Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
File:                     C6591C620DFD11EBAD63A21CC4F9AE02.roa (raw, json)
Hash identifier:          pDMgUgYjUiG2SoDfLwnr0PNx89pEiUUtvGRDwPeIdng=
Subject key identifier:   64:18:D7:22:31:DF:A1:DB:BF:C5:CF:F4:D8:7A:FB:94:47:B7:2C:2C
Certificate issuer:       /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial:       081E
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:38:39 +0000
ROA not before:           Fri 30 May 2025 21:50:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140695
IP address blocks:        103.151.231.0/24 maxlen: 24
                          2001:df3:e180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
                          rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
        Validity
            Not Before: May 30 21:50:36 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4091f-09f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:b9:08:81:04:b0:7e:8d:ab:c4:0a:89:f6:
                    d9:a7:16:31:a3:a0:26:17:d2:32:9b:22:ad:3f:cf:
                    d8:79:d6:9a:d6:f6:81:5b:7e:e6:eb:de:51:65:ae:
                    9d:83:91:f3:9a:5e:ef:6e:b5:8d:28:e3:f7:44:c7:
                    ec:36:84:9b:f7:0a:27:5d:c1:b1:56:ae:b8:c5:e8:
                    7d:78:e7:42:cf:ba:1e:60:f2:a5:81:0e:a7:2e:02:
                    5c:2b:1b:68:40:dc:c2:99:5a:8a:ed:84:7e:52:36:
                    69:dd:bf:ce:d9:9e:a4:42:be:6a:94:09:7c:31:64:
                    96:fd:5f:e5:0c:bf:ac:75:b6:33:f7:14:25:a9:98:
                    75:81:27:e5:ee:de:dc:66:7e:c0:a2:f1:ee:8e:f9:
                    e9:8d:ac:8c:37:cf:d4:ac:f0:c9:99:d0:00:46:5b:
                    32:43:5d:da:99:52:39:fc:21:4a:7d:b1:5a:88:f3:
                    d9:bf:06:58:c0:50:f4:7d:83:af:83:ca:e8:b1:a8:
                    ae:21:06:fd:7f:b7:ef:d2:5b:10:39:11:7a:43:9b:
                    18:5a:06:0d:0b:c8:63:e9:f4:de:36:34:1f:e1:1d:
                    2c:48:35:c4:ba:92:66:a7:7d:ec:b1:b9:c9:5e:d7:
                    c4:56:e9:36:16:08:7d:3f:ab:13:59:43:36:06:db:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:18:D7:22:31:DF:A1:DB:BF:C5:CF:F4:D8:7A:FB:94:47:B7:2C:2C
            X509v3 Authority Key Identifier:
                keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.231.0/24
                IPv6:
                  2001:df3:e180::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:81:c1:12:d4:a2:73:b4:94:70:29:55:5a:9d:14:06:c4:
         24:cf:10:c3:12:1e:52:dd:83:5a:bf:3c:46:8f:7b:67:d5:c4:
         f1:e8:0c:9d:52:6e:72:da:1a:e2:31:15:b8:31:6e:b7:cf:c0:
         f5:69:67:7d:93:99:bf:a5:fd:33:4d:15:47:5f:41:54:2e:14:
         3d:da:6f:bd:de:1c:6e:18:5f:35:db:81:0b:01:0a:ee:d6:12:
         9b:eb:a2:3c:34:df:c3:87:da:e9:b9:6c:af:6e:c6:a9:38:ef:
         fb:56:a1:f8:30:bc:e5:7f:b4:7b:06:e4:52:81:ae:e6:3b:fd:
         a6:e8:4a:6c:ff:02:d7:5a:fd:a7:e1:3f:58:fc:d1:29:2a:4f:
         3e:ad:35:ac:e5:5f:48:16:c6:50:10:52:42:f0:ce:aa:4d:b6:
         ca:39:1a:0e:4c:07:1e:e9:6e:a3:bd:32:67:6e:ef:8d:90:4c:
         6f:94:48:a2:aa:b3:2c:93:14:7c:cc:83:ed:64:d3:d1:df:6e:
         a4:8a:6e:59:4c:38:5d:ed:4d:b0:6e:3a:da:69:29:9f:03:7c:
         a3:c6:19:58:a5:df:85:d3:f6:7a:3f:38:2d:1b:62:85:9b:02:
         71:9d:1b:0c:f3:07:d3:28:b1:21:60:52:b0:d5:55:fd:cc:4a:
         69:33:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:21 2026 by rpki-client