Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
File:                     B6DA2BD8E33F11EB9832A354C4F9AE02.roa (raw, json)
Hash identifier:          Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=
Subject key identifier:   E5:BE:99:B5:13:81:D0:41:02:67:8A:C6:57:D9:D7:11:0A:69:3C:8D
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       14F2
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:31:20 +0000
ROA not before:           Wed 02 Jul 2025 17:25:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137443
IP address blocks:        103.117.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5362 (0x14f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jul  2 17:25:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45bc7-32b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:c9:24:05:18:37:41:05:c1:b0:48:a8:c9:
                    59:f7:1c:91:9f:c8:a8:6e:90:40:66:48:bd:91:58:
                    41:ce:1d:41:5e:e3:76:30:27:91:5a:ea:7b:c0:a0:
                    ca:fa:28:61:bd:9d:03:99:4c:b9:e2:36:9f:3a:69:
                    83:7a:da:09:a6:1c:0c:c1:2e:a7:c8:dd:0b:dd:92:
                    ed:e2:8e:c6:53:39:f9:3c:c6:0a:bf:e9:2c:e5:76:
                    6f:44:12:d8:53:bf:0b:39:72:54:7d:c0:8b:3f:0b:
                    99:57:37:4e:60:fb:cb:c1:74:3a:1a:67:82:75:61:
                    d9:e8:74:0d:9c:52:dc:23:a9:b3:42:57:52:42:3a:
                    3c:b0:92:a1:0f:05:26:e3:f1:13:aa:cf:78:bd:16:
                    26:8f:c9:5c:fa:26:4d:58:15:23:87:8d:9c:43:2d:
                    24:23:d6:d8:4c:bd:dd:bd:6d:d3:84:15:a3:ca:3d:
                    69:ed:2d:e9:93:67:8a:e1:3a:f8:b3:85:30:64:60:
                    b3:a9:1d:aa:7d:72:5b:09:8c:0c:61:d2:bc:48:90:
                    c7:93:e1:e9:0c:62:b4:8d:3c:ce:06:d6:c1:fd:af:
                    c8:cc:3e:fa:89:15:af:75:45:66:09:c5:72:66:46:
                    2b:d8:1c:d4:49:71:b9:f0:a2:4b:ee:3a:19:4a:4d:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BE:99:B5:13:81:D0:41:02:67:8A:C6:57:D9:D7:11:0A:69:3C:8D
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:61:5b:17:cd:0f:08:27:ee:f1:ca:a7:86:ae:00:ca:c1:0a:
         eb:97:0c:c1:ab:52:a2:ed:81:73:c2:34:af:5b:92:74:56:0b:
         27:c6:e1:9b:7a:69:4b:f9:ba:0e:04:e8:31:dd:48:2a:d4:df:
         96:73:18:fe:6c:1b:d4:43:45:1d:b8:a2:5c:5b:4f:95:9b:a7:
         60:e0:a2:48:10:9d:2f:91:4b:dc:17:24:a1:f2:e7:80:82:66:
         ed:22:52:be:1b:cc:e0:46:66:3c:b1:f0:08:c2:4b:4e:07:15:
         84:97:cd:30:85:46:db:15:d7:98:8d:bd:d8:35:fe:08:ad:23:
         f9:3d:fc:ea:10:b8:c3:0f:70:16:9a:f0:64:47:1e:52:ed:7c:
         29:e1:2d:72:f3:19:49:ea:39:52:c6:26:33:4a:c9:9a:ee:59:
         2e:8c:b3:c1:4a:cf:af:d4:f2:f4:4b:b6:6a:41:6c:c5:28:6b:
         6b:87:bb:b8:89:38:1c:36:69:e2:a4:12:f5:58:59:9f:4d:f6:
         8f:66:3c:d4:fb:6d:31:04:12:bb:f4:4c:91:be:dc:c4:73:d5:
         a2:f1:2a:98:77:f3:2b:e5:62:95:2f:31:df:b2:e4:25:96:b4:
         5b:36:59:bd:e9:f1:63:86:a8:89:e2:d4:b7:83:fa:98:91:61:
         65:d5:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:12 2026 by rpki-client