Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
File:                     5FB99B82934511EE87C1BE7EC4F9AE02.roa (raw, json)
Hash identifier:          SXOigKbAj347KcynIILNYxKxvcTy0xBVZIcQghVZJ58=
Subject key identifier:   12:9F:77:F7:31:38:0A:8E:FD:C4:5E:C1:07:D9:38:82:13:A7:F9:18
Certificate issuer:       /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial:       01A9
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:40:16 +0000
ROA not before:           Sun 13 Apr 2025 04:09:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149828
IP address blocks:        103.185.230.0/24 maxlen: 24
                          2001:df0:9dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
        Validity
            Not Before: Apr 13 04:09:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3df50-55f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:ba:b0:1c:e8:88:b3:b9:c1:88:75:cd:b3:
                    8b:30:20:1a:c4:1a:c1:3b:95:0f:7c:3d:3e:5c:cb:
                    e9:eb:1f:52:93:86:d5:90:88:eb:15:a0:8c:c9:59:
                    89:b7:0e:77:4d:f0:80:b5:44:e4:a5:4d:2b:bb:38:
                    84:76:14:11:23:76:a6:89:de:52:11:01:14:f8:bc:
                    ba:4a:cf:4b:46:2c:92:32:76:5d:bc:df:13:cc:13:
                    f8:f1:28:d7:d5:7b:7e:05:f1:bc:e8:b8:25:63:ae:
                    c1:38:0e:a6:94:7e:9d:ae:6f:87:d6:20:b0:a0:00:
                    5f:8e:ef:96:83:a2:f5:ed:b6:c8:c6:e4:54:e1:c0:
                    c0:52:f8:c8:8a:a3:1c:39:e2:4a:34:39:47:74:f4:
                    c0:80:13:13:2e:d8:ee:7e:03:0a:70:36:ff:fa:ce:
                    4f:fe:7d:bd:37:c7:c5:e7:ab:1b:49:bf:21:3f:05:
                    dd:5a:fc:de:ef:8d:be:05:c2:13:a3:66:c0:e6:36:
                    95:60:49:96:ae:6d:a4:87:e9:cf:b5:54:07:e3:6a:
                    9a:61:b3:fe:40:6f:2d:0f:bc:8a:19:a6:1c:54:ef:
                    8f:56:29:1e:05:5e:dc:5a:3b:93:6a:7a:1b:89:2d:
                    7b:13:6e:8d:fa:e1:44:22:55:73:b0:15:8d:d1:cc:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9F:77:F7:31:38:0A:8E:FD:C4:5E:C1:07:D9:38:82:13:A7:F9:18
            X509v3 Authority Key Identifier:
                keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.230.0/24
                IPv6:
                  2001:df0:9dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:10:6c:c0:a6:d0:fb:2b:c5:da:df:77:fb:d1:54:8b:6b:79:
         1e:3a:5e:64:6c:21:39:39:09:dc:ee:72:63:55:15:1a:d4:3f:
         fc:89:09:84:2f:be:76:8a:a7:2a:4a:07:73:53:7a:59:54:05:
         3a:66:64:75:52:e6:96:b2:5f:fa:15:ee:d3:a2:de:72:07:66:
         ea:1f:b2:59:74:f5:c6:85:d3:25:02:df:b0:12:78:59:1b:92:
         75:b1:1b:18:5e:e8:d8:10:fa:6f:66:99:61:2d:ff:84:d5:fb:
         14:39:ca:a2:8e:7d:18:e1:e3:af:f3:40:ff:16:b0:f1:59:20:
         1d:bc:a3:46:38:e7:a8:7e:96:d9:4c:e9:f2:6b:bb:d5:c0:0a:
         7e:7f:10:59:00:60:b8:3d:c5:3c:fd:35:ad:47:27:38:e6:d0:
         4d:11:9e:45:13:c1:f7:02:51:29:fe:20:de:5c:4a:7f:b1:bd:
         1c:4b:3c:3c:33:89:2b:43:bc:05:1e:66:e8:84:fe:fe:33:8c:
         ec:e2:10:97:f4:2e:ca:84:c4:70:d9:b1:24:62:22:dc:30:ac:
         fd:20:db:f5:8c:0a:59:af:f7:18:cf:4f:1d:6d:3a:6d:c1:f3:
         2b:70:c1:30:ee:f4:e5:77:cc:2e:7f:7d:7f:97:25:d1:24:92:
         c7:c3:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:39 2026 by rpki-client