Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa
File:                     5EA8A580F82E11F0AE78AF29396F56BC.roa (raw, json)
Hash identifier:          +/xBcOwxeRGe9p4TIWRAvYHBvEWmBaB3X+UstJRLVpE=
Subject key identifier:   2C:91:3A:11:90:06:3F:8E:25:A3:C3:61:AE:53:AA:C7:B8:60:D7:1E
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       191F
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa
Signing time:             Sun 01 Mar 2026 16:59:39 +0000
ROA not before:           Fri 23 Jan 2026 07:37:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.71.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6431 (0x191f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Jan 23 07:37:29 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4707b-05f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:0d:c7:46:15:4d:17:c9:34:35:0c:a3:bf:
                    5b:0e:b5:0a:db:50:73:14:b6:91:77:c8:11:85:2c:
                    fb:ed:3b:8b:a3:10:39:5a:1e:50:32:13:e1:71:7e:
                    54:80:a3:80:54:32:40:15:19:2e:1d:5e:7e:7d:ac:
                    1e:ad:d0:ea:69:46:3b:87:bf:59:15:ad:91:c0:6b:
                    0b:a9:de:d7:24:c3:47:ae:79:60:b9:7f:8c:9f:61:
                    6d:62:2a:05:17:58:44:db:c9:e8:dc:d2:d4:d0:62:
                    83:73:07:a6:53:37:f2:aa:2e:4b:64:7a:9d:a9:ba:
                    22:b2:73:67:67:34:af:1b:bd:60:a5:5c:2b:4a:20:
                    25:01:61:6a:0a:e9:d4:87:a4:13:3d:d3:a6:63:cb:
                    da:d8:8c:a8:59:07:fa:ed:e6:b3:eb:10:6d:1a:1d:
                    1d:3c:0e:19:67:a1:17:bf:ef:20:b1:a0:e8:e8:c9:
                    fd:55:c5:0a:74:0f:77:90:f4:0e:87:81:a5:4a:21:
                    7c:0b:75:3b:0a:ca:a8:90:7e:ba:11:1e:f9:f2:42:
                    c2:b3:e0:66:69:51:8f:f1:4a:7a:a6:e5:54:4c:c4:
                    54:af:a2:a1:4b:09:1b:5a:37:15:6f:f3:0a:32:88:
                    07:24:8a:d8:08:f9:8f:68:5d:51:92:a5:d3:be:44:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:91:3A:11:90:06:3F:8E:25:A3:C3:61:AE:53:AA:C7:B8:60:D7:1E
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:b1:ae:07:e1:95:41:dc:bc:df:e1:b2:4f:af:af:21:6e:
         66:25:2c:3e:a6:21:1d:b4:c6:72:68:c1:bd:3d:5c:cd:33:ce:
         e6:8f:bc:3d:64:63:8a:11:14:70:1b:87:e6:ef:f7:ae:5a:1f:
         0a:20:e7:1f:85:e0:e0:e8:dc:38:a5:b5:f4:5f:2e:6e:13:4a:
         1f:9d:f0:7f:07:a7:c1:0f:eb:a5:4a:52:55:b2:8d:d2:98:b4:
         f1:10:2f:89:dc:19:d9:a0:a0:34:9d:b7:27:eb:46:93:93:23:
         ee:6e:e9:d3:91:8e:29:fb:14:74:37:57:69:85:32:87:2a:cf:
         94:00:af:45:30:25:6a:d4:28:dc:03:78:4e:3a:a0:c6:60:92:
         fd:fd:60:bb:67:98:b4:20:e0:67:78:30:70:33:6a:77:14:a6:
         fb:dc:1b:7d:2d:17:20:4c:e2:47:40:94:4e:3f:9c:13:41:d0:
         ea:21:3e:ca:4d:46:f5:de:83:a7:8c:3d:3a:6c:ea:98:ad:bf:
         9f:bb:a9:30:c9:eb:55:18:db:3b:a3:33:92:38:1b:96:8a:b2:
         51:6f:a5:60:0f:8c:de:5d:fa:44:18:ff:02:c0:32:b1:26:d2:
         ea:10:99:67:b4:04:d0:2b:01:77:61:8f:58:2d:90:58:0e:6f:
         e6:51:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:59 2026 by rpki-client