Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa
File:                     3046CBE2C4E811EAB607D255C4F9AE02.roa (raw, json)
Hash identifier:          6ncKBCqo1ayjhGZxmAp9UT9uWl983hRZQCjMjOFuhy4=
Subject key identifier:   9F:B8:2A:1D:0C:E0:CD:B5:C8:25:68:8D:F7:6D:D1:25:4A:1F:7D:26
Certificate issuer:       /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Certificate serial:       08FD
Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:53:21 +0000
ROA not before:           Thu 04 Sep 2025 21:01:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140905
IP address blocks:        103.153.54.0/24 maxlen: 24
                          2001:df4:3480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
                          rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
        Validity
            Not Before: Sep  4 21:01:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a428b1-4cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:3f:b0:47:c8:bb:f3:75:a5:8f:cb:61:89:
                    cc:49:35:ae:69:44:70:c7:ad:aa:2b:de:14:3f:d6:
                    1f:99:b4:b5:d7:ea:47:e1:f2:30:ee:c5:1b:07:1e:
                    f3:08:98:95:da:b4:8e:f6:59:15:72:e8:fa:ab:14:
                    f1:6f:22:26:b3:92:38:12:8f:54:85:89:d9:45:e4:
                    d3:d3:ea:0e:39:b7:88:af:3b:69:f9:2e:76:fa:da:
                    6f:f1:56:18:60:97:a8:1b:bd:4f:38:0b:5b:8e:cd:
                    0c:80:6d:60:74:3e:19:00:e1:ce:1c:f5:97:67:75:
                    88:a5:0f:4e:78:ee:69:3f:10:16:8c:ad:f5:5f:28:
                    bd:b9:27:87:1c:51:3f:e5:02:7b:3d:9f:d0:d7:45:
                    f2:ea:a9:07:52:67:f9:f9:f6:0d:44:ca:11:ea:dc:
                    ff:4e:26:d6:d5:27:bd:3f:46:56:2f:7a:f6:36:53:
                    2b:23:5e:96:a0:d3:86:69:a8:bd:6a:aa:6f:f8:52:
                    83:05:1e:8c:93:f5:5e:cb:1e:78:82:ce:5d:07:35:
                    26:b0:91:b1:75:1a:15:c1:b7:6f:b4:d3:6d:ec:a4:
                    23:08:0d:50:6a:86:b9:80:67:42:30:0c:0f:bf:50:
                    b3:2b:9e:27:f2:c9:ce:e7:9f:bf:82:9d:45:57:65:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:2A:1D:0C:E0:CD:B5:C8:25:68:8D:F7:6D:D1:25:4A:1F:7D:26
            X509v3 Authority Key Identifier:
                keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.54.0/24
                IPv6:
                  2001:df4:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:20:b6:2f:b9:cd:18:9f:73:69:7f:b1:46:3c:46:97:5c:
         2e:bf:0c:06:8d:4a:79:24:71:cd:4e:bc:a2:7c:c5:80:21:34:
         41:d5:93:94:94:87:c1:57:14:16:44:d2:73:c4:81:80:f3:de:
         0f:96:6c:fd:07:31:60:e2:ef:68:47:01:0f:5d:44:5c:c4:50:
         f1:e0:68:3a:8f:9b:6a:a6:0a:df:a6:2a:0b:3f:30:fa:b1:2e:
         96:b1:44:82:41:ad:4a:59:4d:dc:67:da:30:f1:4e:c0:5b:86:
         35:47:8a:9d:db:c0:27:3a:8f:af:70:15:56:cb:31:b7:14:b0:
         42:9e:49:00:db:36:23:c9:0e:1b:f2:50:ac:e4:ee:1e:0e:ba:
         a5:2d:5f:b0:39:a4:8a:c1:f7:95:ce:55:01:4f:4c:e4:de:38:
         71:e5:39:42:2d:bc:d9:00:9f:cb:2c:84:90:0f:35:3e:31:ad:
         0e:80:46:e2:f8:d5:3c:d2:e6:d2:31:7f:da:3a:c4:74:69:30:
         bd:84:81:30:01:c4:36:db:70:8d:ee:eb:0c:44:97:9f:b2:a6:
         55:29:6d:95:2c:2a:fc:96:53:3c:4c:c4:ef:eb:eb:b8:ed:15:
         c5:5b:0c:f8:5e:23:27:b1:02:84:09:6d:79:0f:eb:60:f8:20:
         c1:c5:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:14 2026 by rpki-client