Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/45CC5B763C8311ECA86D031EC4F9AE02.roa
File:                     45CC5B763C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=
Subject key identifier:   4D:73:F9:12:79:44:4F:BE:3F:E9:45:64:09:B7:F3:96:BA:A9:29:6F
Certificate issuer:       /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial:       054E
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/45CC5B763C8311ECA86D031EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:47:33 +0000
ROA not before:           Thu 05 Feb 2026 09:23:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9744
IP address blocks:        103.147.224.0/23 maxlen: 24
                          103.231.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
        Validity
            Not Before: Feb  5 09:23:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45f95-98f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:f9:93:e8:cf:89:9d:c0:b3:bc:f5:69:85:
                    3a:4b:4d:50:08:91:e7:8a:ad:d1:5e:7c:bd:02:bc:
                    a8:f1:ed:68:54:e7:c7:1a:03:d7:77:8f:dd:d2:13:
                    a3:ce:b9:d0:08:60:6d:26:8d:22:9b:e9:91:65:03:
                    04:5f:ca:11:bb:5b:86:88:08:d6:84:37:44:ad:ab:
                    99:34:4e:ec:8c:78:66:00:e7:e7:49:29:76:6c:cd:
                    e0:51:d1:87:a8:9c:59:2f:e0:4c:c4:0f:f4:d3:1a:
                    1e:89:f5:0f:60:c0:61:a6:f5:c4:90:32:3d:9e:09:
                    8f:65:0e:4a:a9:8a:c5:8b:00:80:2f:41:9c:d8:e3:
                    aa:22:54:ac:f2:72:0b:74:c9:74:88:c5:a8:df:3a:
                    9a:0c:a4:b5:df:a9:44:8a:a8:e9:0a:88:f6:00:08:
                    4d:54:35:45:cf:be:70:e3:db:84:68:e5:f7:e4:7a:
                    cd:6a:9b:da:b5:9b:6b:55:0b:ed:58:f0:35:76:fd:
                    1e:23:89:3b:86:e6:70:f7:78:f5:eb:c3:fa:e1:05:
                    98:80:cc:b5:32:e1:a4:84:06:c6:39:dc:3f:91:4f:
                    6f:3d:3c:12:ef:60:e3:91:14:75:03:f9:8a:dc:61:
                    60:26:3e:4a:a1:1f:6c:e4:3f:1c:df:b7:bc:66:62:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:F9:12:79:44:4F:BE:3F:E9:45:64:09:B7:F3:96:BA:A9:29:6F
            X509v3 Authority Key Identifier:
                keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/45CC5B763C8311ECA86D031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.224.0/23
                  103.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:94:36:af:a6:b9:e7:63:66:44:b4:ff:6f:11:49:92:67:
         e9:86:82:05:24:a8:68:c4:78:d5:62:aa:6f:a4:64:af:0c:13:
         df:00:97:9e:21:98:71:dd:7a:c5:fb:41:77:26:7a:8d:3b:0f:
         3c:db:98:f4:60:db:73:cd:31:c7:be:14:86:ab:aa:87:22:02:
         89:5a:57:0e:5f:f4:01:12:e3:89:3e:64:5c:cb:5f:2c:f0:7b:
         e8:8d:e2:75:6d:bf:8d:b2:f2:db:5f:3f:d3:8a:6f:ef:91:f7:
         a7:c0:ee:d0:86:86:c9:bd:6b:b7:7e:0a:93:73:39:d3:a6:3e:
         0b:39:78:cb:7b:4b:ab:74:b0:31:aa:16:26:b7:96:7d:7a:d6:
         1e:bf:8a:45:04:8c:8b:98:96:4e:da:a6:bc:a8:a6:c6:f1:f1:
         b0:96:71:db:fa:86:7d:65:03:3e:1f:20:1a:c0:58:56:fb:4b:
         b4:9e:41:3c:8d:a0:58:ab:ce:f2:ea:13:3a:d8:f9:08:c8:00:
         30:29:0d:0a:19:8a:b6:31:b2:11:99:8a:a6:6d:3e:81:c2:e7:
         a3:65:67:07:12:a6:aa:42:a2:2b:f2:c3:b0:d8:4d:e6:7c:8b:
         cc:ab:a9:e4:e9:56:ee:89:46:03:36:25:03:14:91:79:27:af:
         e5:0f:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:22 2026 by rpki-client