Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File:                     4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier:          NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=
Subject key identifier:   9A:B8:DA:A4:22:3E:C4:F4:B7:CF:55:5E:0E:EB:89:27:BB:0D:28:2D
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       01CF
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:19:31 +0000
ROA not before:           Thu 23 Oct 2025 05:51:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.131.106.0/24 maxlen: 24
                          103.142.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Oct 23 05:51:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45903-2907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:86:17:45:2f:19:2c:6a:1c:eb:2a:13:38:
                    6d:b8:97:34:61:cf:c5:c2:93:37:74:95:ab:60:14:
                    fd:1b:48:a0:87:88:64:f0:e8:af:16:ca:5a:cc:c0:
                    e1:87:41:c8:f8:83:e3:1c:a4:0c:c5:6d:5d:db:06:
                    d0:b2:a2:41:1a:cb:df:f4:3f:76:89:d8:2c:97:9e:
                    7d:51:44:30:13:46:e7:94:be:5b:c2:58:a8:be:24:
                    fc:1a:44:51:8e:24:6d:dc:f3:36:4d:13:75:8d:6c:
                    65:ae:f0:32:f7:ee:96:c4:12:6a:1f:92:cc:13:f7:
                    b4:d0:45:f5:6c:53:43:e0:c9:98:88:0b:a3:f4:00:
                    a3:7f:87:20:b4:68:35:d0:88:e9:a0:0e:8e:75:aa:
                    eb:d2:01:28:bd:1a:81:b5:50:29:22:67:41:8d:ce:
                    af:6f:5e:5d:8f:f8:b0:66:06:2f:3d:a0:80:8f:28:
                    e3:05:53:d8:45:18:ce:f6:ad:01:48:06:90:46:56:
                    c7:ab:d3:98:72:ea:dc:04:e8:c6:d4:a1:75:f5:62:
                    63:8a:40:ca:5a:99:0d:8a:8e:1b:e8:8d:2a:7b:1b:
                    d3:b1:08:3e:40:e5:35:87:ac:6b:94:21:f5:2a:95:
                    f7:f3:43:7b:e4:60:2a:fe:4f:d8:4a:46:09:be:48:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B8:DA:A4:22:3E:C4:F4:B7:CF:55:5E:0E:EB:89:27:BB:0D:28:2D
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.106.0/24
                  103.142.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:09:57:dc:76:bf:46:b9:2e:42:15:c3:29:cb:cc:3a:31:a6:
         10:d2:b5:82:6f:55:5b:2c:6d:1c:6e:d7:ee:cc:29:fc:c1:b3:
         e0:23:0f:86:3c:91:21:73:be:b2:6b:a6:7a:53:ae:94:d8:69:
         11:af:9a:57:bf:f9:5f:4f:72:f1:5c:c7:6a:40:ec:ab:8a:d7:
         d2:91:f4:1c:d2:3e:50:a2:15:49:c8:a6:f5:a4:d2:fb:a0:41:
         b7:23:00:e8:1d:e6:3b:d5:9b:ab:86:4f:00:9d:af:7c:e9:48:
         af:b4:cb:30:df:22:af:9d:76:6f:f8:25:ea:04:d1:1d:7a:cc:
         b9:84:88:d6:d4:d7:41:4c:e9:d7:31:e5:6e:50:e4:af:6e:67:
         43:20:74:a2:3a:b5:28:0a:fc:89:c8:b0:d5:e6:9d:f3:47:ac:
         e3:8f:e3:34:51:fa:33:d5:f0:e4:b1:d5:3e:fb:de:9b:5b:1e:
         60:59:22:37:e0:dc:58:41:65:51:69:85:11:2b:28:7f:17:0a:
         ee:c8:8c:3c:0b:52:45:5b:03:7f:b7:e7:08:4e:4f:b5:b7:7c:
         cd:37:33:2f:a1:aa:3b:e3:08:70:69:3f:d2:6e:d4:3d:71:80:
         59:3b:6a:6e:aa:07:38:88:22:6d:44:09:09:b3:1f:00:4b:b5:
         c9:9d:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:33:02 2026 by rpki-client