Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
File:                     BC17B1DCB96311EDA3070C82C4F9AE02.roa (raw, json)
Hash identifier:          yx99PM/doynK6amMJCx4RnGFExv3AhkFjaVK6BVMsi8=
Subject key identifier:   B9:2A:0A:DC:08:4A:57:9A:1E:ED:6E:CE:FB:C9:2C:44:50:D0:DF:D8
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       040C
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:43:12 +0000
ROA not before:           Wed 22 Oct 2025 04:16:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136984
IP address blocks:        103.173.251.0/24 maxlen: 24
                          2406:5a00:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Oct 22 04:16:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a1ff-82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:05:29:84:3d:80:1a:bb:8b:bf:9b:e6:09:
                    8c:82:bf:3c:29:91:3d:18:51:72:7b:a0:7e:2b:5c:
                    52:83:9b:34:35:93:65:d5:ce:f8:f5:f8:a3:6e:51:
                    81:5f:57:3e:aa:e5:66:7a:73:b8:f4:51:0d:53:72:
                    20:3b:61:f2:cd:0e:7b:a4:50:73:28:2b:e0:c2:24:
                    e5:09:ad:7c:f0:17:0b:bf:cb:82:f9:13:3d:6d:06:
                    84:56:cf:e4:38:7c:30:0b:66:e1:4d:9b:ff:74:17:
                    b3:d1:80:32:10:06:78:89:a1:75:d5:78:56:88:89:
                    05:fb:5b:9f:49:e4:fe:10:b7:26:a1:26:7e:d6:a9:
                    4b:e3:78:f7:78:30:6a:81:d5:67:3d:7f:bb:2d:d7:
                    e2:50:8d:f9:14:2c:3b:a7:f1:b3:43:7d:a9:78:f3:
                    b3:32:2c:c4:fe:4e:5f:27:54:d8:b3:36:de:e6:ee:
                    59:1f:19:b4:af:f3:3c:73:72:39:40:5f:1e:b0:a2:
                    b9:56:9c:ec:0a:8d:0f:76:2c:ca:2f:18:46:d0:19:
                    e5:ff:16:c4:db:a2:58:20:f3:44:80:d0:51:6e:16:
                    00:59:81:0a:74:53:ee:c2:7d:b8:f2:46:8d:38:52:
                    37:38:a6:73:25:f0:85:49:f9:0a:65:97:c8:fa:d5:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:0A:DC:08:4A:57:9A:1E:ED:6E:CE:FB:C9:2C:44:50:D0:DF:D8
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.251.0/24
                IPv6:
                  2406:5a00:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:5c:91:de:bf:0b:3a:62:c4:1e:e2:bd:68:dd:2d:6e:dc:87:
         6c:e6:88:15:af:72:23:3d:16:91:05:ec:35:7b:13:85:e7:c3:
         4e:ba:1f:f7:39:47:f0:dd:91:24:48:50:d1:b0:b3:f7:9a:45:
         33:8f:f3:cd:4b:40:85:48:53:b3:4c:41:f1:7e:3b:d8:73:5b:
         0e:cc:9f:6d:56:d3:79:db:7d:59:50:7b:ac:6a:47:4f:a2:97:
         3c:99:1b:6b:9f:c9:d2:56:19:87:5d:4c:9f:ff:ea:a3:1e:07:
         2e:56:b0:db:8f:ce:40:b3:ef:b1:d5:71:5d:88:a2:c1:02:38:
         31:80:93:b6:86:b2:b1:ec:01:10:12:b1:29:05:79:56:8f:cb:
         6d:92:89:55:9a:9d:84:27:a0:09:6a:8c:11:8e:f4:1d:34:6d:
         f3:38:ec:50:09:31:1e:d9:f4:02:a6:a0:0b:f3:e9:6f:ed:33:
         58:bf:35:1d:57:43:3d:46:6b:05:3b:68:ab:2e:9d:3b:4a:b7:
         a4:25:02:c5:6d:35:5a:8d:a7:94:71:71:db:a5:bb:14:84:44:
         1b:42:fc:c2:40:de:a9:7b:9c:71:fb:a1:7b:71:63:c1:c8:80:
         9d:59:6b:a2:ab:ed:cd:e6:2c:27:e4:04:ee:83:9c:8b:ad:5d:
         1b:8e:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:44 2026 by rpki-client