Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
File:                     51BBEE10B2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier:          qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=
Subject key identifier:   A1:A7:23:EC:42:3D:B5:5D:0C:62:35:1F:74:05:80:18:3B:D5:14:06
Certificate issuer:       /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial:       014A
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:24:53 +0000
ROA not before:           Mon 09 Feb 2026 05:24:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140065
IP address blocks:        103.147.223.0/24 maxlen: 24
                          103.164.2.0/24 maxlen: 24
                          203.17.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
        Validity
            Not Before: Feb  9 05:24:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43e25-92be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:96:0e:84:1a:76:79:35:25:09:29:64:3c:
                    0b:73:3d:92:45:2d:8b:9e:12:e4:64:f0:24:ec:94:
                    65:c2:f7:b7:49:74:e3:e8:3c:26:30:65:c2:77:d6:
                    1f:96:c9:33:6d:1d:10:7d:63:0e:c1:01:13:49:dd:
                    75:22:3c:d0:98:45:08:05:13:d9:40:33:ce:90:91:
                    d2:5f:70:8e:07:b6:9f:30:2d:be:6a:e1:a5:5f:99:
                    18:3c:e7:90:8f:f3:99:d3:8b:e1:a3:52:3e:e9:f2:
                    4e:d6:65:61:a5:a0:f5:31:bc:da:b8:7e:dd:5f:3b:
                    e1:f3:eb:eb:d1:2e:21:f4:05:0e:6f:09:3a:11:ca:
                    ce:30:1f:26:a1:db:5d:36:62:6b:04:77:69:06:72:
                    ff:16:a4:db:82:71:45:98:a4:f3:ca:66:dc:9a:ba:
                    33:45:2c:eb:1f:fc:4d:1d:63:5c:c1:79:d6:cf:4c:
                    0b:5c:e9:e1:59:47:0d:df:ea:d0:de:82:ea:62:0b:
                    16:22:eb:d4:88:2a:9f:9a:e2:bc:87:36:4c:ef:bf:
                    e4:db:88:90:75:1c:be:11:30:f4:f3:3a:4f:65:38:
                    df:38:a2:c9:a4:de:d8:1b:fc:55:38:88:c8:ec:6e:
                    65:91:1a:e8:77:6d:3d:d8:af:4e:4f:fd:d7:b5:a5:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A7:23:EC:42:3D:B5:5D:0C:62:35:1F:74:05:80:18:3B:D5:14:06
            X509v3 Authority Key Identifier:
                keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.223.0/24
                  103.164.2.0/24
                  203.17.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:19:77:8b:6f:e5:a2:59:ef:70:3b:75:44:27:8e:ed:7a:61:
         52:af:96:5c:da:6d:cf:fb:38:18:4d:ba:25:0c:10:d2:68:44:
         9f:9b:36:d0:69:77:23:7c:3f:8f:24:3a:0d:1e:aa:ff:7b:86:
         7b:92:02:7e:1b:e4:9e:80:25:0e:f5:bd:9f:31:e1:f8:66:fe:
         02:7f:a3:a9:3f:61:47:07:f7:3b:5a:11:de:2a:3e:c7:03:bc:
         7b:a9:10:2f:a2:e0:18:dc:e4:1c:ba:80:6b:e5:ea:04:a1:b8:
         32:cb:c9:5c:87:e2:9d:b1:92:ff:33:f0:1a:1d:6e:18:c2:8d:
         fe:aa:ac:82:fd:cf:da:10:65:0d:db:c7:ca:b4:81:bb:64:04:
         78:b7:eb:ea:70:0b:27:2f:13:62:c2:28:b9:cd:4f:1a:c7:49:
         42:37:f7:6d:cd:a6:84:bb:c0:33:98:b4:90:94:4c:56:97:ea:
         ca:ad:7f:73:e2:6a:72:cc:1b:55:91:44:0c:6e:a8:4e:8b:57:
         a3:cf:45:24:69:f1:61:5d:8e:4b:eb:f4:08:d4:12:27:18:2f:
         df:ed:0a:fc:99:ca:b2:95:f9:86:98:ff:b5:07:62:f5:62:56:
         35:8e:18:0b:e9:36:25:c0:01:b4:d5:6c:98:a2:eb:23:31:90:
         d3:2c:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:47 2026 by rpki-client