Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa
File:                     51CBE4868C6711EB98B7B279C4F9AE02.roa (raw, json)
Hash identifier:          GFVauPq5fJh/s7MjoQc/i7d6D36WUmsf38yMr3GXmuA=
Subject key identifier:   9A:93:F5:8D:DB:B7:CF:6A:0B:CA:48:64:67:B6:6F:B1:65:91:9F:DB
Certificate issuer:       /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial:       06DE
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:13:49 +0000
ROA not before:           Tue 04 Nov 2025 22:42:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134966
IP address blocks:        103.6.104.0/24 maxlen: 24
                          103.137.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
        Validity
            Not Before: Nov  4 22:42:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4499c-6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:6e:78:fe:c1:97:22:9d:9f:6c:1b:eb:dd:
                    00:9f:81:c8:96:b5:5e:80:98:b3:40:ab:fa:22:49:
                    de:05:ec:66:6e:a6:16:4c:39:e9:a6:0b:0f:eb:92:
                    f4:84:6c:4f:ab:91:72:fa:a7:0d:25:2d:09:ee:fb:
                    3c:df:41:26:b9:fc:44:e0:e0:35:35:d7:57:af:d2:
                    3a:39:ac:f2:44:7d:b9:5a:b3:a2:06:04:15:ca:88:
                    4d:57:d8:0d:2d:b9:06:c3:57:bf:4b:eb:8e:f4:15:
                    8c:40:2b:1e:44:1a:9b:c1:8e:07:8f:f6:46:fb:65:
                    fc:eb:20:9b:43:a5:5e:d6:56:3d:af:16:e5:b1:c6:
                    f7:96:02:e9:df:8d:59:db:b2:f5:2c:6b:52:8e:ee:
                    b0:f0:fe:9d:5b:ec:c2:9b:7e:c0:3b:7a:a4:01:c0:
                    dc:0d:cb:9e:f3:f0:d9:1c:f9:1b:51:c7:f3:b4:84:
                    18:a6:25:19:5d:d7:99:f7:b9:0d:2c:23:97:ef:46:
                    42:b1:53:80:d1:3b:0c:7c:aa:bf:8e:82:54:74:82:
                    33:d5:65:e5:d8:d8:d0:1f:6d:6f:ea:20:c7:a1:0b:
                    bf:88:8f:b0:2b:9e:50:4c:d9:a4:13:f6:7a:2b:e6:
                    2c:13:c8:58:0a:e2:95:cf:90:2c:41:44:e0:77:4b:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:F5:8D:DB:B7:CF:6A:0B:CA:48:64:67:B6:6F:B1:65:91:9F:DB
            X509v3 Authority Key Identifier:
                keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.104.0/24
                  103.137.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:ed:61:cb:71:ba:80:13:ad:df:1c:0b:d0:bb:97:57:5b:
         04:27:d1:25:12:72:5f:a3:dc:30:d2:eb:41:1c:9f:35:a7:e4:
         83:70:68:ae:c4:18:8e:c2:c1:e6:af:a6:9a:f9:8c:f2:ba:28:
         56:89:2b:04:99:df:db:2a:9e:d0:96:4c:7d:38:ff:99:c7:79:
         f4:41:81:5b:e9:c2:bd:6b:47:35:db:48:81:62:cd:0f:d8:6b:
         cc:5f:f2:b8:0d:4f:c1:ee:ef:22:a0:1b:35:25:fe:13:70:52:
         b8:25:e0:ad:58:0b:a0:64:d7:6b:00:be:fc:7a:ae:ff:e1:d6:
         00:ba:3c:bd:b7:1f:c4:42:91:5f:f6:48:03:e3:ec:59:da:10:
         00:0e:e7:1f:81:a0:96:65:ea:8c:d8:a5:d1:31:9f:6f:9e:5b:
         fb:9c:49:b3:6b:cc:bd:1d:33:9e:8c:c3:d6:4e:cf:f1:c3:b2:
         54:14:d1:ea:52:2c:a6:67:94:5d:25:2c:a8:50:b3:98:8c:5d:
         bf:43:10:0d:be:aa:87:71:7e:87:06:45:27:ab:2c:12:94:6b:
         be:30:19:c2:d0:74:ba:e3:c1:8e:2c:67:b3:7f:4d:17:d7:a4:
         b2:98:03:51:d7:b7:1d:71:6b:1c:b0:dc:bb:27:b6:fd:d6:9c:
         da:70:45:31
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz
QkY1QzVEMTQwHhcNMjUxMTA0MjI0MjE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDk5Yy02ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYpueP7BlyKdn2wb690An4HIlrVegJizQKv6IkneBexmbqYWTDnppgsP65L0
hGxPq5Fy+qcNJS0J7vs830EmufxE4OA1NddXr9I6OazyRH25WrOiBgQVyohNV9gN
LbkGw1e/S+uO9BWMQCseRBqbwY4Hj/ZG+2X86yCbQ6Ve1lY9rxblscb3lgLp341Z
27L1LGtSju6w8P6dW+zCm37AO3qkAcDcDcue8/DZHPkbUcfztIQYpiUZXdeZ97kN
LCOX70ZCsVOA0TsMfKq/joJUdIIz1WXl2NjQH21v6iDHoQu/iI+wK55QTNmkE/Z6
K+YsE8hYCuKVz5AsQUTgd0sgrwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJqT9Y3b
t89qC8pIZGe2b7FlkZ/bMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD
NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQzMUUvN0E4NDgxOTY4QzY1MTFFQkFBRjgwMzc2QzRGOUFFMDIvNTFDQkU0ODY4
QzY3MTFFQjk4QjdCMjc5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZwZoAwQAZ4nTMA0GCSqGSIb3DQEBCwUAA4IBAQAcHu1hy3G6gBOt
3xwL0LuXV1sEJ9ElEnJfo9ww0utBHJ81p+SDcGiuxBiOwsHmr6aa+YzyuihWiSsE
md/bKp7Qlkx9OP+Zx3n0QYFb6cK9a0c120iBYs0P2GvMX/K4DU/B7u8ioBs1Jf4T
cFK4JeCtWAugZNdrAL78eq7/4dYAujy9tx/EQpFf9kgD4+xZ2hAADucfgaCWZeqM
2KXRMZ9vnlv7nEmza8y9HTOejMPWTs/xw7JUFNHqUiymZ5RdJSyoULOYjF2/QxAN
vqqHcX6HBkUnqywSlGu+MBnC0HS648GOLGezf00X16SymANR17cdcWscsNy7J7b9
1pzacEUx
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:22 2026 by rpki-client