Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
File:                     B5D3426854F111ED85A7AC66C4F9AE02.roa (raw, json)
Hash identifier:          FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=
Subject key identifier:   02:F1:82:59:60:F6:9B:FB:24:C0:F7:47:3F:70:26:D3:A1:A8:A7:F3
Certificate issuer:       /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial:       0B70
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:10 +0000
ROA not before:           Sun 20 Apr 2025 19:49:02 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140216
IP address blocks:        103.148.178.0/24 maxlen: 24
                          2001:df2:e180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
                          rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 19:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
        Validity
            Not Before: Apr 20 19:49:02 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42702-98dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:10:62:fa:35:c9:78:33:b1:55:f2:3e:83:
                    db:83:07:fc:5d:84:47:64:be:4b:be:d5:02:61:2c:
                    1e:73:d5:5c:00:fd:0c:e1:d9:ea:b3:85:69:f7:a1:
                    39:c2:49:4f:90:01:e2:55:a5:01:cc:ec:b3:df:c5:
                    77:6c:a5:09:5c:31:a1:68:4c:56:26:ee:1e:a5:8e:
                    79:bd:61:12:0f:c1:a2:9d:7d:89:e0:05:a6:26:90:
                    a1:53:a5:7f:6f:43:f1:bf:59:22:0d:af:af:d0:66:
                    61:fa:73:69:a8:39:54:0d:3d:f4:a5:c2:2f:40:e3:
                    7c:0b:88:17:31:79:08:d1:bd:b3:48:25:5f:05:e4:
                    f9:f1:68:0a:68:82:1b:a0:00:f1:8b:82:b1:56:1c:
                    08:8b:15:91:2f:d2:e4:ee:57:53:c8:a7:fc:19:62:
                    01:39:13:aa:49:3d:fd:f1:08:26:91:d2:26:db:64:
                    af:04:7d:c9:0b:ae:f9:f2:39:b7:3a:5b:60:7c:7f:
                    7f:c8:59:fc:77:a6:0e:7e:91:a3:7c:9d:72:45:81:
                    e6:9b:f9:d6:a1:1d:00:00:bd:38:27:25:60:fe:aa:
                    3c:5e:be:e1:58:3a:7d:b4:96:c5:72:a5:9d:1c:50:
                    5b:40:4f:bd:83:ef:6d:84:73:10:06:1e:95:a0:2c:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:82:59:60:F6:9B:FB:24:C0:F7:47:3F:70:26:D3:A1:A8:A7:F3
            X509v3 Authority Key Identifier:
                keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.178.0/24
                IPv6:
                  2001:df2:e180::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:f0:8d:f0:d7:48:fa:35:7e:58:ef:7d:0f:4c:26:17:f7:
         19:ac:7f:52:73:5a:10:57:41:e7:20:21:fa:3f:68:c0:26:9e:
         06:69:97:26:87:0b:0e:f4:c6:c0:65:da:3a:16:2c:13:cc:7c:
         09:d5:ef:8b:e6:84:40:e2:31:26:ca:40:25:79:3f:87:92:d1:
         39:80:e6:82:c1:6f:6f:bc:67:69:8f:81:6f:0f:24:b3:19:5c:
         df:5e:d6:0d:33:9f:ff:a7:14:70:88:2a:e3:54:a3:22:dc:8d:
         4e:f4:89:ef:f9:a6:fb:de:eb:97:6c:e0:17:85:29:73:56:b2:
         3d:94:0d:0c:d3:ff:16:d0:fd:16:31:0d:0a:77:b9:2e:5a:a1:
         50:32:54:7a:da:59:16:2a:d6:ca:af:72:79:69:5f:78:9c:ca:
         f9:56:46:f7:e0:fc:b2:ef:4f:e8:7d:19:e4:7b:39:ab:43:51:
         f7:10:a5:4a:bf:f8:eb:e6:37:f1:ba:55:7d:67:38:cd:38:17:
         d1:f6:a5:67:9c:67:93:2b:e5:a2:4c:28:fe:79:ed:5b:af:63:
         de:2b:de:01:3f:ab:22:30:7e:d6:96:f6:6a:6a:f6:93:58:9e:
         f2:97:84:23:94:6c:91:f6:b6:41:5c:51:dc:81:c0:69:20:7d:
         11:a1:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:33 2026 by rpki-client