Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
File:                     4279BBD80C5811EA93151657C4F9AE02.roa (raw, json)
Hash identifier:          wdDYplfzKaYX22uPvzlPb5qqxZS2nS6LfIySpohKPZA=
Subject key identifier:   86:C7:8D:78:60:52:96:E0:28:9D:7F:00:CE:57:A6:81:45:4C:E9:E0
Certificate issuer:       /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial:       0CBE
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:41:14 +0000
ROA not before:           Sat 14 Jun 2025 18:32:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137889
IP address blocks:        103.116.164.0/22 maxlen: 24
                          2402:fd40::/32 maxlen: 32
                          2402:fd40::/36 maxlen: 36
                          2402:fd40:1000::/36 maxlen: 36
                          2402:fd40:1000::/48 maxlen: 48
                          2402:fd40:1001::/48 maxlen: 48
                          2402:fd40:1002::/48 maxlen: 48
                          2402:fd40:1003::/48 maxlen: 48
                          2402:fd40:1004::/48 maxlen: 48
                          2402:fd40:1005::/48 maxlen: 48
                          2402:fd40:1006::/48 maxlen: 48
                          2402:fd40:1007::/48 maxlen: 48
                          2402:fd40:2000::/36 maxlen: 36
                          2402:fd40:3000::/36 maxlen: 36
                          2402:fd40:4000::/36 maxlen: 36
                          2402:fd40:5000::/36 maxlen: 36
                          2402:fd40:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
                          rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
        Validity
            Not Before: Jun 14 18:32:30 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a425d9-2e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:a8:fe:57:27:07:b2:c0:cc:0e:3a:5d:44:
                    07:b4:89:69:13:12:31:bd:a3:ea:51:88:12:71:14:
                    2a:09:ba:04:a6:3c:80:ba:4e:f6:7f:2c:10:2b:08:
                    0a:d2:f9:46:24:17:fc:cd:27:1e:23:41:8d:5b:45:
                    ae:75:ff:18:32:af:4b:6e:b2:4b:34:e2:bb:8c:0c:
                    a0:eb:f8:ca:ed:a0:7b:6b:bb:23:74:45:bd:16:18:
                    42:95:3a:35:0c:5b:69:63:58:f5:b4:0e:94:dc:5d:
                    e1:5e:16:70:25:1c:a2:0b:da:e7:ed:bc:d6:b9:e1:
                    56:f0:1a:af:8a:a3:91:a6:89:aa:55:87:6d:75:4a:
                    de:8d:d1:fb:eb:6f:10:93:5f:34:02:68:08:44:94:
                    ef:17:fa:ca:7e:c5:30:f9:9a:b4:28:22:a4:d2:88:
                    1f:6a:bc:54:6f:30:63:3b:49:79:18:27:0b:41:e3:
                    27:72:0f:ac:8c:99:1a:3c:da:5c:da:d6:b3:bc:48:
                    70:fc:72:29:5e:5e:63:63:01:12:47:f0:3b:06:b6:
                    75:9b:4c:e4:52:04:bc:94:60:3a:94:c9:8d:ee:f4:
                    96:1f:eb:d3:dc:9f:74:dd:40:46:ed:ef:e3:82:16:
                    77:20:72:8a:1c:cc:43:10:4a:a7:3a:6e:f9:56:1e:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C7:8D:78:60:52:96:E0:28:9D:7F:00:CE:57:A6:81:45:4C:E9:E0
            X509v3 Authority Key Identifier:
                keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.164.0/22
                IPv6:
                  2402:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:c2:a9:44:c3:48:48:54:ec:ae:5d:2c:44:e3:6e:ae:53:
         80:5e:31:13:10:ba:79:b5:ec:20:42:3d:ec:d9:af:1a:5c:54:
         e8:25:87:5d:fd:f8:38:94:89:2e:4d:7b:4b:7f:ac:ff:72:ef:
         5f:79:5e:01:88:cb:8e:50:d6:1e:30:b2:43:07:ad:87:61:a7:
         56:6c:0b:5d:81:49:87:f8:8a:26:3d:2f:88:43:8d:3c:8e:8e:
         d1:85:1b:35:31:8e:e3:79:50:3a:f8:bb:f1:dc:7e:8f:28:80:
         01:15:1a:71:75:64:2b:e6:a8:80:05:71:a5:99:76:f6:56:3f:
         02:86:f6:0f:5d:1a:05:3c:1e:05:c5:78:ff:fd:6c:b9:f6:d9:
         ac:e6:6d:e9:5a:4c:ef:2f:5f:02:7d:04:cf:24:13:ee:28:01:
         53:d2:88:a4:e2:7a:a1:ea:85:88:73:f6:81:df:40:d0:64:3c:
         84:30:1c:46:f8:23:ec:a6:b9:a1:aa:09:4e:7b:65:8e:6a:1c:
         bf:4b:7f:a5:9e:48:a3:ad:04:cd:e6:ed:a7:d3:fe:7a:e9:11:
         ef:f6:49:61:d4:d6:6b:a4:3c:e4:28:6c:56:91:81:1f:0b:50:
         72:45:25:69:fa:c8:18:a2:28:89:d9:3c:94:8f:8c:1b:68:34:
         a2:21:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:50 2026 by rpki-client