Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/E70C7B4620F611F09993632FC4F9AE02.roa
File:                     E70C7B4620F611F09993632FC4F9AE02.roa (raw, json)
Hash identifier:          vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=
Subject key identifier:   BD:08:1B:63:81:7A:67:21:2A:71:DF:20:56:84:17:5C:5D:A6:5F:85
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       A2
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/E70C7B4620F611F09993632FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:41 +0000
ROA not before:           Thu 24 Apr 2025 10:38:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7630
IP address blocks:        103.151.50.0/24 maxlen: 24
                          2406:1440:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Apr 24 10:38:10 2025 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69a3e4cc-a2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:21:de:1f:aa:e3:b9:34:3b:5b:44:39:c3:df:
                    f5:20:af:4e:f7:5c:f0:71:38:94:7a:ee:6c:93:8b:
                    a0:cb:9e:fe:0b:e0:20:66:5b:c5:d6:6f:69:de:04:
                    43:7d:7b:7c:bc:fd:ee:fe:0a:87:8a:db:97:da:c4:
                    86:16:38:38:50:a4:31:d6:43:a7:63:40:83:a4:78:
                    29:df:b0:b5:8e:c3:69:32:db:bf:60:45:89:dd:8e:
                    bc:ca:53:12:ed:a0:9a:0b:e3:c2:d5:7a:d8:c0:17:
                    47:b8:83:25:1e:d3:d1:72:2e:c0:dc:09:f3:c6:41:
                    4a:01:b2:6e:67:80:ab:22:e0:1b:0c:78:3e:48:a4:
                    7d:00:97:0c:14:4e:11:fc:91:1a:77:f9:ed:f3:c4:
                    c4:4a:76:70:78:1e:12:46:7b:2f:22:c1:51:22:1b:
                    ab:a9:c0:62:dd:57:0f:1f:40:ae:b4:a3:c9:08:55:
                    6d:bf:39:f5:c1:17:d6:9d:5a:7d:b3:6f:1f:9a:c0:
                    1f:57:e3:9b:26:3f:2c:2f:de:7b:67:0c:7a:5a:8d:
                    40:8e:b5:e0:19:6d:2a:e6:44:05:c1:b4:0a:71:7b:
                    2f:e3:8c:45:71:68:5f:66:23:cc:65:d6:68:14:45:
                    17:ad:f8:2c:5b:97:43:39:ef:6b:3f:22:71:8a:61:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:08:1B:63:81:7A:67:21:2A:71:DF:20:56:84:17:5C:5D:A6:5F:85
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/E70C7B4620F611F09993632FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.50.0/24
                IPv6:
                  2406:1440:1101::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:1f:f5:74:23:db:0f:1c:b5:62:3e:69:11:3c:dc:f0:61:5f:
         5e:af:fe:9d:30:c2:aa:71:70:2c:59:73:c2:d3:47:57:05:60:
         08:0a:74:79:d1:f3:9a:04:7a:56:07:5c:74:c6:90:02:c8:bc:
         3d:07:50:c9:71:77:4e:38:36:81:06:e3:f3:3f:8a:ed:0f:b2:
         ad:0e:8a:9d:b2:86:1a:7a:b4:af:cd:4a:4a:aa:ea:f1:b4:9a:
         72:c4:64:85:06:04:30:f6:3d:91:ca:a7:b8:33:19:14:63:bc:
         b4:0c:4f:a7:04:83:de:ce:37:61:e9:5c:7c:0f:cc:8d:53:5c:
         c4:a8:76:fe:9e:d3:8d:c3:59:b9:62:b6:f6:cc:ca:46:f2:77:
         18:db:e5:dc:c0:51:03:7e:2b:ca:de:79:5a:66:ec:fc:da:4f:
         d2:cf:ef:d0:6e:98:23:1b:c2:5d:36:56:38:e1:82:ca:a3:e3:
         d3:93:a9:c1:c9:fd:3c:46:0c:ff:61:9b:24:78:62:1e:da:d0:
         03:4a:f4:8a:6a:bf:81:96:8a:ab:77:49:36:21:60:4c:bc:45:
         ee:0f:05:fa:cc:d7:9d:ad:e7:98:d1:9f:95:fd:b7:4b:34:b4:
         ce:91:80:ce:dd:c7:1c:b7:9a:1d:ba:c9:e0:49:b8:2a:44:63:
         fc:fa:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:02 2026 by rpki-client