Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
File:                     E5723CA260C111F0A9EB0333C4F9AE02.roa (raw, json)
Hash identifier:          BC+KU8wJ2jS4ogvCisW6wgAYDyOkrVx5FzRqPUWsIsw=
Subject key identifier:   C0:F7:D6:D3:9B:E3:04:36:4B:63:2D:F4:AF:1F:BF:BE:2F:3E:E7:60
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       7A
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:11:15 +0000
ROA not before:           Mon 14 Jul 2025 14:50:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151335
IP address blocks:        103.105.22.0/24 maxlen: 24
                          103.196.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jul 14 14:50:34 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e693-56ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:de:b0:5a:08:c2:dc:c0:10:a9:08:f2:09:
                    a0:20:24:30:80:83:ef:e2:d8:fd:4c:41:71:d5:b9:
                    20:3d:ed:44:f4:e7:53:bc:c5:2c:5a:72:41:cf:4d:
                    25:06:c2:15:d2:83:1a:8d:3c:f5:15:48:b6:f5:3f:
                    d7:b3:be:24:2b:db:bc:78:75:e0:4f:48:1c:f1:13:
                    71:ba:56:56:13:6a:bb:78:61:6e:e2:b8:c2:64:4f:
                    f3:62:0c:06:2f:4c:8e:89:d4:d5:71:44:51:a5:c5:
                    92:f7:a4:6f:f9:d9:ec:55:a9:0d:62:41:8c:fd:28:
                    7a:6d:59:f0:f5:c3:87:41:5a:ab:38:6c:44:18:f7:
                    7e:13:79:1c:9c:13:10:5f:7f:93:f9:b6:cd:d5:e9:
                    18:ba:15:38:6b:98:64:fc:7b:6b:fc:17:2f:5d:ab:
                    f0:9a:61:f5:7e:7f:f8:56:2e:21:f5:77:16:32:d6:
                    97:b1:24:3a:c6:4d:52:9e:c1:40:95:37:cb:ad:df:
                    93:46:f0:d8:f9:07:42:3a:a1:b9:a9:b3:6d:bd:66:
                    c0:cc:a1:61:93:79:e3:fe:b2:73:42:d8:8c:ef:22:
                    89:c5:e4:b8:69:7b:64:34:cd:d5:d7:a4:d5:90:6c:
                    65:2f:92:60:92:f0:cf:43:bd:ea:e8:d4:11:ef:8b:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:D6:D3:9B:E3:04:36:4B:63:2D:F4:AF:1F:BF:BE:2F:3E:E7:60
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.22.0/24
                  103.196.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:be:06:b2:a0:a7:ed:a0:e8:ca:ea:e9:d9:a0:cb:52:4f:
         71:54:91:70:92:fa:a3:20:83:8a:58:ea:9c:96:35:e6:04:00:
         71:8d:54:41:9c:70:37:ab:36:85:f9:41:fd:c8:80:91:30:e1:
         a1:30:5e:54:e4:19:01:32:63:cf:16:36:58:21:db:01:d9:5c:
         72:17:dd:c8:8c:9e:f9:af:9b:f9:bb:87:0d:f7:6b:8a:3d:23:
         44:34:7d:bd:7f:1a:04:53:4d:26:db:20:ea:09:a3:ac:c9:0c:
         c0:f5:f3:8e:48:83:15:18:82:93:9e:99:cc:d1:5f:47:69:84:
         3f:e2:fd:29:ab:0c:a8:a1:5a:04:00:ec:cd:68:66:eb:fa:6d:
         cd:b2:eb:39:7b:b6:fe:e6:da:44:4d:07:2a:31:da:52:46:28:
         60:30:1a:69:86:59:2e:16:4b:54:9f:8e:7b:c8:8b:34:d4:24:
         86:a5:ea:33:62:5b:56:f8:bb:37:fb:03:18:12:1c:88:d4:5b:
         b1:63:0b:db:3e:75:73:5f:12:69:bc:b9:ee:3d:c4:d7:3b:3b:
         58:62:dd:3f:a6:f9:58:b2:ab:f5:14:c2:c8:b9:a1:82:57:f8:
         3a:50:24:7a:df:72:79:56:85:f1:62:ad:ac:2b:30:ea:93:52:
         e4:10:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:55 2026 by rpki-client