Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa
File:                     3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (raw, json)
Hash identifier:          xT4ltQ0fqXtOZbKoSwpsdMTsY3mOeI0/8WHutWp7LmI=
Subject key identifier:   55:68:9E:0A:50:66:42:58:6A:C5:42:E3:0C:92:35:B3:B7:56:91:2A
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       0995
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa
Signing time:             Sun 01 Mar 2026 19:18:13 +0000
ROA not before:           Sun 01 Feb 2026 15:18:16 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152176
IP address blocks:        103.134.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Feb  1 15:18:16 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a490f5-24bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:f9:e8:e1:40:ce:cb:95:9a:61:a5:86:1a:
                    e3:e5:69:4d:4e:07:c1:cc:96:6c:52:f6:9d:1a:52:
                    c0:56:1c:29:6c:a0:1c:6f:c4:b3:33:de:2e:71:1f:
                    79:a4:0b:0f:4c:21:a1:6f:73:8e:29:c3:e8:38:1f:
                    a8:5d:61:b6:72:b1:d7:8b:4a:36:db:4a:c4:d0:e7:
                    ed:e6:75:cc:8c:71:41:ac:7d:af:dd:5c:e8:46:a5:
                    05:92:d2:9b:96:2a:a2:c1:f3:de:e4:1d:50:a8:ba:
                    65:5f:e7:18:99:77:02:e4:cc:10:10:ee:68:69:ba:
                    f7:78:81:39:00:c5:73:4e:9f:7a:24:14:5b:46:db:
                    68:b2:cc:1a:3c:f6:8a:b0:e2:09:af:e9:7b:8a:15:
                    d1:f7:56:5e:42:dc:9f:80:78:9c:50:ab:ab:f0:5a:
                    99:93:ab:d4:c2:6a:1c:5a:a1:d0:5a:03:5e:99:20:
                    e3:62:93:df:34:44:d6:67:ee:3d:92:82:03:bf:42:
                    b2:e6:88:69:f2:cc:7a:78:e3:e1:1e:5b:fb:ed:78:
                    8a:d4:c1:15:1d:83:d1:29:a2:52:1a:75:6d:b5:27:
                    b4:2e:f0:5a:d5:76:f2:2f:03:e0:6c:22:1f:62:32:
                    24:1d:29:9d:75:16:10:c9:d0:29:3a:51:f6:80:02:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:9E:0A:50:66:42:58:6A:C5:42:E3:0C:92:35:B3:B7:56:91:2A
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:62:c0:ce:81:a6:aa:b1:83:28:7e:8a:7c:8e:47:1b:6d:
         52:9c:ab:db:14:e2:25:dd:1d:4e:e6:e0:4e:ab:72:d0:36:2b:
         36:23:25:14:cd:5e:66:73:ea:a4:45:37:4f:3f:d5:fa:1d:e3:
         47:5a:63:1a:a3:08:33:28:aa:15:d7:ef:8b:45:03:c0:6d:71:
         6e:55:75:b0:48:a6:f5:59:84:62:a5:32:3e:2d:13:6d:80:3b:
         53:66:0c:18:ef:a8:01:c8:67:fd:47:56:c9:5a:82:44:37:cc:
         aa:18:c3:a7:b3:74:89:a3:da:88:87:b1:4e:72:dd:bd:a9:9b:
         3b:a5:6e:88:4c:ce:8e:9b:ca:95:6e:93:a4:de:02:85:8c:67:
         74:8a:36:ef:eb:17:dd:30:9f:48:c3:ba:23:bb:f8:98:17:8b:
         d3:97:0b:72:a8:13:d8:7c:8f:f9:4c:11:7c:1c:76:12:a0:f3:
         9e:c5:46:0f:73:b2:ca:fa:41:d8:73:8b:10:81:14:4a:a8:1a:
         93:f2:fb:8d:5e:3d:0a:54:92:8a:a3:45:0d:f2:13:1b:2c:f9:
         5c:85:b0:91:22:fd:87:5d:9a:7c:f0:39:8a:ae:71:7e:ee:a9:
         2e:f3:21:98:0a:63:5d:03:94:a5:3c:10:ba:3c:d2:82:e4:cc:
         18:3b:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:26 2026 by rpki-client