Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa
File:                     5382BB6AA5C611F0900E7F3EC4F9AE02.roa (raw, json)
Hash identifier:          HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=
Subject key identifier:   1B:43:8C:F7:A3:F1:D1:D4:3F:F7:02:51:62:5F:17:1C:D3:B5:03:52
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       0284
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:09 +0000
ROA not before:           Thu 23 Oct 2025 03:45:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150352
IP address blocks:        103.17.176.0/24 maxlen: 24
                          2400:b5e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: Oct 23 03:45:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4651d-1eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2c:5f:1d:c3:6d:a8:73:8f:c9:4b:8c:25:1f:
                    88:13:94:64:82:5c:b5:aa:d9:3c:a3:64:43:d7:df:
                    d1:1a:5a:8d:05:07:48:6f:bd:70:11:6d:1e:28:aa:
                    93:e9:0e:1b:44:23:e4:71:95:cd:de:19:1d:f0:cb:
                    76:ef:41:d1:cc:f0:c6:aa:8c:03:0f:d2:5d:19:ad:
                    3f:43:23:bc:8d:82:53:50:c7:fb:03:a0:48:b7:ee:
                    32:6b:51:68:3b:1d:3f:34:8c:44:15:fa:ea:6f:93:
                    ba:e9:9c:01:0d:b7:e2:a5:8f:d2:4c:c9:35:7f:0f:
                    98:14:e3:c2:7a:f3:6b:2c:22:74:96:5c:4d:58:04:
                    ca:66:92:18:f4:e2:90:34:50:d3:17:e2:ba:6c:65:
                    01:bf:22:13:d9:b2:5e:58:3f:87:8b:10:35:9e:69:
                    67:07:27:5f:53:a0:1e:01:02:80:80:71:ad:12:f5:
                    a3:1a:0d:a3:92:16:2f:9d:2b:f8:b2:ef:0c:47:13:
                    10:17:6e:da:0f:80:8a:ae:f7:d5:07:94:ee:db:bc:
                    76:ee:cb:9a:4c:8f:16:30:17:03:5d:f6:fe:f8:ec:
                    4e:4f:f0:cd:74:eb:de:3f:2e:1a:5d:f9:24:15:c4:
                    2e:3a:23:04:20:b9:5a:47:e1:32:94:65:31:75:9f:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:8C:F7:A3:F1:D1:D4:3F:F7:02:51:62:5F:17:1C:D3:B5:03:52
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.176.0/24
                IPv6:
                  2400:b5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:57:46:e6:04:b5:b1:ac:72:bc:6d:1f:12:9a:1f:66:33:c3:
         b2:72:46:2b:05:e8:d4:31:87:b8:a6:5d:1b:77:c1:94:83:02:
         16:d0:6c:30:60:45:ef:45:30:59:b8:bc:b5:fc:22:f7:52:6b:
         bb:49:df:3c:e6:8d:8b:b5:0b:61:83:42:bb:b2:60:cb:dd:52:
         1f:53:48:f1:03:2d:17:3e:d1:af:77:cc:ce:86:37:06:a0:f4:
         e9:94:37:88:9f:a2:62:c8:7a:6b:23:53:95:0a:c3:c6:f2:38:
         b5:f5:46:d1:b2:a3:35:56:ab:4b:00:43:2c:b1:18:ac:7d:de:
         96:cd:34:45:14:51:4f:6a:92:30:41:02:e5:41:3d:9b:14:35:
         aa:5a:ee:48:f3:11:c7:c1:7b:aa:93:61:59:a8:8a:d7:1a:11:
         8c:36:a5:7a:b3:8c:0f:28:9b:38:84:97:63:c8:93:4a:21:62:
         fe:94:ee:90:d0:82:91:8f:f7:03:41:25:5c:55:df:ee:3d:3e:
         51:83:08:da:bf:bd:31:1f:30:b6:92:d6:9e:54:20:9a:30:d0:
         fc:53:5f:30:18:f0:d9:be:08:0e:6f:8e:75:6b:76:1b:37:46:
         b7:e0:df:4f:3d:f4:96:27:3a:46:1b:b2:c1:d1:55:ce:3a:c9:
         e7:44:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:25 2026 by rpki-client