Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
File:                     E7312F4C5DE211ED9D5E6613C4F9AE02.roa (raw, json)
Hash identifier:          GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=
Subject key identifier:   77:C4:68:E2:6F:AF:9D:AC:D7:7A:C1:F8:6C:91:3B:6F:C6:F5:D2:2D
Certificate issuer:       /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial:       029F
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:51:42 +0000
ROA not before:           Mon 17 Nov 2025 00:17:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.151.74.0/23 maxlen: 23
                          103.151.74.0/24 maxlen: 24
                          103.151.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
                          rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
        Validity
            Not Before: Nov 17 00:17:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46e9e-9348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:b2:23:06:c6:11:dd:f8:1f:2a:9a:ff:6e:
                    1c:4d:ae:42:fb:df:f2:03:47:3f:12:70:c2:40:ef:
                    0b:b6:8a:a1:6f:5b:a4:98:b9:e1:12:4c:13:5d:a3:
                    16:ab:e4:a8:de:49:72:95:09:85:f1:da:e9:b2:9a:
                    b7:dc:7d:48:ff:4d:e6:82:ce:53:84:06:4d:96:85:
                    7b:16:4d:cb:5e:9b:18:dd:ef:a2:55:8b:a8:46:40:
                    78:97:84:67:5f:7a:55:d3:e2:4f:44:95:26:5c:16:
                    f0:a6:5a:fb:d6:8a:2e:f8:10:51:cd:13:46:12:a9:
                    c6:1e:fb:a6:74:f1:b7:20:2a:e3:cf:38:e8:5f:ec:
                    e9:ba:33:89:f7:f5:65:df:ac:f8:17:89:2c:2e:02:
                    09:c6:37:06:e5:a4:0a:99:6a:64:ad:69:bb:67:99:
                    b8:a5:e8:69:03:70:13:b6:e8:fb:71:f9:6b:54:f7:
                    94:16:03:94:95:df:dd:c0:1f:b1:6e:cb:3f:ad:ef:
                    ef:92:09:a6:ef:29:6a:1c:29:c3:82:35:e6:56:63:
                    bf:59:a3:24:e3:c3:a1:c8:47:ba:8a:9b:65:07:bc:
                    b0:41:80:46:d5:f7:f5:01:36:85:e5:e2:a8:85:ca:
                    eb:53:c6:86:01:52:75:06:30:a7:c4:9b:8b:a9:d1:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:68:E2:6F:AF:9D:AC:D7:7A:C1:F8:6C:91:3B:6F:C6:F5:D2:2D
            X509v3 Authority Key Identifier:
                keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:0d:9d:58:ab:79:74:b7:f4:b6:63:1b:43:2d:f2:41:eb:
         ab:f4:7f:5e:61:6b:0a:f9:b9:63:e9:07:36:36:e5:40:2f:83:
         27:f4:4e:11:d2:bb:b4:b5:be:86:17:fd:5d:cf:60:7d:36:8b:
         7b:ce:8e:c8:9c:97:2c:4a:51:39:4c:9c:69:8c:0a:a9:cd:00:
         cf:3b:67:48:a9:2d:74:da:b7:e8:f6:a6:36:07:ff:e8:4c:62:
         30:7e:0c:81:42:76:6b:a5:3a:9a:a7:bc:75:4c:9b:22:04:37:
         ee:61:1b:0b:ff:48:06:4b:58:16:9a:34:5e:15:7f:84:6f:93:
         4b:25:6b:17:a9:9c:cb:e6:ee:41:4c:f9:b0:68:86:95:38:7a:
         f0:60:ce:b2:ad:e6:cb:76:20:83:9b:8a:34:b4:7c:3a:3b:a5:
         13:11:a1:05:29:78:4b:e3:8c:57:67:93:42:3d:61:55:3c:bf:
         ed:df:a1:fc:09:d5:40:37:d7:bc:31:94:6f:af:de:c8:c2:37:
         f8:e6:f7:e1:e3:80:15:20:2a:9e:3c:fd:93:ea:4b:2a:34:9c:
         ce:62:52:0d:11:70:af:8e:96:b0:41:f9:09:ff:3a:ea:ff:b9:
         bf:50:3d:6b:c5:a3:5c:d2:1a:e9:55:69:d8:51:3c:b0:2e:79:
         2a:16:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:26 2026 by rpki-client