Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/F8C3F402870A11F0A015612EC4F9AE02.roa
File:                     F8C3F402870A11F0A015612EC4F9AE02.roa (raw, json)
Hash identifier:          ZicVZdpAu/EiTz6PgI0d8YWIQYHihLcbNzD+voQ25wU=
Subject key identifier:   68:3E:C4:B7:BD:68:2E:AE:B0:1C:29:15:5D:2A:AC:CF:AB:12:39:52
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D71
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/F8C3F402870A11F0A015612EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:40:06 +0000
ROA not before:           Mon 01 Sep 2025 08:09:24 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.137.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3441 (0xd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Sep  1 08:09:24 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44fc6-019d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:0a:e4:ee:8e:6b:bb:18:6c:68:46:0d:b2:
                    81:31:96:e0:d6:47:26:c1:fe:68:68:65:4e:39:b4:
                    81:8b:b5:91:7c:1d:78:a7:04:98:a2:6e:26:b4:8d:
                    62:5c:22:b4:c8:c8:ac:73:d1:b6:19:11:95:e7:77:
                    23:9d:a6:cf:53:3a:b0:cf:1b:a4:f6:42:a0:8b:96:
                    f6:3b:8b:ad:5b:15:5b:ea:18:7d:47:e7:4f:ff:db:
                    5b:ab:7e:ff:c7:fd:ea:ce:42:8d:8d:7d:76:05:cb:
                    c5:5b:c6:61:05:9f:eb:e7:f6:11:38:57:62:20:92:
                    6a:0e:e7:9e:00:c5:09:95:a1:de:13:90:ae:9b:51:
                    41:bf:76:38:ea:fb:ee:50:ff:15:b1:72:f5:d0:f3:
                    7b:21:7b:3d:69:3a:bc:94:75:0b:b5:8f:b1:b0:b2:
                    37:bd:f4:29:be:82:ee:b6:ca:7e:e7:51:c6:bb:b0:
                    45:f1:9f:9a:93:96:64:9a:49:b5:51:ff:41:37:b7:
                    cf:ce:5b:8e:c2:b9:52:13:53:4e:e1:f1:9d:bd:8c:
                    40:38:0a:0f:91:06:a1:a8:4e:a9:77:bb:76:01:07:
                    08:7f:6a:5d:84:3e:1a:f4:94:8e:96:af:e1:68:72:
                    7a:d5:4d:92:d7:e7:50:0d:35:6e:b0:78:48:fc:fa:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:C4:B7:BD:68:2E:AE:B0:1C:29:15:5D:2A:AC:CF:AB:12:39:52
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/F8C3F402870A11F0A015612EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:cb:5a:c1:da:99:6a:2f:e7:78:5c:be:6d:0a:9d:6c:06:
         ca:32:36:89:e8:8b:70:dc:5c:ba:29:52:96:ca:8a:3d:25:d4:
         bc:4e:26:f2:cf:d8:bd:55:4c:5f:6c:81:94:5c:6d:ac:a5:62:
         55:c7:ef:c6:f3:09:5c:b1:4d:c3:b2:e5:54:b7:cd:b8:69:76:
         95:6d:c6:db:39:92:9d:49:57:26:78:51:a3:42:da:65:5c:83:
         d5:ab:39:62:2d:d5:7a:5b:8a:f7:54:1e:92:60:e5:ee:50:84:
         e2:96:21:bd:95:f5:c9:c6:86:74:1b:70:2d:3b:b4:b1:e9:47:
         5d:92:38:3c:51:ab:55:32:9c:c4:b6:43:eb:83:69:cd:c3:98:
         19:87:fc:d1:36:01:10:4a:a2:cb:d0:9c:c2:c2:78:14:34:2c:
         1c:48:5f:b6:b5:a9:fc:83:2b:a9:ff:83:5f:d2:c8:ec:90:32:
         9f:6b:9c:16:c3:ab:62:1a:3b:fd:50:ba:41:48:ec:14:c2:86:
         a4:2d:62:34:e7:64:9b:70:e4:4c:f9:11:bc:f3:b8:d9:5a:a7:
         f9:1e:de:70:85:1e:f1:00:89:c2:07:55:45:90:f5:45:0b:1a:
         f3:ba:50:27:83:fa:e9:8b:a2:3d:52:af:32:0e:0b:d0:92:9c:
         29:16:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:26 2026 by rpki-client