Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
File:                     56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (raw, json)
Hash identifier:          hEapceNdpD29oYtj8D5vFPRo3w56yQR+tNzjULP+xIU=
Subject key identifier:   EF:47:16:59:F2:88:96:F0:B0:31:54:4F:05:B5:4C:C5:3C:01:B8:0C
Certificate issuer:       /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial:       012C
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:56 +0000
ROA not before:           Sun 01 Mar 2026 07:24:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.207.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
        Validity
            Not Before: Mar  1 07:24:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3e9c8-689c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:4b:3e:b1:b8:21:41:44:5c:87:c6:77:0a:
                    8c:b8:35:4f:9c:70:ed:5b:c5:3d:f5:60:e7:ae:f0:
                    2f:1f:be:4e:f6:a3:f7:aa:7f:67:df:9b:e2:da:c9:
                    fd:22:38:c9:ca:db:2c:63:f7:5a:d6:ad:73:8d:d5:
                    b8:75:e2:bf:ae:15:cc:68:22:94:5d:7c:17:44:3f:
                    cc:67:73:8f:67:0b:e9:85:91:f6:a0:a2:23:4f:50:
                    a7:91:0d:99:36:15:3c:5f:31:a2:20:33:63:ba:f3:
                    8d:60:f9:51:05:67:b4:30:e2:70:cc:67:5e:10:87:
                    ff:b2:ea:86:9f:0c:34:38:82:e1:d5:03:33:60:e5:
                    5e:a9:36:12:98:2c:8f:d3:2a:56:6b:43:f9:34:3f:
                    55:e9:2a:8f:67:7e:a0:60:f4:c3:84:18:7b:b5:71:
                    32:fa:b0:62:e1:2f:ff:7f:b2:28:36:ec:34:2b:21:
                    e5:c9:70:6b:aa:30:16:3d:3e:33:c1:ed:8d:eb:51:
                    03:0b:a6:76:e8:bc:83:66:3b:7f:4d:4c:51:4e:d7:
                    e2:c6:72:ee:b6:e9:e7:96:69:11:c9:9e:7c:42:2a:
                    fe:49:20:82:88:5c:9a:5e:f7:64:61:d8:ee:84:09:
                    96:95:40:af:25:69:d3:fd:c0:f9:00:25:af:80:07:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:16:59:F2:88:96:F0:B0:31:54:4F:05:B5:4C:C5:3C:01:B8:0C
            X509v3 Authority Key Identifier:
                keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:dd:5e:fc:cd:3a:2d:bc:53:9f:ad:59:42:26:c1:3c:f8:
         59:ef:74:08:f0:6a:8a:83:41:88:3f:99:26:1f:77:bd:78:15:
         fa:58:75:f9:cb:d9:fe:af:3c:f3:af:9a:d7:da:65:44:8a:21:
         5a:5a:2f:a6:8a:f0:84:e5:5f:6a:00:d2:f2:85:d9:8b:71:71:
         5e:63:63:7b:8f:58:30:cd:b3:a8:f7:a5:87:0e:a8:ce:41:57:
         16:e6:53:1c:86:97:a0:d1:c4:14:d5:40:09:74:c4:45:bd:0d:
         5c:22:64:2c:8e:6a:5e:73:b0:be:64:a9:3b:20:70:9a:2e:f1:
         6c:dc:ed:1e:f9:40:7a:3f:04:22:6c:1c:03:bc:d4:39:88:e9:
         6c:93:d0:92:30:3c:8a:7f:f5:72:79:b0:95:2b:3e:30:2d:fa:
         76:99:2b:3a:16:da:93:94:7d:8b:7f:a2:6b:bf:bb:88:56:10:
         5d:7b:4f:11:4a:9f:dd:b2:ed:51:52:4c:ed:f4:3e:6e:a8:2e:
         ae:54:51:f5:4e:aa:59:19:57:59:f6:fa:7c:54:e7:76:10:91:
         19:d4:b0:8c:e2:27:17:94:b8:53:48:fe:9f:5d:9e:b6:04:6a:
         f3:d6:13:97:7f:25:cc:6c:e1:74:23:03:62:39:06:74:53:0f:
         9a:67:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:30 2026 by rpki-client