Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
File:                     1745A0504D7F11EE8487CA3CC4F9AE02.roa (raw, json)
Hash identifier:          92S13xMUtTa9ngZEJpHZILOhTqRPbqcQrnmdTEujx6o=
Subject key identifier:   EF:22:E5:25:FF:FD:A5:A7:DF:CB:1B:96:5A:98:7F:16:23:0C:D2:85
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0767
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 22:28:26 +0000
ROA not before:           Mon 30 Mar 2026 22:28:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar 30 22:28:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69caf90a-94b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:24:c0:57:b2:ac:ec:40:92:07:13:48:53:
                    1f:e6:3c:22:01:a4:c8:fe:f1:7f:58:43:2e:47:d1:
                    ed:f3:50:c9:97:07:91:99:50:a2:29:88:cc:0a:ba:
                    1f:9d:94:89:97:99:95:9d:63:df:cc:d9:14:7a:b3:
                    8f:de:9a:02:aa:e4:e2:61:6e:8e:fe:1e:17:fb:e6:
                    0b:ee:14:bf:f3:b0:4a:bb:52:5f:a9:87:37:c8:84:
                    f6:30:49:43:b5:9d:9b:c6:aa:7a:09:c6:b7:8d:fc:
                    b2:76:ef:16:b8:2a:49:8d:db:ed:da:8d:cb:c6:4e:
                    d2:2a:4c:e9:34:2d:c4:4d:64:fd:e0:2e:09:79:ce:
                    72:30:fe:e7:44:a1:4e:1a:79:7c:37:59:a3:e8:8d:
                    89:f2:74:4f:d5:41:5a:90:5d:51:41:50:40:06:fe:
                    5a:f9:b5:68:e3:f9:1f:45:1e:0f:3c:61:58:40:6b:
                    3a:ad:87:b5:a7:bc:d7:d6:79:27:fd:78:2d:2a:d4:
                    76:e0:8d:37:ed:cf:5f:08:6a:2e:5a:d3:8f:5c:6e:
                    d8:6d:2e:16:8f:ed:81:bd:b7:17:6c:96:14:f1:d3:
                    c6:df:73:96:ed:ab:ee:ca:9a:a0:c4:6a:5a:c3:c3:
                    8f:42:73:55:43:07:7e:5c:9a:6d:ab:d3:f6:06:43:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:22:E5:25:FF:FD:A5:A7:DF:CB:1B:96:5A:98:7F:16:23:0C:D2:85
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:a8:f2:c3:91:17:c7:55:bd:3c:30:68:bf:53:bf:41:f1:
         08:a8:e5:dc:34:b7:ac:5c:75:fe:d9:1d:ef:aa:fb:01:61:55:
         87:ef:a6:58:20:4b:48:37:1a:4d:89:f3:25:44:9e:df:da:2a:
         54:c2:a8:b0:d0:65:34:82:59:2c:37:56:b6:1d:9f:10:b0:21:
         3d:4f:e6:a9:4a:19:37:ad:c3:54:97:39:b7:90:d2:49:e6:e9:
         81:73:7c:b0:05:50:68:dd:48:32:c5:e4:91:a9:2d:f4:40:a3:
         43:3f:a9:2b:20:16:f6:50:f0:47:f3:cc:10:d2:a8:8d:eb:87:
         7c:13:9e:7b:3d:e7:81:ac:71:3c:8e:73:0f:0a:56:a9:02:01:
         4c:6c:06:17:91:ef:f4:c6:7a:f1:3a:05:29:46:e6:ce:57:51:
         e0:cf:29:02:36:f9:70:f7:ca:32:11:2c:92:f2:e2:ec:4e:89:
         0b:7a:35:5c:fa:38:ac:bd:d9:ef:bc:f0:33:6f:c2:65:78:ff:
         f1:ed:ef:3a:dd:96:95:de:bd:43:1a:4c:7b:66:bb:c7:b6:f9:
         0b:cb:77:7e:c6:c6:e3:7c:75:a5:1a:1e:4f:6a:32:c7:63:88:
         10:67:b0:83:84:b6:94:af:27:99:a1:2f:66:28:40:c7:a4:12:
         08:b2:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:50 2026 by rpki-client