Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/F31E86967B2311EF93801A72C4F9AE02.roa
File:                     F31E86967B2311EF93801A72C4F9AE02.roa (raw, json)
Hash identifier:          D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=
Subject key identifier:   BB:DF:66:60:EB:CE:EF:93:EC:BD:3A:B2:E9:C3:55:78:8C:AD:E7:1C
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       0441
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/F31E86967B2311EF93801A72C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:39:23 +0000
ROA not before:           Fri 27 Feb 2026 00:20:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     214766
IP address blocks:        103.163.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Feb 27 00:20:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46bbb-b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f4:3a:9b:72:3b:8c:dc:2a:50:3a:e3:a4:45:
                    f6:17:0f:46:3e:8e:d7:36:0b:e7:e2:43:88:3a:a5:
                    f0:9d:cc:44:6c:4f:b4:a9:65:1c:fd:df:4e:36:1d:
                    46:87:44:8a:75:1d:c4:5b:84:d2:b5:44:c6:7a:ba:
                    eb:17:1c:f8:44:00:e9:86:00:66:90:dd:e0:ff:62:
                    c5:d3:7f:6c:a7:c6:73:6f:59:18:c3:f1:af:d5:1a:
                    69:01:9f:5b:6a:d7:46:09:4a:04:0d:15:25:e3:14:
                    17:76:43:61:b7:13:6f:77:5f:45:10:e1:c3:d1:ae:
                    35:6f:51:e4:88:a8:0a:20:c7:6c:5b:a9:a0:cc:7a:
                    66:db:66:e1:5b:45:d4:dd:8e:b4:16:69:e7:15:58:
                    65:62:ce:56:67:d9:6a:77:48:44:2d:d1:79:3c:03:
                    32:08:95:24:89:ab:fe:ed:84:89:0a:6a:13:e9:e3:
                    8d:6d:4f:cc:86:9f:70:27:95:51:0f:c8:16:4c:19:
                    79:f9:2b:92:a7:ea:21:72:3d:75:de:14:8e:fc:ef:
                    76:22:23:09:0d:56:cf:7e:af:c2:eb:bd:c6:59:a8:
                    39:17:ef:97:71:7c:66:32:a5:1d:a4:e4:0c:24:1b:
                    53:da:b3:c8:2d:b1:78:9d:5e:ba:22:c2:39:04:af:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:66:60:EB:CE:EF:93:EC:BD:3A:B2:E9:C3:55:78:8C:AD:E7:1C
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/F31E86967B2311EF93801A72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:d1:ea:d5:75:38:d0:f4:5e:9d:16:f3:94:67:d0:22:9a:
         07:6a:bd:58:89:84:d4:b3:b5:09:9c:51:1c:9b:f6:cb:1c:89:
         67:79:00:25:7f:a8:8b:cd:d4:80:e4:b5:8a:be:98:a5:72:9e:
         18:18:0b:ff:5d:68:52:ab:83:83:ea:f2:8f:b0:51:06:27:2e:
         6e:70:8e:1c:22:4d:14:a8:e9:ec:29:5a:59:82:ca:3a:c2:a1:
         b9:8e:b8:d3:ff:10:f0:8b:da:6c:f3:6d:bf:3e:fb:14:3d:c6:
         54:8a:1c:63:8e:49:9c:7f:76:97:b3:10:6d:cd:48:f4:27:7b:
         20:c2:7f:76:52:cc:f1:f3:ed:f8:93:c3:82:e2:a6:c9:71:49:
         88:b9:77:a3:a8:55:72:f5:8f:d7:df:94:ed:84:ac:0f:11:6b:
         cb:12:09:50:46:c8:a9:32:2a:4e:76:12:7a:a3:be:f7:20:56:
         a1:ff:57:70:8c:c2:9a:6d:45:8b:10:a1:6f:49:d6:84:da:4e:
         79:93:09:07:cc:3c:8f:b5:59:69:cb:51:0a:9b:42:79:97:be:
         ea:13:e3:24:75:23:e4:87:11:97:0f:e8:04:44:a1:8b:0d:6f:
         04:f1:c7:ba:03:d0:5d:d6:8f:8c:1c:4c:be:ee:1d:5f:4d:65:
         ff:ae:75:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx
QzNERTg0QUUwHhcNMjYwMjI3MDAyMDE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmJiYi1iNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/fQ6m3I7jNwqUDrjpEX2Fw9GPo7XNgvn4kOIOqXwncxEbE+0qWUc/d9ONh1G
h0SKdR3EW4TStUTGerrrFxz4RADphgBmkN3g/2LF039sp8Zzb1kYw/Gv1RppAZ9b
atdGCUoEDRUl4xQXdkNhtxNvd19FEOHD0a41b1HkiKgKIMdsW6mgzHpm22bhW0XU
3Y60FmnnFVhlYs5WZ9lqd0hELdF5PAMyCJUkiav+7YSJCmoT6eONbU/Mhp9wJ5VR
D8gWTBl5+SuSp+ohcj113hSO/O92IiMJDVbPfq/C673GWag5F++XcXxmMqUdpOQM
JBtT2rPILbF4nV66IsI5BK9EgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLvfZmDr
zu+T7L06sunDVXiMreccMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB
MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI4RDkvOEIwMDIzNzY5QTAyMTFFQzhCODE3Nzg1QzRGOUFFMDIvRjMxRTg2OTY3
QjIzMTFFRjkzODAxQTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6ObMA0GCSqGSIb3DQEBCwUAA4IBAQAPiNHq1XU40PRenRbzlGfQ
IpoHar1YiYTUs7UJnFEcm/bLHIlneQAlf6iLzdSA5LWKvpilcp4YGAv/XWhSq4OD
6vKPsFEGJy5ucI4cIk0UqOnsKVpZgso6wqG5jrjT/xDwi9ps822/PvsUPcZUihxj
jkmcf3aXsxBtzUj0J3sgwn92Uszx8+34k8OC4qbJcUmIuXejqFVy9Y/X35TthKwP
EWvLEglQRsipMipOdhJ6o773IFah/1dwjMKabUWLEKFvSdaE2k55kwkHzDyPtVlp
y1EKm0J5l77qE+MkdSPkhxGXD+gERKGLDW8E8ce6A9Bd1o+MHEy+7h1fTWX/rnU8
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:30 2026 by rpki-client