fb:0f:f9:60:91:d9:a6:c0:ba:cf:
                    27:21:04:b7:9f:66:d8:cb:b9:1c:b5:b7:18:c7:cd:
                    bb:cc:9f:01:e1:28:14:4a:87:c7:e5:64:40:38:de:
                    01:56:46:b6:07:71:7f:7b:c3:00:09:24:37:60:17:
                    76:30:e6:38:dd:9b:cf:15:0c:cf:1b:3a:f7:c6:48:
                    b1:89:dc:c5:f6:57:02:03:cb:dc:96:67:b5:68:d4:
                    a4:a1:13:f0:4f:75:d9:c3:a6:99:6a:6a:80:36:30:
                    af:0c:ea:3e:2b:35:28:1c:11:13:4b:19:5e:9d:5b:
                    c2:ab:75:70:52:c9:f9:ac:cf:9c:66:df:74:7b:50:
                    90:de:83:33:a7:30:54:06:20:44:df:18:40:c7:75:
                    d0:b5:c5:ff:e2:21:72:b2:09:b6:c8:85:19:aa:42:
                    2f:0b:73:cd:cc:d0:df:37:6c:cf:38:45:8b:a0:68:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:BB:51:DD:17:E7:02:EB:BE:39:E9:DB:D2:23:6F:06:38:4D:1F
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:51:8d:46:3b:be:82:3c:75:9f:13:34:b3:27:8c:b4:a2:
         5e:b9:a7:5f:b6:41:1c:7c:50:1a:18:f9:5f:f3:4f:4c:fc:de:
         78:d5:ce:ad:43:4f:26:09:3c:54:22:e2:22:08:57:63:ac:a6:
         18:0d:e3:af:17:0b:67:3a:fb:3b:b2:1f:89:98:7f:57:c7:00:
         5f:61:8c:04:cd:f3:ff:91:a1:bf:1f:a1:37:8e:df:35:c2:fc:
         0b:c0:d2:49:a1:e6:49:ab:c0:6b:cc:51:4e:ab:32:af:ae:de:
         e8:59:19:66:00:05:5f:79:83:c1:2c:27:d3:8c:23:32:ab:0f:
         8b:b1:06:7c:99:d6:1d:ce:70:51:b7:f8:29:c6:e9:6e:17:2b:
         01:da:17:7a:b6:e4:83:18:67:d9:95:47:8d:38:d9:24:df:70:
         9e:b1:87:4e:a2:f1:68:7d:4d:fc:6d:ce:88:77:83:82:92:57:
         23:90:4b:0d:d1:cc:1f:49:95:f0:9a:09:a5:83:21:e7:9a:bb:
         c3:87:44:a4:64:f3:a6:00:ab:0e:f3:34:c6:84:c0:61:da:8e:
         1f:12:ff:4e:8b:02:1a:97:e2:31:bd:79:7b:c1:4e:c5:b9:5a:
         64:2e:d1:d5:39:01:b3:0a:e1:91:27:1e:81:0e:f2:dc:3d:7a:
         e5:d9:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:03 2026 by rpki-client