Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
File:                     C5713632828611EC83D75A3DC4F9AE02.roa (raw, json)
Hash identifier:          TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=
Subject key identifier:   B1:4C:47:19:D6:44:2B:AF:65:45:F4:DA:17:7C:53:37:68:E9:A9:8F
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       055C
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:00:43 +0000
ROA not before:           Sun 02 Nov 2025 23:43:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147189
IP address blocks:        103.174.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Nov  2 23:43:39 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4549b-8ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:9e:06:ef:00:a3:69:d4:9d:ea:81:c3:ef:
                    72:a8:c5:46:90:cb:ed:39:2b:82:eb:2d:9e:3d:fe:
                    17:85:75:e5:ba:53:fc:e3:51:56:0c:99:a7:be:2b:
                    d3:97:3e:df:d2:c2:39:f9:8d:64:d4:06:01:7d:2e:
                    cf:ad:68:7a:4b:44:f8:a2:88:e8:62:b9:8b:4a:d2:
                    5a:02:ce:b0:96:b9:15:75:b0:1e:46:d8:e5:fd:7e:
                    7f:6d:85:ae:c9:1d:5d:39:d0:79:7e:c2:f1:fb:0a:
                    b6:87:dc:45:6f:5e:a8:3b:67:8c:ff:ac:6b:24:a4:
                    07:9c:d9:4b:a0:9e:0d:e7:d4:5d:68:41:dd:20:aa:
                    d8:20:19:70:c1:f6:8c:35:22:e3:58:0c:af:d2:10:
                    7f:27:91:44:4d:2b:b9:08:14:c8:66:4d:dc:af:95:
                    8c:27:80:58:86:95:39:f3:a5:9b:55:5d:29:a4:f2:
                    ba:e7:79:d8:21:97:54:c5:33:17:4a:7f:c2:6c:e3:
                    cb:c8:44:49:ba:d6:e6:b7:4e:da:62:8e:c0:80:22:
                    df:49:42:88:8f:e3:81:aa:04:55:67:a5:a6:b3:1d:
                    26:f7:7a:ed:9c:73:c3:74:80:0c:67:ac:ad:6a:c9:
                    70:61:21:95:6f:2a:83:0b:02:ac:1f:b2:4a:c8:e7:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:47:19:D6:44:2B:AF:65:45:F4:DA:17:7C:53:37:68:E9:A9:8F
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:cc:df:ce:da:0a:0a:a4:2a:56:fa:88:44:37:ca:42:b6:
         8c:66:ec:e7:4a:c4:d3:a4:12:58:57:d7:01:13:54:89:f1:ff:
         a0:b5:7a:84:63:8a:04:76:00:79:b3:8e:35:ea:1e:da:7f:a9:
         30:26:90:9e:78:96:3f:80:7a:5e:90:d4:8e:bb:62:0d:dc:3e:
         2d:d2:d7:fb:7a:fe:54:eb:56:8f:6e:1d:e7:3b:ce:cc:df:85:
         16:75:e4:de:cb:1f:e8:bf:00:40:97:a7:a6:1a:0f:05:57:e8:
         78:d3:85:76:2e:ba:9a:a1:65:a1:f9:a1:aa:59:58:c5:9c:bf:
         54:aa:08:91:6a:dc:53:75:0e:2c:2d:51:92:bb:48:e4:45:e6:
         0a:a7:50:b5:61:b0:a4:72:63:78:b2:bb:a3:23:29:fb:d1:65:
         35:10:aa:b2:3a:04:c4:93:f8:1b:49:d4:11:21:92:22:6f:cb:
         e6:02:67:7d:93:e7:e5:3e:71:e7:b3:fe:2c:08:d9:a9:71:67:
         64:ba:ac:4e:4d:4d:5f:1a:ee:a6:cf:a0:6b:89:b7:5a:2d:f2:
         3c:f0:39:66:0b:20:bc:30:3e:6e:78:c8:e6:b0:53:62:cd:6e:
         52:59:a4:ec:bf:af:4c:e7:a4:e4:d8:73:bb:1a:34:7f:5b:2b:
         93:4e:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:56 2026 by rpki-client