Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
File:                     5DCF3814CA0E11ED9251861DC4F9AE02.roa (raw, json)
Hash identifier:          jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=
Subject key identifier:   AE:BA:ED:CE:CC:F3:33:B2:46:E0:6A:B8:D5:58:F3:B8:45:76:A4:18
Certificate issuer:       /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial:       0229
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:33:06 +0000
ROA not before:           Thu 03 Apr 2025 03:30:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139692
IP address blocks:        103.110.182.0/23 maxlen: 24
                          2001:df2:1a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
        Validity
            Not Before: Apr  3 03:30:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3dda2-651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:8c:9e:f0:7b:0f:13:94:8d:47:7b:76:df:
                    5e:51:19:d3:52:65:07:84:87:da:f8:fb:29:b9:bd:
                    49:24:13:df:e3:f6:ef:5f:05:77:d8:cd:c0:0b:81:
                    d1:5c:b1:08:33:ea:d2:3d:88:48:60:bf:7a:4e:a8:
                    6b:a7:1f:e6:31:48:dc:11:31:70:a3:41:d0:7a:f6:
                    b1:3d:16:e7:b0:ee:01:b7:a5:e0:e4:b8:74:23:2f:
                    8d:3c:46:1c:85:b8:d8:99:99:db:83:37:84:19:45:
                    ff:05:23:6c:eb:bc:3a:1c:b2:a0:99:44:1f:ec:f1:
                    eb:c7:9c:5a:ac:09:23:93:62:c8:36:72:c4:ac:c8:
                    73:6b:54:df:ec:36:0b:e3:90:32:2d:a3:0d:3f:30:
                    8e:c7:b2:09:05:16:77:75:70:12:79:89:74:e0:21:
                    38:d9:58:70:6f:a3:dc:ba:b7:28:d1:66:38:ab:45:
                    36:2b:e1:19:d2:33:e1:b9:76:44:f7:77:05:0c:b3:
                    1c:c5:8e:0c:cc:77:95:f8:67:1a:72:08:f5:41:22:
                    42:db:9e:68:1e:bb:31:b9:6e:f8:10:a0:fa:3b:a8:
                    6d:2a:ce:c6:aa:d7:10:b5:eb:bc:d8:0e:f1:53:89:
                    3e:c4:7e:62:41:f9:6d:fa:68:6d:e8:bf:12:8b:e9:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:ED:CE:CC:F3:33:B2:46:E0:6A:B8:D5:58:F3:B8:45:76:A4:18
            X509v3 Authority Key Identifier:
                keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.182.0/23
                IPv6:
                  2001:df2:1a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:af:b9:0b:4c:78:41:62:1f:f5:9b:53:f7:6a:b7:c6:0f:
         fb:31:04:8a:c6:7f:c6:4e:43:da:ef:fc:2a:58:37:90:7a:e4:
         ac:aa:f0:bc:c3:a0:d2:72:36:18:a9:77:82:eb:d8:fc:33:67:
         a3:5a:b7:07:33:a6:b5:1c:42:99:ec:85:4d:ef:2b:47:a3:02:
         00:b4:ae:44:4d:be:20:20:7b:37:86:44:d1:6a:a8:8c:1a:29:
         2d:f9:22:52:ba:fe:b1:77:36:ce:68:40:ca:c7:a8:8f:f3:56:
         85:f1:68:3d:a2:6e:c9:ea:2a:02:f9:2e:f8:3a:fe:ca:b6:f2:
         de:ce:ac:d6:dc:9e:de:e1:0b:29:45:b4:10:b6:03:6d:2f:e5:
         0b:13:2d:e9:10:fb:31:2d:64:a6:7a:84:66:63:b1:2c:fa:4d:
         f6:f3:34:6d:17:56:c6:5d:50:6a:e6:3c:30:1b:6b:33:dd:2f:
         84:a8:1c:37:af:7b:67:7a:ce:55:53:6a:9e:eb:15:e8:71:9a:
         e3:06:af:42:f1:0b:3a:80:c5:66:2c:52:15:b6:90:2d:4a:4f:
         ff:94:c5:8b:4f:67:0c:cf:e5:f7:44:ed:27:99:40:40:c0:30:
         8f:be:17:96:1d:39:70:c4:3d:02:08:a4:3f:8c:ba:51:2f:14:
         93:17:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:59 2026 by rpki-client