Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
File:                     A1B8D10EF5C511EF83B21246C4F9AE02.roa (raw, json)
Hash identifier:          V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=
Subject key identifier:   BD:35:97:8E:9F:E7:52:E7:89:05:BA:41:4B:26:EC:81:F8:80:DF:72
Certificate issuer:       /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
Certificate serial:       04AD
Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:01:54 +0000
ROA not before:           Sun 10 Aug 2025 21:01:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136141
IP address blocks:        103.153.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
        Validity
            Not Before: Aug 10 21:01:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48d22-4bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:67:78:c2:f2:6c:49:2c:c8:db:4a:3a:13:
                    e3:8e:d8:b4:48:a4:0d:bc:79:ff:18:70:19:38:a2:
                    c5:ca:92:78:cb:dd:20:b8:92:85:a8:79:40:7b:43:
                    83:20:72:82:1f:70:26:3f:7a:4c:b0:e5:17:b8:3d:
                    5e:cd:e5:ba:0d:e4:ac:95:c3:bd:90:9f:b8:7b:32:
                    40:19:67:a4:69:25:96:a2:42:50:f2:c8:5d:b2:cb:
                    2c:2a:49:25:77:bc:5b:45:36:bc:c4:a4:a0:99:53:
                    a1:fa:41:74:04:46:61:f9:7f:a5:db:71:da:ad:b1:
                    9f:9a:11:0f:33:28:8b:8f:b0:61:d2:82:10:97:a6:
                    f5:0a:b1:5e:f8:6e:fa:14:e5:fd:3f:bf:39:28:7c:
                    9a:17:af:98:2b:3a:bb:f6:30:47:06:79:5c:51:d0:
                    0b:2d:39:65:15:68:79:e7:0f:63:81:de:d7:ef:ba:
                    12:9f:25:6a:7a:74:31:11:a3:06:9a:4d:83:81:f9:
                    9a:ee:93:76:8d:c7:9c:2e:d0:c8:d0:30:b9:5a:1d:
                    49:fb:e1:06:62:36:71:52:43:e8:3b:f6:3e:b9:23:
                    ac:1f:8a:d1:7c:69:84:6f:a5:34:99:33:15:8b:e5:
                    55:a9:6a:3a:8b:ed:ea:6c:04:9b:2c:84:46:a5:c6:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:35:97:8E:9F:E7:52:E7:89:05:BA:41:4B:26:EC:81:F8:80:DF:72
            X509v3 Authority Key Identifier:
                keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:38:63:b4:8e:eb:64:41:e9:6a:7f:15:e5:64:66:dc:d7:
         3d:87:7d:a1:e8:c6:00:e7:ed:8b:a2:30:06:56:e9:cb:6f:92:
         bf:b5:9d:d6:41:3e:02:41:21:f6:92:1f:08:86:b1:44:40:f8:
         5c:98:f6:50:11:87:0d:8f:88:9d:5e:30:a9:4b:58:d0:bd:61:
         27:04:bf:f1:8d:ca:58:56:8f:6a:31:3d:2c:4c:39:17:ca:54:
         ab:44:ea:67:eb:8b:65:8d:0a:b1:d7:76:56:bb:ce:89:bb:3a:
         7c:0c:87:78:4c:be:71:d0:dd:02:17:dc:f1:16:1c:53:14:fc:
         d6:53:45:9f:b3:81:5b:0f:3e:7f:84:b3:bb:0e:30:e0:14:5f:
         0b:e8:01:76:2e:b1:1b:a1:81:1e:c7:d5:40:d0:97:6b:a7:a5:
         63:2c:28:c3:b0:1b:de:32:79:4c:8b:3f:82:39:43:4e:14:96:
         4f:b6:19:f8:21:6f:78:91:af:a4:ff:f6:5e:e7:32:24:05:21:
         03:83:7d:cf:f4:ca:47:34:50:dc:f6:39:08:1b:5d:6b:f1:98:
         24:0d:6b:ae:8f:6b:d3:aa:eb:d9:79:3f:d5:2c:8f:6b:5c:4b:
         12:4b:a5:14:24:cc:9f:98:d8:56:60:93:25:25:93:99:c3:51:
         6c:b5:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:02 2026 by rpki-client