Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
File:                     C53629FEEACE11EEA8513D34C4F9AE02.roa (raw, json)
Hash identifier:          JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=
Subject key identifier:   AE:9D:8B:0B:0F:9C:31:19:A7:4C:C3:C7:78:66:1F:EF:CB:53:52:B5
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0BF0
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:30:09 +0000
ROA not before:           Tue 16 Sep 2025 19:29:35 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141351
IP address blocks:        103.116.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3056 (0xbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Sep 16 19:29:35 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46991-80ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:24:e3:04:f0:53:9c:fd:10:16:db:01:ed:
                    e8:ef:3c:da:23:ae:f3:73:d3:eb:5d:19:0a:b3:62:
                    0e:fc:19:9b:82:c1:91:e1:1d:da:26:80:43:98:f4:
                    4e:df:9f:03:03:6a:21:f2:f0:56:e8:8b:dc:d6:02:
                    4c:09:f4:e8:54:bc:ff:4e:7b:b7:fe:9e:1d:d7:2a:
                    c4:e8:d2:a6:59:73:87:e7:25:bc:52:bd:a7:3c:1e:
                    60:9d:f2:7b:3c:dc:6c:45:2c:f8:87:52:6c:8c:0f:
                    36:d6:96:c0:2c:49:77:f1:30:53:fe:e5:79:cc:26:
                    5d:13:d1:dd:15:5f:b9:d1:d0:d5:ef:8a:7e:2a:9a:
                    13:19:78:0d:d5:23:9d:b1:ba:46:d1:a2:de:fa:17:
                    16:32:c9:cc:a3:45:2a:3a:1b:8f:3b:2b:29:96:dc:
                    9e:85:9e:99:07:18:88:de:ec:17:37:a7:84:f2:f3:
                    43:f2:26:f5:11:6d:b9:0f:bf:49:49:89:6e:5b:1f:
                    8e:df:74:ef:df:d6:a1:42:9c:fa:86:d0:a0:6c:d9:
                    77:09:fd:6d:f5:97:4a:db:cb:92:c4:52:33:2a:85:
                    76:12:d4:34:4e:cc:ed:7d:10:16:49:a5:54:17:ad:
                    99:4c:a7:46:f4:95:2d:50:20:57:43:ab:ef:90:62:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:8B:0B:0F:9C:31:19:A7:4C:C3:C7:78:66:1F:EF:CB:53:52:B5
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:82:6b:b2:4a:53:49:1b:78:1d:70:3f:d8:cb:e9:b5:02:6a:
         0d:f5:0a:25:0a:83:57:bf:b0:43:42:88:be:8d:1e:0e:e7:37:
         79:e3:11:cc:d8:88:74:ef:a4:0d:8e:c5:55:37:f9:ba:5e:2f:
         c8:d4:46:74:39:79:97:53:9e:a5:96:e1:ed:34:6d:2d:eb:b5:
         b0:8a:64:17:74:2b:99:3d:5c:1a:d0:81:f0:18:2a:76:fe:11:
         02:38:c4:3f:62:88:6c:69:98:02:13:85:5a:79:52:a3:3e:bd:
         95:db:24:07:7f:24:38:b1:5b:fc:90:85:e5:61:af:6d:e8:21:
         07:2a:52:2c:a2:00:c8:3e:89:43:d6:eb:9f:c3:58:68:68:6b:
         6b:1c:12:49:02:43:d7:5a:b3:61:01:d8:63:f3:18:82:63:ae:
         78:96:88:05:16:8f:38:58:89:b8:60:bd:b8:79:e5:58:b8:56:
         14:6b:84:06:a9:8b:33:48:ba:08:e9:f9:6a:64:fd:2c:9f:4a:
         13:43:01:25:c9:49:f5:6c:24:5a:73:fb:81:10:0b:31:96:38:
         41:95:1f:69:fe:53:3e:26:55:68:47:a7:bc:e7:ff:4a:ab:2c:
         bd:81:21:56:59:70:3c:5b:2a:03:79:85:33:42:20:b7:3c:da:
         7b:a3:b6:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1
MTIxRDI0MUMwHhcNMjUwOTE2MTkyOTM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Njk5MS04MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1Uk4wTwU5z9EBbbAe3o7zzaI67zc9PrXRkKs2IO/BmbgsGR4R3aJoBDmPRO
358DA2oh8vBW6Ivc1gJMCfToVLz/Tnu3/p4d1yrE6NKmWXOH5yW8Ur2nPB5gnfJ7
PNxsRSz4h1JsjA821pbALEl38TBT/uV5zCZdE9HdFV+50dDV74p+KpoTGXgN1SOd
sbpG0aLe+hcWMsnMo0UqOhuPOyspltyehZ6ZBxiI3uwXN6eE8vND8ib1EW25D79J
SYluWx+O33Tv39ahQpz6htCgbNl3Cf1t9ZdK28uSxFIzKoV2EtQ0TsztfRAWSaVU
F62ZTKdG9JUtUCBXQ6vvkGKp+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK6diwsP
nDEZp0zDx3hmH+/LU1K1MB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2
OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRGNjYvRTVGNjU4QUEzNjhBMTFFQUI1NzQ5MjcyQzRGOUFFMDIvQzUzNjI5RkVF
QUNFMTFFRUE4NTEzRDM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3R3MA0GCSqGSIb3DQEBCwUAA4IBAQClgmuySlNJG3gdcD/Yy+m1
AmoN9QolCoNXv7BDQoi+jR4O5zd54xHM2Ih076QNjsVVN/m6Xi/I1EZ0OXmXU56l
luHtNG0t67WwimQXdCuZPVwa0IHwGCp2/hECOMQ/YohsaZgCE4VaeVKjPr2V2yQH
fyQ4sVv8kIXlYa9t6CEHKlIsogDIPolD1uufw1hoaGtrHBJJAkPXWrNhAdhj8xiC
Y654logFFo84WIm4YL24eeVYuFYUa4QGqYszSLoI6flqZP0sn0oTQwElyUn1bCRa
c/uBEAsxljhBlR9p/lM+JlVoR6e85/9Kqyy9gSFWWXA8WyoDeYUzQiC3PNp7o7ZB
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:18 2026 by rpki-client