Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
File:                     AB22314C35C211ED8FD8923EC4F9AE02.roa (raw, json)
Hash identifier:          miSnfPDEwzwY9m534sj3j64GltBUJI3iG02qdGuLOXc=
Subject key identifier:   C8:98:EA:A3:15:57:CE:1F:5F:C1:81:76:F7:B1:C5:D5:22:4E:05:E3
Certificate issuer:       /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial:       05F7
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:45:59 +0000
ROA not before:           Wed 14 May 2025 23:53:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134715
IP address blocks:        103.166.42.0/23 maxlen: 24
                          2407:5040::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
                          rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
        Validity
            Not Before: May 14 23:53:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47b57-94c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:28:0d:8d:80:88:7f:c8:d4:14:ee:9c:79:
                    c9:7a:53:3f:18:94:68:f2:a3:34:1d:ac:4a:c0:fa:
                    a1:49:b3:5b:bf:6d:fa:72:8c:1a:20:82:bd:78:5d:
                    fe:55:1b:e6:d2:f4:ae:ab:b7:0c:c7:0a:a4:f8:fa:
                    f5:9d:d9:0c:82:9b:0d:29:8b:3e:28:b7:6d:30:a9:
                    dc:49:a4:05:dd:76:d9:aa:0f:7e:d5:d3:f6:e8:35:
                    ae:66:cf:46:81:99:6e:0f:05:bf:80:47:32:43:ed:
                    bb:8b:50:e6:4c:91:fb:e7:e3:7d:be:3a:50:b6:9f:
                    ae:22:b1:ae:a1:9e:87:1c:46:20:ff:9a:4b:b5:e1:
                    32:44:82:07:69:c6:01:32:db:cd:a7:79:a3:5d:cb:
                    ec:bf:42:04:ae:24:a3:59:78:8f:8f:62:7c:ee:45:
                    02:f6:74:f8:4e:b8:d8:f8:c8:a5:86:3c:95:4d:b7:
                    93:4e:fd:f2:18:a3:56:9a:b1:d8:03:38:75:7d:58:
                    de:13:74:48:49:d2:94:1c:bc:cb:6a:2f:2a:69:d6:
                    64:c7:c3:47:da:ca:94:0d:97:b2:ec:dd:37:19:ae:
                    ca:8b:58:44:c3:65:62:4e:87:2b:91:81:2c:9c:6f:
                    cc:21:21:be:0d:87:b2:cd:5d:0e:d7:1f:7f:19:0f:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:EA:A3:15:57:CE:1F:5F:C1:81:76:F7:B1:C5:D5:22:4E:05:E3
            X509v3 Authority Key Identifier:
                keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.42.0/23
                IPv6:
                  2407:5040::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:d8:24:00:04:28:3b:8b:0c:28:3b:25:75:66:43:9d:60:
         73:fd:c7:ba:8f:83:01:c9:33:2c:0d:07:bb:12:fa:bb:5a:8a:
         45:78:23:38:92:56:df:97:e9:90:eb:a0:d6:38:da:dc:df:3a:
         3e:6e:d3:79:8c:36:7c:be:1a:c4:25:9e:c2:e9:f8:a2:e2:51:
         15:03:95:f0:29:fa:b8:02:34:d0:e3:d8:93:22:41:c5:21:66:
         81:9a:1b:a6:01:df:b2:7b:ed:55:bf:da:03:e8:2b:1a:a1:d9:
         ac:ac:1e:cd:4e:7a:d2:37:c1:c8:ba:2e:17:5d:ce:fd:eb:ed:
         2c:24:73:3c:70:99:3a:e4:46:e0:e3:b3:81:01:07:55:94:1e:
         76:5c:70:be:8c:79:c6:10:8b:ed:72:e3:49:71:82:97:24:fb:
         1f:33:d2:47:1c:0d:0e:6f:96:c8:0a:30:f4:72:55:85:d6:27:
         6f:d5:ba:41:90:4c:0b:64:07:04:33:a4:22:20:2d:82:a6:6e:
         5f:1e:da:0f:fc:b8:bb:3f:f8:ba:3e:6a:8c:92:76:99:0d:b4:
         bc:ec:22:03:fb:76:10:09:eb:be:1b:fd:fa:ff:49:c5:cc:6c:
         b4:e7:55:10:c0:e3:91:61:22:d6:2a:60:28:ea:3e:fa:73:61:
         2e:bf:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:06 2026 by rpki-client