Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa
File:                     5B1534BE29E011EB80A2FF13C4F9AE02.roa (raw, json)
Hash identifier:          BRsqV4LD/aFLzJrZAhTNVw5XIt5HwVhvuFWv19p68J0=
Subject key identifier:   BE:57:6E:29:CA:97:C3:53:57:7E:D6:B6:70:0F:46:BD:41:89:AA:96
Certificate issuer:       /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial:       08BA
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:11:16 +0000
ROA not before:           Fri 19 Dec 2025 16:52:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140980
IP address blocks:        103.154.16.0/24 maxlen: 24
                          103.154.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
                          rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Validity
            Not Before: Dec 19 16:52:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47334-f0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:f0:5c:a3:d9:9f:c5:f3:ee:e9:d2:6c:2a:
                    4d:ea:bd:ee:e6:66:15:92:ae:a3:2c:9b:9a:ac:4e:
                    3e:f5:59:f5:0c:1b:22:00:dc:bf:60:79:cb:11:bd:
                    8e:e1:d8:dd:a0:fa:21:54:ca:29:4a:40:33:2e:7a:
                    5d:9a:ba:ab:20:51:8b:24:fe:23:bb:c8:1d:67:16:
                    a1:7c:5f:ed:f1:9a:4a:75:c3:b6:d9:a0:0b:5a:e0:
                    b0:ba:ce:4d:68:fe:75:a6:81:aa:e5:53:80:c6:4c:
                    9e:4a:f6:b6:88:18:92:7b:75:12:dd:7a:cc:39:86:
                    8f:b7:68:ca:eb:ec:18:6d:20:27:07:78:6e:ed:cf:
                    81:b9:b2:1f:bc:81:d7:09:43:15:c4:de:20:a3:cf:
                    1b:3e:99:ee:58:a5:3e:c4:8c:8d:32:38:95:60:29:
                    b4:83:b1:4e:3e:33:9d:f6:ea:b5:95:76:33:f0:21:
                    4b:1c:84:a4:4a:88:48:ca:20:38:9e:b1:a7:74:92:
                    6d:85:91:ab:e7:b2:07:5e:e2:ad:10:d9:30:a5:12:
                    8a:1c:59:5f:26:75:4c:1b:ff:7d:d2:3b:66:96:8b:
                    3c:b9:c8:59:1a:7f:fd:a6:7c:67:16:2f:44:2a:28:
                    c6:51:77:20:a4:5e:ac:3b:12:1e:9a:94:b9:ce:ce:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:6E:29:CA:97:C3:53:57:7E:D6:B6:70:0F:46:BD:41:89:AA:96
            X509v3 Authority Key Identifier:
                keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:02:95:6e:9e:c5:08:92:61:0f:dc:46:d8:26:50:47:44:
         9a:22:4d:00:a4:07:e8:04:e2:f7:b1:69:05:83:b2:93:11:db:
         42:36:78:86:3b:37:72:5a:c6:79:d9:86:50:ba:24:c7:d0:f2:
         27:0e:d2:87:65:ca:98:c3:cf:fd:39:30:ce:85:7b:69:e0:4f:
         38:96:f6:0d:21:5f:56:bd:f7:0d:53:1e:85:5e:02:9a:2e:67:
         55:d6:ab:99:29:b0:d0:ac:7a:f6:86:b9:01:f4:a0:2b:48:f0:
         2d:8b:fa:14:ed:1d:dc:1b:e5:e8:7d:1a:23:d1:53:6c:03:41:
         8e:5d:50:e9:84:6c:2c:29:a2:b9:fe:5d:78:b4:76:69:1b:f9:
         c4:f2:39:7b:f3:ae:ba:2f:43:1b:e1:a5:50:9f:5f:1f:2e:d3:
         8b:cb:d5:9b:7a:57:62:71:f7:a8:c6:b2:eb:40:96:06:b0:27:
         7f:6f:34:d0:74:11:35:be:01:a0:ba:d9:85:14:a7:89:21:26:
         21:12:d4:a4:6f:11:30:74:06:71:37:76:36:ae:d5:45:de:6c:
         7e:10:a9:61:7f:9b:ef:d8:97:4a:8e:32:47:4f:a6:04:d9:f0:
         b8:d8:3e:8c:40:02:ad:55:5c:52:14:5e:e8:b9:ee:11:51:15:
         de:ac:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:49 2026 by rpki-client