Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa
File:                     25E05BFAE59911F08BE09E95496F56BC.roa (raw, json)
Hash identifier:          7Dc2AtEsf6aBF7XhcXrMJcrGOdOWXy6AgaDnVQ5wHFY=
Subject key identifier:   59:B2:C4:27:E8:02:44:63:26:6F:84:28:7C:50:35:A3:20:37:68:6B
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       057B
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa
Signing time:             Sun 01 Mar 2026 17:51:45 +0000
ROA not before:           Tue 30 Dec 2025 16:03:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58821
IP address blocks:        103.134.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Dec 30 16:03:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47cb1-2870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:f6:b6:bb:dd:62:ed:c0:6f:34:27:02:b8:
                    2e:fd:3c:0b:45:25:ad:e2:30:1e:40:f0:c5:13:5f:
                    f5:ff:ed:6d:82:e2:f7:75:43:f0:31:4b:09:b5:4f:
                    ae:05:df:a4:da:c5:f0:0f:64:4e:3d:8d:da:ee:3f:
                    9b:44:a2:5c:6f:2b:53:dc:95:a4:05:18:fc:b1:e6:
                    34:c8:7f:19:d5:fc:ea:2f:fb:94:89:ad:72:aa:17:
                    6e:95:fc:b4:ca:41:f8:21:4a:1e:f1:0e:98:36:9d:
                    fb:98:0f:12:5e:b6:3d:64:5e:87:4a:6c:fa:2a:77:
                    0a:d3:60:e5:89:4f:0c:c0:88:07:4d:e9:40:64:b0:
                    0a:d3:28:43:a5:ad:33:9c:d6:c9:16:84:05:eb:4d:
                    a3:5a:d0:05:0f:60:e5:0b:8e:72:33:1c:c9:8f:93:
                    dc:47:25:9f:fe:ff:ff:86:8c:8d:a2:4b:20:56:51:
                    6b:2a:a4:b7:51:49:e1:52:53:b4:7a:44:5f:9e:ef:
                    32:41:f4:d2:66:f5:72:01:f2:9c:d1:71:ed:e1:09:
                    7d:71:1d:5c:11:77:4f:bd:7e:e0:f8:a2:a4:23:40:
                    5c:ce:4f:74:50:6d:9f:eb:e3:df:3a:b3:a0:63:b1:
                    66:45:15:ac:fa:af:d5:87:d6:5d:ec:1e:fa:44:ca:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:C4:27:E8:02:44:63:26:6F:84:28:7C:50:35:A3:20:37:68:6B
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:bc:48:7d:c7:d8:e8:4b:64:07:fc:4f:a2:af:ef:af:9c:
         a3:f1:de:e6:8f:6e:62:f0:0b:13:b4:4f:3e:56:31:18:0e:33:
         6e:18:50:cb:24:56:4f:2f:79:81:98:99:34:95:30:47:bb:4c:
         d1:c2:81:25:c9:4b:70:fe:53:e0:83:4c:dd:c9:70:ec:a8:c9:
         44:35:97:f6:97:c3:f9:ee:74:24:e6:d2:23:79:b5:27:78:d4:
         1f:ed:7c:b0:62:89:9f:05:f9:03:a6:2c:45:32:df:29:30:8b:
         0f:94:17:45:a0:8e:43:0b:7b:3d:a6:a4:70:0c:a8:00:43:32:
         35:3e:ab:a3:83:df:0d:de:e8:39:b8:4d:95:b8:e0:10:c5:36:
         24:19:06:1c:b3:dd:d8:cd:54:4d:c9:f9:49:03:9f:66:8e:e2:
         1d:ba:cb:08:ea:e8:65:c8:9c:0a:ad:dd:12:d3:94:7a:f8:be:
         4e:32:19:39:c9:f6:da:5f:4b:e0:57:25:74:6f:25:69:7c:9e:
         49:db:f4:59:00:1a:99:02:1c:ab:b3:7b:d6:27:59:48:75:ef:
         60:ca:1d:db:c2:18:92:8a:8c:8d:e2:d3:3a:d5:0a:11:40:f4:
         0b:62:06:61:d2:a5:17:b3:ea:3a:d6:b9:d4:c0:25:25:5c:0c:
         35:79:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:43 2026 by rpki-client