Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa
File:                     4551BE2CD19D11EAA120EE14C4F9AE02.roa (raw, json)
Hash identifier:          yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=
Subject key identifier:   F1:7E:7E:68:6F:D7:7D:A8:27:F4:70:42:C4:FA:D9:D2:A3:37:98:84
Certificate issuer:       /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial:       12A5
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:26:10 +0000
ROA not before:           Fri 26 Sep 2025 17:46:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134520
IP address blocks:        103.81.247.0/24 maxlen: 24
                          103.82.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4773 (0x12a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
        Validity
            Not Before: Sep 26 17:46:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a468a2-a1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:62:80:82:b2:01:03:36:fe:c0:e5:1a:96:
                    f1:8e:93:55:41:e5:e7:a7:63:6f:7e:3e:40:cd:b6:
                    6d:4f:81:09:2b:b7:39:62:fc:5f:a5:fe:e5:47:a2:
                    95:4b:53:51:73:1e:99:0b:c4:43:78:12:4a:ea:32:
                    04:60:39:17:73:e1:a4:d3:c8:ac:64:27:0f:5d:29:
                    6b:bc:43:24:c2:8d:af:8d:08:d2:6c:ad:6c:13:5e:
                    b2:d1:fd:d7:d3:47:e4:96:2b:c6:c6:d9:d3:cb:07:
                    5d:07:d0:ef:18:47:c9:4b:e5:14:f2:cb:52:fb:3d:
                    82:c7:85:ee:1e:74:51:c5:10:be:fb:a9:fe:f1:bc:
                    f7:35:17:0f:f0:f8:3f:bb:8d:37:f8:a0:c1:94:f3:
                    94:07:d1:7a:dd:99:41:e2:5d:73:1f:ae:19:30:92:
                    2a:67:0e:2d:28:d7:16:35:4b:96:92:da:17:2e:53:
                    29:c8:a3:61:be:5e:4b:ea:d0:d7:da:0b:cf:2b:33:
                    d3:d5:3d:2b:ce:6e:15:3a:5e:fc:1a:67:03:c3:4a:
                    d0:b5:af:cf:56:3b:88:df:ec:71:a3:15:92:80:15:
                    42:64:18:c8:53:ea:e0:27:9c:7f:ed:e6:6b:e0:2e:
                    9e:ee:f9:cc:3b:d9:9f:75:98:77:a7:15:b9:e4:8f:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:7E:68:6F:D7:7D:A8:27:F4:70:42:C4:FA:D9:D2:A3:37:98:84
            X509v3 Authority Key Identifier:
                keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.247.0/24
                  103.82.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:c6:be:6a:11:e3:57:7f:cf:2a:6e:6b:e0:ee:e6:8a:c3:
         fe:e8:68:92:d9:23:f1:ff:30:6b:18:3f:55:82:64:4c:45:ec:
         1e:6c:b9:c1:e0:72:46:4e:19:28:78:5c:86:69:e3:7e:04:47:
         aa:d8:64:d8:00:4f:77:bb:3d:dc:9d:39:0f:3e:1c:64:bb:1c:
         2d:ed:89:75:80:4f:d5:23:ec:28:f2:d4:8e:17:08:0f:24:d6:
         8b:47:eb:fb:f2:4c:10:6e:bf:47:f6:f6:ac:c4:1f:f5:f6:ca:
         20:58:d9:33:77:42:f4:b0:46:30:9b:6a:df:a1:86:33:d7:53:
         0c:49:a3:c1:03:2a:7c:f0:3f:80:79:b6:0d:ac:81:30:07:16:
         b5:a7:bc:ea:5c:e4:e1:48:48:f3:53:ab:e2:fa:b7:9b:c8:ed:
         39:1c:fb:b5:60:63:c0:7c:16:4b:6e:31:65:04:fa:02:40:9e:
         51:92:36:65:6e:62:d7:b0:48:c6:8c:ab:88:10:48:f5:07:2a:
         4a:3c:a1:83:c0:54:e8:31:55:4a:54:87:ab:80:16:34:33:47:
         3a:03:f9:f4:6b:49:bb:2e:3c:63:58:f4:b5:24:d4:c5:1b:7a:
         2b:a9:9a:42:c0:0e:fe:f6:07:48:a9:42:c5:54:00:d0:94:e1:
         67:d0:f5:43
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw
RTcwNjY3QUIwHhcNMjUwOTI2MTc0NjQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjhhMi1hMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmgBigIKyAQM2/sDlGpbxjpNVQeXnp2Nvfj5AzbZtT4EJK7c5Yvxfpf7lR6KV
S1NRcx6ZC8RDeBJK6jIEYDkXc+Gk08isZCcPXSlrvEMkwo2vjQjSbK1sE16y0f3X
00fklivGxtnTywddB9DvGEfJS+UU8stS+z2Cx4XuHnRRxRC++6n+8bz3NRcP8Pg/
u403+KDBlPOUB9F63ZlB4l1zH64ZMJIqZw4tKNcWNUuWktoXLlMpyKNhvl5L6tDX
2gvPKzPT1T0rzm4VOl78GmcDw0rQta/PVjuI3+xxoxWSgBVCZBjIU+rgJ5x/7eZr
4C6e7vnMO9mfdZh3pxW55I8YkQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPF+fmhv
132oJ/RwQsT62dKjN5iEMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5
RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNFMzMvODc3QTc5QjZFOUQxMTFFOEFDODkyNzcwQzRGOUFFMDIvNDU1MUJFMkNE
MTlEMTFFQUExMjBFRTE0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ1H3AwQBZ1IEMA0GCSqGSIb3DQEBCwUAA4IBAQCX48a+ahHjV3/P
Km5r4O7misP+6GiS2SPx/zBrGD9VgmRMRewebLnB4HJGThkoeFyGaeN+BEeq2GTY
AE93uz3cnTkPPhxkuxwt7Yl1gE/VI+wo8tSOFwgPJNaLR+v78kwQbr9H9vasxB/1
9sogWNkzd0L0sEYwm2rfoYYz11MMSaPBAyp88D+AebYNrIEwBxa1p7zqXOThSEjz
U6vi+rebyO05HPu1YGPAfBZLbjFlBPoCQJ5RkjZlbmLXsEjGjKuIEEj1BypKPKGD
wFToMVVKVIergBY0M0c6A/n0a0m7LjxjWPS1JNTFG3orqZpCwA7+9gdIqULFVADQ
lOFn0PVD
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:22 2026 by rpki-client