Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa
File:                     B662717ADC6611ED89F0804EC4F9AE02.roa (raw, json)
Hash identifier:          vD8YWm4rifRNJCMBsEaKMM+k7J5n233mbbuvixnfa68=
Subject key identifier:   1E:C6:E1:0A:6B:E8:BC:BF:5A:A7:D5:E8:FE:74:61:D6:6C:5D:5C:54
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11D9
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:34:14 +0000
ROA not before:           Wed 02 Apr 2025 17:46:33 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150452
IP address blocks:        103.135.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4569 (0x11d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Apr  2 17:46:33 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47895-1466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:5f:c0:b7:aa:9c:ea:41:18:0b:12:64:5e:
                    76:8b:cf:8e:38:65:b0:81:98:1d:8c:c9:2a:28:c3:
                    2b:84:c5:d9:85:ec:3f:8d:76:9b:84:b9:1e:60:6a:
                    43:86:b7:03:bd:e2:d1:b0:1c:f4:39:ba:c5:13:60:
                    10:04:b2:1c:ef:a8:a4:74:53:3b:a8:8d:32:2d:5c:
                    ec:24:d9:65:e0:4a:34:63:13:d4:03:88:e9:af:d1:
                    bf:54:8a:ae:80:05:74:07:2a:7d:7d:5e:74:ad:25:
                    10:fb:fb:47:e0:24:dd:85:29:46:e7:09:2b:50:b7:
                    32:9e:9e:0b:a1:cd:53:fe:c4:f5:fb:93:ac:6c:ad:
                    23:8a:c0:24:6f:7d:a2:0d:37:dc:9a:46:97:69:58:
                    70:98:7a:47:6b:8b:21:70:d7:7d:bf:25:a2:fc:67:
                    59:89:2e:3c:af:2b:83:23:73:0d:93:8a:e0:32:bf:
                    c5:e7:14:6d:ad:b4:95:27:44:5b:1d:75:9d:c4:1a:
                    d5:81:3f:29:ac:45:39:0e:b7:c7:0f:54:a3:3b:15:
                    2f:b9:5e:13:e4:a4:42:fd:74:96:d4:1f:57:49:24:
                    5a:ef:5f:4b:3a:da:72:3c:07:e9:d1:91:db:b9:02:
                    b0:7e:21:54:49:a3:93:72:b4:3f:e1:44:e7:8b:4d:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:E1:0A:6B:E8:BC:BF:5A:A7:D5:E8:FE:74:61:D6:6C:5D:5C:54
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B662717ADC6611ED89F0804EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:c7:3f:0b:63:ef:07:cd:dc:c4:f2:47:2f:d6:74:30:09:
         dd:de:bc:19:25:56:4d:b2:66:7e:31:09:e5:35:b5:29:69:69:
         7a:44:04:dc:69:fd:37:d0:14:09:52:d3:11:3d:3f:ec:53:ce:
         55:89:c1:a4:7e:5f:42:65:f2:0b:68:b5:07:5b:19:fd:a6:62:
         62:c1:f5:bb:42:e4:7e:95:6b:34:19:5a:37:03:73:8e:39:be:
         eb:b6:79:43:75:7e:b1:8c:0a:ab:12:3e:b3:d6:db:f7:3a:0e:
         dc:8c:17:23:93:f7:09:a2:d9:5a:79:e7:2d:57:3e:a8:92:80:
         6f:9d:44:58:74:db:f7:be:27:b5:d3:7d:88:a6:b5:05:f2:68:
         29:46:54:e9:64:ba:9c:39:e0:eb:fd:b2:e2:20:c9:e8:ee:21:
         71:eb:ec:99:eb:0c:a1:96:d5:32:8f:99:c3:19:8b:f2:af:ae:
         10:42:2a:2d:9c:cc:92:cd:14:16:71:cb:ae:76:4a:6b:37:35:
         33:94:bb:95:ac:4a:cb:a4:66:a2:73:9a:bd:80:8e:5b:14:a7:
         05:42:8a:c8:75:00:5e:a4:16:72:c5:f8:12:12:a0:05:34:6e:
         c0:6e:b5:fa:d8:ae:e3:a8:97:58:01:9e:82:23:66:b7:c6:d2:
         5b:04:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:04 2026 by rpki-client