Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
File:                     51FD604CE08711EFA06D6434C4F9AE02.roa (raw, json)
Hash identifier:          IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=
Subject key identifier:   91:7E:AB:3B:40:99:95:F9:77:52:2B:B2:89:31:62:46:44:EF:3A:9E
Certificate issuer:       /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial:       0551
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:38:05 +0000
ROA not before:           Sat 24 Jan 2026 23:19:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.176.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
        Validity
            Not Before: Jan 24 23:19:32 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46b6d-6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:29:68:6e:c5:38:37:5f:93:46:8d:ff:2f:
                    45:64:d8:6a:db:ab:9a:dd:17:66:a5:22:e7:77:f2:
                    cf:64:6d:fb:91:1a:56:50:cb:ea:c0:84:e3:51:bf:
                    0d:5d:c2:ff:db:d4:2f:7f:94:ca:22:98:d0:74:a7:
                    40:77:32:47:03:55:6b:a5:f0:bd:cb:e4:47:43:0d:
                    6e:37:b3:0d:af:ae:71:25:6b:3b:c5:ba:bc:21:cf:
                    03:eb:07:10:72:de:6c:e5:eb:90:95:6a:2e:ae:90:
                    d2:e1:0a:43:cc:ca:0b:f9:92:bc:98:1b:70:6c:8e:
                    9c:a9:93:01:ba:b1:a0:2d:24:b2:6a:26:81:2c:a8:
                    3b:a0:a9:92:78:52:cd:ff:9d:e7:a2:ab:f9:76:e8:
                    f9:80:9e:76:a3:4e:dd:69:8f:0c:74:34:c2:56:a8:
                    ce:00:9e:33:34:57:c1:3e:8d:51:2f:04:29:ac:89:
                    ff:e5:28:ba:23:26:a7:11:95:91:06:d8:d9:77:d0:
                    e0:2a:70:3b:09:8a:a2:f8:0c:55:ff:83:eb:53:d7:
                    74:04:c0:bb:b8:a6:d8:44:01:46:e2:8a:af:b5:5f:
                    27:65:b4:dc:e6:71:c2:44:66:bf:c5:12:e7:77:73:
                    3c:57:9d:f8:d5:59:3c:38:d9:28:58:01:51:da:9e:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7E:AB:3B:40:99:95:F9:77:52:2B:B2:89:31:62:46:44:EF:3A:9E
            X509v3 Authority Key Identifier:
                keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:14:99:65:e1:b7:2a:ea:a3:7b:c4:be:c9:13:fc:ec:aa:6f:
         96:fc:26:7a:3b:b7:bd:a1:95:3c:0c:f9:db:86:76:75:48:fe:
         f4:2f:37:57:a9:76:16:a4:4c:0d:10:64:34:35:6e:b9:e0:9e:
         4e:d9:d3:6e:cc:2f:7c:8e:d0:fc:1b:79:75:d0:61:88:2d:86:
         1f:99:61:26:3f:86:56:af:e1:ca:9c:02:83:a7:05:4b:24:3f:
         e8:cc:08:43:b1:a9:36:87:26:10:af:bc:ed:24:ae:31:07:fc:
         45:6e:df:37:ed:af:22:7f:32:1d:ec:83:97:5c:a1:8a:98:bb:
         05:a2:37:d4:38:02:61:78:de:3b:75:0f:0a:fe:71:bd:8b:8c:
         0c:f9:6e:f2:ef:e7:3a:bb:49:dd:30:d2:42:ce:a1:c9:28:d1:
         4f:ab:9a:c2:4b:b4:8b:18:32:7b:9f:d0:72:cf:60:4d:1e:ba:
         c6:99:9f:d2:21:bb:ab:14:94:75:b8:de:bc:a4:c1:79:6e:7b:
         7a:a2:1a:f2:ec:d7:d4:34:4f:69:e6:be:09:24:83:17:f3:3c:
         dc:ed:70:2b:65:1c:90:4a:24:d0:cc:a3:85:05:9a:92:64:4b:
         95:5f:7e:21:36:9c:1d:bf:41:27:33:f0:8d:a6:33:f4:28:3c:
         f0:99:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:00 2026 by rpki-client