Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa
File:                     81055570A5C611F09009BB3EC4F9AE02.roa (raw, json)
Hash identifier:          VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=
Subject key identifier:   27:29:05:E5:C1:8F:CE:B7:46:BA:B6:56:09:F5:7F:71:5E:DE:93:E7
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       0285
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:10 +0000
ROA not before:           Thu 23 Oct 2025 03:45:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     152176
IP address blocks:        103.17.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: Oct 23 03:45:44 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4651e-ad79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:c6:c5:f2:a9:f2:83:3a:79:4f:99:ed:95:
                    db:66:84:df:ea:49:5a:1b:f9:51:ff:57:55:2f:df:
                    d1:28:3e:5d:b5:83:d8:60:bc:82:ed:68:15:78:21:
                    b5:ab:e1:bc:1b:b0:31:fa:91:9c:98:6d:3e:a0:fc:
                    85:7a:8f:ca:7b:50:45:d9:b3:7d:ce:1e:c9:ff:a7:
                    ac:47:34:30:d5:ed:69:f6:cd:dc:99:9a:e6:92:b8:
                    a1:e4:c7:0d:82:3c:56:d6:ab:a8:20:ba:36:f0:ff:
                    0d:48:a7:33:4a:b5:53:9c:f2:12:7a:21:75:f2:a8:
                    cd:3f:64:40:19:b1:1b:36:37:17:50:86:7f:00:ab:
                    bb:da:c6:11:88:39:d2:96:94:08:d6:3b:bb:6e:da:
                    c0:b6:0d:64:5c:18:2e:1f:07:53:40:42:43:5b:15:
                    ec:a0:c7:4b:57:d8:ff:98:9a:b8:28:79:dc:c4:ec:
                    8e:d3:fc:f2:9f:85:24:94:1e:24:a3:77:2b:23:e7:
                    04:4b:81:58:54:21:fa:2c:6b:56:c3:89:a3:d7:21:
                    3c:34:21:4a:56:a1:53:65:65:38:e9:ed:5f:89:95:
                    eb:d0:37:1b:9e:b7:3f:ab:29:ab:57:2c:8c:fe:ef:
                    c1:58:2f:6a:83:eb:eb:e9:5a:52:75:28:91:e8:c7:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:05:E5:C1:8F:CE:B7:46:BA:B6:56:09:F5:7F:71:5E:DE:93:E7
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:42:08:3a:dc:74:42:ca:64:2f:02:a1:74:96:ef:96:1b:
         4b:b1:df:5e:44:eb:1f:24:a0:fc:7c:94:3e:df:82:6b:ce:06:
         ff:90:8f:92:33:1b:d6:3b:f1:a8:9a:3a:60:c5:fe:ec:03:34:
         c8:e6:83:b4:56:69:03:47:9a:de:83:7e:d1:13:f0:59:8b:6b:
         d4:94:d7:76:79:e0:0c:95:4b:59:10:c5:4e:56:e1:87:fe:28:
         e6:23:38:a3:66:fc:68:b3:f0:3b:80:18:22:f8:42:e1:51:6f:
         69:79:5a:11:7e:f6:5a:19:05:7a:bc:6d:bd:7b:04:10:14:93:
         96:bc:38:e6:56:13:5e:fe:f6:69:45:50:2f:28:bc:3b:91:48:
         8c:e0:89:cd:14:dc:4d:48:e9:a8:8d:61:ec:9c:f3:a1:7a:6f:
         80:1c:76:c8:21:11:51:cc:ba:2f:4a:1a:48:8f:f0:65:e5:85:
         34:6b:42:06:b3:7e:4b:2f:8a:ec:d3:f6:a7:db:c2:6e:66:b1:
         c2:34:6e:ea:22:9e:57:da:15:a8:7f:aa:59:8c:69:0d:5b:19:
         fc:47:d4:4d:a4:e6:83:b1:50:27:d2:d4:4a:31:f4:e7:25:b8:
         82:c7:b7:d0:4e:f5:2d:be:19:01:4d:fe:e9:dd:75:66:58:a1:
         05:60:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:52 2026 by rpki-client