Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa
File:                     7549B6D2744A11EDA8F69509C4F9AE02.roa (raw, json)
Hash identifier:          qan5IAB+eBbV0exhngVKif1luhiyW911xqjapEM2sRA=
Subject key identifier:   48:9D:CC:CF:C9:BA:A2:FF:B4:F0:84:DF:47:F7:3B:18:AE:A7:EC:B1
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       06F2
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:45:59 +0000
ROA not before:           Wed 02 Apr 2025 22:54:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.164.236.0/23 maxlen: 24
                          2001:df6:5180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Apr  2 22:54:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40ad7-81cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:0f:80:eb:57:66:73:34:54:02:a8:9e:c7:
                    7d:08:4f:da:5a:39:e4:9d:b5:d6:37:e1:4a:0c:1f:
                    9f:b5:48:1e:d9:a1:be:be:bb:2f:9d:25:3b:25:ef:
                    f2:c7:c4:3a:9f:75:01:ee:27:23:fb:47:35:b5:1b:
                    e8:5f:da:74:16:7a:44:83:11:df:c7:fb:87:42:ad:
                    71:15:71:8f:98:01:3d:7f:9c:29:be:15:d6:ae:c1:
                    b2:55:91:e9:57:01:6e:a6:fe:c6:32:33:f2:96:81:
                    8f:b9:84:f5:6a:0c:31:4f:30:db:36:ba:a9:23:3d:
                    77:dc:97:3d:25:89:4a:16:19:31:71:4d:39:ea:e6:
                    7b:98:af:c6:d7:9a:d7:c1:10:a6:ce:a4:a9:24:55:
                    3f:8f:db:84:be:28:11:02:af:11:5a:6b:1a:ee:85:
                    4f:5f:df:10:c9:ab:66:ea:67:5f:44:44:1d:47:da:
                    cb:4b:8d:d8:d6:63:02:4f:86:49:1c:8e:6d:29:a0:
                    ad:13:98:c0:11:66:e3:c4:11:7e:d3:04:e0:81:07:
                    9d:c0:da:c9:e7:4b:76:d7:b5:41:15:20:e9:b7:b3:
                    c7:5a:94:f9:04:89:a6:d6:a9:43:7d:42:09:14:8c:
                    ed:e4:b3:3f:71:76:7a:5c:3c:3a:7e:97:f3:4d:36:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:CC:CF:C9:BA:A2:FF:B4:F0:84:DF:47:F7:3B:18:AE:A7:EC:B1
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.236.0/23
                IPv6:
                  2001:df6:5180::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:47:ae:a2:2a:40:9d:bd:82:2b:9e:64:8a:29:db:86:87:27:
         cd:4e:03:f9:ba:7d:d5:9e:f2:31:7b:19:b2:bc:13:06:0e:60:
         81:39:33:be:59:99:92:97:4c:e4:f0:36:d4:8b:81:cd:9b:31:
         d5:83:b2:60:dc:8f:5b:20:c8:fb:da:63:36:11:a7:70:4d:18:
         d7:56:60:fc:a5:1e:f0:41:bd:18:63:0d:62:75:57:90:c2:9c:
         eb:0f:58:4c:3f:89:37:2a:dd:01:dc:af:b3:bc:10:0c:e5:fe:
         71:28:16:7c:08:f5:0b:e0:82:ca:c9:44:6c:08:82:ee:64:9e:
         ea:20:00:f5:c1:27:86:04:25:04:bc:fb:23:46:4d:05:df:44:
         d6:af:2c:a1:99:b9:31:7c:eb:cb:82:a9:1f:99:e1:ca:af:9a:
         9e:28:9b:04:a3:91:20:7c:9c:42:d5:23:99:d8:8a:3a:63:3a:
         60:d6:96:81:d8:13:5c:f0:88:b9:ed:bf:80:d6:12:9f:0c:b9:
         53:d8:04:2d:4d:38:63:c4:b2:02:76:24:ac:e0:2f:f4:c5:a1:
         a6:1f:19:73:99:ff:e6:0c:63:04:70:10:b8:99:d1:46:ce:1a:
         31:01:3c:b9:d3:c4:38:c6:4f:f3:5b:32:6b:09:c4:d2:18:59:
         17:cd:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:40 2026 by rpki-client