Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
File:                     F164038CBBE211ED8685DC61C4F9AE02.roa (raw, json)
Hash identifier:          KI77GgT+UX9jlaO4DgV6Wg7UQcHDXz/g2286KEtVD+Q=
Subject key identifier:   7F:30:EA:D6:03:30:0D:3C:2D:4B:18:9C:AC:7E:2B:3C:EB:C9:A7:53
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       06B8
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:48:09 +0000
ROA not before:           Thu 10 Apr 2025 23:03:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     54415
IP address blocks:        103.99.169.0/24 maxlen: 24
                          103.99.170.0/24 maxlen: 24
                          103.99.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Apr 10 23:03:55 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40b59-7b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:ca:02:ad:0d:b1:ad:3e:b8:e1:cb:a1:4c:
                    32:4c:2b:21:1b:6f:b5:5f:6c:08:91:26:1c:13:50:
                    70:80:36:fe:39:b7:8d:e5:96:96:06:bf:1d:87:e1:
                    ec:e8:7d:8f:9b:e1:61:d0:c8:2d:41:a9:77:d4:ba:
                    47:9f:c7:55:27:33:42:7d:9b:e0:b1:dd:96:02:d6:
                    4b:ea:70:3c:d6:a8:be:2c:63:3c:1e:9a:ae:21:5f:
                    01:b9:5b:f8:55:15:df:57:a6:45:2d:af:af:0a:f6:
                    d3:a3:9d:9b:d8:d3:d7:ae:1b:7f:85:e1:02:f0:98:
                    41:89:17:53:53:6b:f6:2f:ee:75:5a:0f:91:98:63:
                    a2:4f:f0:b2:bf:cb:af:7f:9a:ac:4c:8a:33:3b:e8:
                    b4:ed:c1:83:1e:bd:36:85:b8:f4:e3:4b:e0:50:b3:
                    dc:e7:ae:72:64:9f:b2:3c:31:bd:0c:f3:8a:9d:86:
                    4a:39:7e:8c:15:af:5a:17:7d:70:f5:ac:b8:b7:a1:
                    71:b4:a4:63:62:5a:19:4b:2a:58:45:b1:ec:95:97:
                    5a:f2:c7:72:a6:8b:9c:9b:40:cd:65:05:b2:83:3e:
                    8c:ba:49:2c:34:7e:41:8e:b2:0d:90:e3:7e:77:61:
                    2f:c8:39:22:3d:cf:19:4c:ce:c1:d5:f7:1c:46:21:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:EA:D6:03:30:0D:3C:2D:4B:18:9C:AC:7E:2B:3C:EB:C9:A7:53
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.169.0-103.99.171.255

    Signature Algorithm: sha256WithRSAEncryption
         51:30:14:50:2d:6b:02:1d:e7:c1:80:bd:74:95:e0:c5:72:27:
         52:1c:e1:53:4e:1a:a0:09:9e:56:3a:92:b9:ad:e9:97:ba:79:
         17:4a:80:4c:00:df:99:cb:6f:7e:4e:79:2c:a7:61:2b:0a:a8:
         f0:4a:21:8c:78:bb:7a:95:49:9a:59:40:72:40:03:68:73:0b:
         7c:4c:7c:2c:bc:db:28:96:a9:59:6e:a7:f3:16:6d:63:02:a9:
         a6:c9:78:10:fd:d0:b3:f8:46:78:8a:55:41:eb:9c:6c:b0:50:
         39:9b:e3:26:2e:3c:e8:07:6f:8e:a8:00:e8:f7:3c:95:5e:20:
         2b:2a:a6:27:21:92:cc:0d:94:61:18:8c:95:57:3b:81:74:60:
         67:d5:b9:92:4e:3f:ee:fa:69:cb:8a:cb:f6:dd:b7:2e:89:b5:
         c2:e7:60:66:de:84:9f:0e:6e:0f:81:56:18:b9:f1:6f:1f:d9:
         19:0e:8f:43:01:f7:2b:40:ff:75:5d:40:5d:12:b8:15:07:c1:
         e3:f7:10:c7:20:54:b3:7a:c7:22:15:8f:08:49:03:3e:82:bc:
         97:ca:6b:46:6d:bb:78:e1:eb:c6:74:dc:67:4a:6e:21:43:42:
         dc:b2:6d:c4:30:d5:c8:92:22:60:4b:15:7b:07:0b:b8:4e:a5:
         fb:34:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:26 2026 by rpki-client