Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/631E45669D2511F092B08685C4F9AE02.roa
File:                     631E45669D2511F092B08685C4F9AE02.roa (raw, json)
Hash identifier:          1Rw9i7rb41bC8teZOhnIM2irj9ZN6lPefYHAKfVyVtA=
Subject key identifier:   15:91:5E:D7:41:14:C5:AE:37:F5:44:E8:8B:A7:FB:1B:30:5C:5C:20
Certificate issuer:       /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial:       0AB8
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/631E45669D2511F092B08685C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:46:53 +0000
ROA not before:           Mon 29 Sep 2025 11:13:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141433
IP address blocks:        103.149.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
        Validity
            Not Before: Sep 29 11:13:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4515c-d746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:44:42:4c:f9:ba:20:76:69:d8:ae:13:a5:
                    d0:8b:b4:b8:8e:0f:ac:6b:72:a6:ce:7b:a0:7b:98:
                    32:98:da:52:a3:7b:0c:9c:59:9c:cb:26:fd:6e:fc:
                    0c:2d:8d:56:cd:cb:8f:a9:fa:b1:ae:3e:08:22:11:
                    73:d1:18:34:a5:63:c5:cc:9a:27:eb:26:2d:55:fb:
                    f1:bf:b8:37:ea:42:71:03:e0:b1:1d:24:63:1c:42:
                    6c:06:aa:4e:b6:b1:26:cc:3d:a3:b2:0d:d5:bd:6c:
                    47:06:1a:a0:dc:7b:18:fa:66:c1:47:dd:4d:02:62:
                    dd:0f:b0:82:83:e7:70:03:62:a9:46:d6:37:fd:9b:
                    97:e7:5f:14:ee:b9:23:1e:86:c1:4c:17:1c:a6:36:
                    89:5f:df:46:bd:c0:c4:ac:1f:1e:64:cb:36:2c:b7:
                    d8:b9:24:1e:87:ad:e3:21:d6:a8:52:13:84:49:c7:
                    80:dc:44:d6:26:fa:dd:53:15:18:ed:7b:c0:f5:10:
                    d3:15:1f:2e:26:6a:39:8f:f7:a1:88:0c:52:e6:19:
                    d8:39:57:80:2a:9f:e7:1d:e1:62:1d:a2:95:a0:a3:
                    69:ea:02:23:dd:dc:a7:82:78:e1:ee:06:45:e6:26:
                    66:a0:a5:d2:bc:c4:02:ee:e6:d5:52:a2:c9:ed:a9:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:5E:D7:41:14:C5:AE:37:F5:44:E8:8B:A7:FB:1B:30:5C:5C:20
            X509v3 Authority Key Identifier:
                keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/631E45669D2511F092B08685C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:38:90:6b:fd:a2:e6:8a:37:b3:88:a9:87:fc:fd:0f:3e:
         b3:36:26:30:b4:dc:b2:e4:d0:54:e4:88:8e:07:05:a6:e4:37:
         ff:71:fb:66:3a:c3:fd:98:4c:cb:54:3e:c5:da:69:aa:11:44:
         2f:b6:23:19:62:22:6b:ea:15:85:22:34:09:d7:79:90:61:e4:
         d3:24:62:d2:88:42:4f:5b:b7:cf:94:59:4e:a8:b5:a5:65:03:
         1c:fb:e0:27:49:f8:7f:33:3b:64:38:32:92:4f:77:c2:76:cd:
         8c:68:f7:9b:4c:bb:97:92:d1:71:09:d4:9a:c9:fc:f6:30:e5:
         18:62:f6:bc:ec:87:c6:bf:67:36:42:02:4a:bc:d0:2a:71:06:
         48:a5:71:f4:5f:a4:87:f4:0f:58:48:3a:64:96:70:01:6a:bd:
         8d:f1:45:26:4d:af:15:18:76:bd:3f:b6:c3:de:71:53:4a:13:
         5c:43:c6:07:ce:b7:5f:75:f9:7e:61:15:cc:16:7a:e4:ef:ab:
         b7:82:31:ce:e6:03:4e:6a:12:91:a1:90:bd:e9:af:95:f3:0d:
         6a:23:90:08:d9:11:00:cf:18:fa:c2:a4:08:65:0f:32:38:c9:
         39:27:6e:44:6d:40:96:61:13:03:67:37:17:b0:55:5b:a2:ce:
         94:93:ba:49
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz
QzI5NTUyODMwHhcNMjUwOTI5MTExMzU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTE1Yy1kNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk9JEQkz5uiB2adiuE6XQi7S4jg+sa3Kmznuge5gymNpSo3sMnFmcyyb9bvwM
LY1WzcuPqfqxrj4IIhFz0Rg0pWPFzJon6yYtVfvxv7g36kJxA+CxHSRjHEJsBqpO
trEmzD2jsg3VvWxHBhqg3HsY+mbBR91NAmLdD7CCg+dwA2KpRtY3/ZuX518U7rkj
HobBTBccpjaJX99GvcDErB8eZMs2LLfYuSQeh63jIdaoUhOESceA3ETWJvrdUxUY
7XvA9RDTFR8uJmo5j/ehiAxS5hnYOVeAKp/nHeFiHaKVoKNp6gIj3dyngnjh7gZF
5iZmoKXSvMQC7ubVUqLJ7akXBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBWRXtdB
FMWuN/VE6Iun+xswXFwgMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw
NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJBQUUvNTc1MzdENUU3MDQ1MTFFQThBOTQxRDFBQzRGOUFFMDIvNjMxRTQ1NjY5
RDI1MTFGMDkyQjA4Njg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5VpMA0GCSqGSIb3DQEBCwUAA4IBAQBySziQa/2i5oo3s4iph/z9
Dz6zNiYwtNyy5NBU5IiOBwWm5Df/cftmOsP9mEzLVD7F2mmqEUQvtiMZYiJr6hWF
IjQJ13mQYeTTJGLSiEJPW7fPlFlOqLWlZQMc++AnSfh/MztkODKST3fCds2MaPeb
TLuXktFxCdSayfz2MOUYYva87IfGv2c2QgJKvNAqcQZIpXH0X6SH9A9YSDpklnAB
ar2N8UUmTa8VGHa9P7bD3nFTShNcQ8YHzrdfdfl+YRXMFnrk76u3gjHO5gNOahKR
oZC96a+V8w1qI5AI2REAzxj6wqQIZQ8yOMk5J25EbUCWYRMDZzcXsFVbos6Uk7pJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:22 2026 by rpki-client