Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/5E5F16A4551811F0B9246E54C4F9AE02.roa
File:                     5E5F16A4551811F0B9246E54C4F9AE02.roa (raw, json)
Hash identifier:          EPqw16UZs4OnmCADVn6Ufam9TmNvvzwwy0aV8LX+wk0=
Subject key identifier:   F6:B7:2E:47:E0:29:72:1D:4D:C5:2B:34:6B:97:65:E3:90:51:76:D6
Certificate issuer:       /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial:       15C4
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/5E5F16A4551811F0B9246E54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:10 +0000
ROA not before:           Mon 30 Jun 2025 17:07:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139771
IP address blocks:        103.134.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5572 (0x15c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
        Validity
            Not Before: Jun 30 17:07:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a442e5-d55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:84:54:54:f0:2f:43:05:f6:c1:17:90:be:
                    df:61:d0:ca:0c:52:27:d1:13:4c:1e:c0:be:11:6a:
                    8d:83:52:a2:4f:69:12:0f:5b:55:24:54:1d:d0:05:
                    eb:29:ac:2b:e1:1e:f3:51:aa:c3:ad:6b:3f:15:6f:
                    14:e2:79:63:86:ac:9a:2a:ee:42:8d:d8:d4:b8:46:
                    a7:cf:4c:f3:15:83:67:3c:40:b4:1f:29:b8:5f:78:
                    5b:47:b6:a2:1d:cd:6b:bf:6b:05:be:53:9f:7e:ad:
                    26:b8:ad:33:c6:06:c8:90:20:17:18:93:fc:5e:ff:
                    36:0b:1d:a3:a4:54:49:62:ea:83:a3:4e:49:26:64:
                    73:55:2d:1a:fb:e7:d5:bb:1c:6c:ef:fa:b8:0d:9f:
                    8d:d1:af:50:df:18:0d:d5:bb:eb:a3:16:7c:02:56:
                    00:da:90:57:50:1a:0e:92:91:91:79:de:ac:e0:8b:
                    90:23:70:3f:4d:93:a3:d4:c3:af:a7:24:e9:3e:a8:
                    d5:8e:12:56:7a:a7:5a:b1:3b:6c:e5:90:3d:aa:7a:
                    ad:b4:ea:fc:0a:57:33:a8:2a:18:91:f2:29:93:6e:
                    8f:b6:94:df:2b:9a:71:a4:55:76:a7:6c:d3:fc:80:
                    f0:ff:8a:07:e6:80:91:eb:1a:9d:d2:a4:e4:b4:87:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:2E:47:E0:29:72:1D:4D:C5:2B:34:6B:97:65:E3:90:51:76:D6
            X509v3 Authority Key Identifier:
                keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/5E5F16A4551811F0B9246E54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:74:0e:1c:2f:7d:ae:ec:98:51:9c:84:88:16:82:45:17:5f:
         f4:87:37:91:4f:5a:47:ca:3d:31:21:69:8f:66:7b:a7:a0:3c:
         db:a4:96:62:a0:9f:97:55:2d:e7:a0:bd:bd:17:9b:2f:80:a0:
         7c:71:2a:e0:9e:b9:9b:93:4a:6e:d7:20:8e:b4:2f:d3:c7:62:
         2f:a4:54:cd:49:d3:04:43:f5:1e:f8:da:bb:bd:e1:e3:b9:48:
         5c:36:27:ad:a4:2c:f8:46:8b:d6:94:6a:2d:4a:bc:d0:2b:7b:
         a8:1a:9f:ab:39:6b:69:82:10:9e:f1:7c:b9:2a:c5:93:98:e2:
         14:ca:e0:50:a6:fc:16:0e:3f:52:8d:99:cd:a7:10:9c:fe:a9:
         e2:3a:29:f5:e9:36:d5:ce:65:83:70:4a:30:95:ee:91:ee:53:
         6c:66:e3:b7:f0:d1:99:87:8d:9b:12:cf:8a:96:92:8a:37:5a:
         90:99:fd:fa:35:6d:bc:d6:c1:ac:ff:d7:23:80:7e:a8:65:e4:
         23:5c:4a:ea:8a:da:2d:f6:04:d6:88:8f:19:fd:83:b0:20:84:
         f0:02:a4:51:5f:51:d3:be:0f:ac:4a:03:3e:4f:c7:80:28:b0:
         f3:6d:f6:21:a3:7f:7f:6d:1f:8f:ad:f8:c6:d5:ee:fa:ce:b2:
         9e:7f:56:b5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw
RkE4MjI0NjQwHhcNMjUwNjMwMTcwNzM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDJlNS1kNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQWEVFTwL0MF9sEXkL7fYdDKDFIn0RNMHsC+EWqNg1KiT2kSD1tVJFQd0AXr
Kawr4R7zUarDrWs/FW8U4nljhqyaKu5CjdjUuEanz0zzFYNnPEC0Hym4X3hbR7ai
Hc1rv2sFvlOffq0muK0zxgbIkCAXGJP8Xv82Cx2jpFRJYuqDo05JJmRzVS0a++fV
uxxs7/q4DZ+N0a9Q3xgN1bvroxZ8AlYA2pBXUBoOkpGRed6s4IuQI3A/TZOj1MOv
pyTpPqjVjhJWeqdasTts5ZA9qnqttOr8ClczqCoYkfIpk26PtpTfK5pxpFV2p2zT
/IDw/4oH5oCR6xqd0qTktIfcEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPa3Lkfg
KXIdTcUrNGuXZeOQUXbWMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3
RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI2OTUvQkI4N0FDNEE0N0Y4MTFFODgwRTRGNDEwQzRGOUFFMDIvNUU1RjE2QTQ1
NTE4MTFGMEI5MjQ2RTU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4bxMA0GCSqGSIb3DQEBCwUAA4IBAQCSdA4cL32u7JhRnISIFoJF
F1/0hzeRT1pHyj0xIWmPZnunoDzbpJZioJ+XVS3noL29F5svgKB8cSrgnrmbk0pu
1yCOtC/Tx2IvpFTNSdMEQ/Ue+Nq7veHjuUhcNietpCz4RovWlGotSrzQK3uoGp+r
OWtpghCe8Xy5KsWTmOIUyuBQpvwWDj9SjZnNpxCc/qniOin16TbVzmWDcEowle6R
7lNsZuO38NGZh42bEs+KlpKKN1qQmf36NW281sGs/9cjgH6oZeQjXErqitot9gTW
iI8Z/YOwIITwAqRRX1HTvg+sSgM+T8eAKLDzbfYho39/bR+PrfjG1e76zrKef1a1
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:46 2026 by rpki-client