Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
File:                     1745A0504D7F11EE8487CA3CC4F9AE02.roa (raw, json)
Hash identifier:          MqwjL+GpEwj8Y8fzVVMOmR9zUWvbp5Mkjy2dLwpMikw=
Subject key identifier:   46:9D:FF:92:2C:C7:A5:52:54:B2:C1:9F:CA:A0:3D:CA:11:CB:58:70
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       074F
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:43:18 +0000
ROA not before:           Sun 02 Mar 2025 23:21:43 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar  2 23:21:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a40a36-4e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:5a:a8:f1:ef:96:6e:8a:48:09:45:52:05:
                    a4:c1:f5:4c:14:6e:93:95:97:e6:6a:c7:8d:2d:52:
                    e1:94:c7:50:30:0a:a0:e8:33:ba:85:22:3b:e3:f4:
                    7d:07:66:33:56:a4:b5:3b:c5:c8:1b:7c:71:78:c8:
                    30:04:6b:7b:bf:1b:c8:76:47:f4:82:13:0f:bd:5f:
                    b4:83:16:a9:9a:40:8b:89:04:c2:97:81:94:64:55:
                    1e:e7:ae:e6:de:81:02:d1:e6:de:81:b2:51:11:90:
                    bc:42:3a:ef:ac:89:e6:7a:01:c6:d9:89:4b:83:19:
                    6a:f5:31:12:6a:fa:31:a9:2d:22:96:fc:46:8f:48:
                    89:02:e3:f8:73:90:d7:ac:60:d7:80:88:9d:be:84:
                    52:2a:a0:60:01:56:bf:12:56:f1:90:ac:bb:d9:7a:
                    05:9d:8b:76:08:02:f3:54:7d:1e:c3:96:76:1c:68:
                    76:b5:5f:1b:58:bd:61:4f:02:54:74:34:88:a6:0a:
                    01:c3:70:ec:0d:a3:f3:b0:74:6c:37:f2:03:a5:49:
                    4b:cd:43:34:91:21:0e:8b:31:e1:e2:d3:21:f2:de:
                    ad:5d:e6:5b:dd:61:e8:cf:92:da:1b:0e:72:5d:55:
                    30:7a:45:ed:54:4a:63:3a:2f:98:53:ee:04:8f:a0:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:FF:92:2C:C7:A5:52:54:B2:C1:9F:CA:A0:3D:CA:11:CB:58:70
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:04:2a:82:9a:ca:f0:4c:7f:31:c1:e2:3a:40:ac:07:9e:
         f1:ff:35:f8:88:01:29:cb:83:3c:88:b5:0a:6b:0d:18:5c:fc:
         f3:bd:9c:6f:16:d5:93:1a:e1:8a:9e:6d:03:97:02:d0:ee:df:
         d2:df:38:c5:25:de:9e:24:81:5c:0b:a5:76:95:c4:25:e5:0d:
         68:58:cf:21:4b:61:07:be:88:f2:ad:fc:93:d2:9a:3f:54:f7:
         9d:f2:c6:5b:2a:e8:a6:1d:d0:25:66:84:58:cd:b5:8d:a3:48:
         98:a4:7c:23:10:62:e7:f8:95:7f:bf:d2:ad:ac:7e:92:53:0d:
         c1:90:84:fe:44:3c:9b:ee:02:a5:10:9f:cf:c2:18:29:b8:99:
         37:53:58:43:bb:0b:69:9c:c0:3c:2b:7c:1d:c3:a2:cd:24:91:
         ac:bd:5e:bb:d2:86:c5:85:70:28:39:29:72:52:ea:71:42:98:
         d8:59:0d:b0:5a:73:b6:32:dc:6a:16:46:46:b8:31:fc:33:89:
         08:3a:06:9a:d6:d4:b9:6c:79:29:61:8a:36:b6:ba:a8:86:91:
         c8:d8:0a:1b:02:aa:73:b4:39:b2:82:77:c4:cf:a0:22:92:fa:
         c3:49:cd:0b:31:5f:7a:57:b2:62:36:a4:66:d6:65:9b:b5:d7:
         5a:57:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:13 2026 by rpki-client