Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
File:                     73381ABCAB3611EF809A470EC4F9AE02.roa (raw, json)
Hash identifier:          JEaiZr/vIWf33rGLI7hmXgcs/gPF50+Egd4wmV10D1w=
Subject key identifier:   56:2E:0D:34:0E:9D:0F:9A:B6:83:EB:D1:84:12:FC:F3:69:D0:92:0E
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       0661
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:36:46 +0000
ROA not before:           Tue 13 May 2025 14:06:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152700
IP address blocks:        103.136.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: May 13 14:06:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46b1e-cb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:e7:4c:99:5d:71:e1:34:a9:44:e1:fe:7d:
                    20:8f:7b:ce:56:a2:19:71:47:68:21:ab:d7:5f:6a:
                    2a:57:d5:64:b5:67:39:3d:8a:02:7f:41:0d:7a:0d:
                    a9:d9:86:68:f3:79:2c:7c:0d:78:a3:a2:4f:78:de:
                    f0:5a:dc:d8:68:1b:47:78:87:32:fe:b7:df:4c:1b:
                    94:b9:ad:57:bb:b2:9f:46:cd:aa:d6:1e:cd:4f:0d:
                    ee:c0:c8:d8:1d:01:f4:96:54:ed:57:6a:b9:98:bd:
                    01:03:92:de:c2:62:a4:60:03:4f:a5:11:3c:c7:d4:
                    93:57:87:55:bd:c4:4e:24:ad:b7:c0:a0:09:1e:df:
                    bd:16:73:65:9d:97:b0:70:41:18:15:ea:70:f1:b4:
                    75:6c:49:2e:31:b2:e3:5e:09:8e:a7:ac:77:42:48:
                    d5:70:69:38:ff:36:35:09:80:39:45:8e:4b:3d:7f:
                    b2:a8:d9:51:53:b1:61:31:dd:f3:c9:71:95:c0:49:
                    df:4c:b6:71:be:57:3e:af:90:36:8d:a4:ce:bd:75:
                    3e:58:56:c9:9f:e4:30:00:76:9d:a7:f0:80:e7:5a:
                    08:78:f9:c4:b8:b2:bb:60:55:c7:81:b2:23:a9:5d:
                    2e:4c:68:84:ef:36:e1:d2:b8:98:38:61:b4:25:9b:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2E:0D:34:0E:9D:0F:9A:B6:83:EB:D1:84:12:FC:F3:69:D0:92:0E
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:78:56:98:0c:25:b8:32:61:3e:3b:b3:61:dc:c9:59:8f:
         53:ea:71:94:30:db:67:44:3c:3b:74:69:d2:70:cf:b7:cd:54:
         e8:a0:47:33:bb:8c:1f:b7:f8:2a:f9:e5:e7:77:44:d9:fd:75:
         d0:11:f7:c6:a6:1c:36:02:33:47:c9:1e:4a:3e:65:7f:ea:6a:
         03:c7:63:5d:32:a4:e6:46:ba:47:c1:ef:68:ab:86:d3:ca:32:
         af:d7:84:d2:60:b8:27:6e:a2:57:02:9e:5e:f7:4a:ea:6d:30:
         ee:da:88:0b:6c:55:f3:66:a0:02:7c:2c:f4:fa:59:38:fa:b4:
         15:3a:88:9b:15:aa:d2:55:4e:10:d2:d7:15:7e:78:a6:b9:0d:
         d2:d9:da:a4:77:ed:d7:a2:90:f7:7a:4f:cc:e4:71:d6:25:58:
         53:1e:3f:c5:e3:3d:78:42:b3:0c:01:8f:a3:d1:2e:50:bc:72:
         a2:93:c1:6a:ae:72:cd:61:3d:96:34:c3:75:e0:fd:36:07:e9:
         2a:7a:ae:60:22:63:5f:6d:97:58:86:a3:5b:42:8c:34:57:5b:
         45:d3:b7:a2:a8:83:cb:a9:9b:d2:98:d5:51:f1:71:f6:26:42:
         df:73:c1:75:65:57:18:22:5f:d6:eb:6c:bb:8e:da:bb:98:b1:
         ab:0e:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:51 2026 by rpki-client