Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
File:                     67A55414D56911EFB3E08134C4F9AE02.roa (raw, json)
Hash identifier:          kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=
Subject key identifier:   31:EE:25:99:EB:07:40:0D:FA:B5:EA:57:9A:8B:42:8A:FC:36:D8:0F
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       03D2
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:01:37 +0000
ROA not before:           Thu 03 Jul 2025 01:36:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153494
IP address blocks:        45.121.56.0/22 maxlen: 24
                          103.61.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
                          rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
        Validity
            Not Before: Jul  3 01:36:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42aa1-1a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:c2:aa:52:59:ca:de:8f:3b:c3:70:83:6d:
                    de:4c:70:d5:ed:69:0c:a0:6f:96:77:24:53:96:76:
                    ce:43:20:97:ce:72:2b:f1:fb:5c:8a:cf:44:8f:10:
                    f5:5c:a1:37:b2:76:a9:65:4f:86:60:4f:e7:e4:1e:
                    aa:1b:3b:bb:95:a0:a2:f8:a9:cc:2b:78:16:9f:05:
                    91:b4:19:37:f6:fa:c1:84:8d:d2:86:50:03:98:95:
                    73:56:ec:00:04:1a:31:35:b7:fa:27:c5:75:b2:c4:
                    1b:ad:34:88:67:1d:b9:cb:0d:f8:06:d5:37:b7:d3:
                    3e:27:54:6a:a4:5b:a4:d3:e7:fb:b3:a2:a2:07:a6:
                    a2:33:4a:71:b0:1c:14:f7:ab:66:0a:bc:58:19:db:
                    5f:13:b1:9b:a9:f0:97:92:02:63:1e:66:f9:19:cc:
                    d1:e2:87:13:01:1a:a2:b7:36:78:75:4d:11:25:0d:
                    a9:a1:28:c7:08:5e:b5:e8:0e:e7:f9:66:04:5c:fc:
                    0e:17:4b:2b:76:04:b2:ad:46:21:fb:d4:8b:24:de:
                    ee:b6:84:65:13:1f:24:92:e3:ea:c0:96:60:7e:3e:
                    b7:a3:a6:46:18:5d:c6:d0:ed:06:de:20:68:60:ef:
                    7b:b9:dc:22:60:3f:18:a7:23:86:dd:54:dc:64:a2:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EE:25:99:EB:07:40:0D:FA:B5:EA:57:9A:8B:42:8A:FC:36:D8:0F
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.56.0/22
                  103.61.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:f2:75:dd:a8:9c:6c:9a:af:60:8d:08:c7:e7:07:30:d5:
         bc:6c:84:65:3f:84:e9:36:95:fd:ea:d9:3a:87:0f:68:9c:fa:
         2e:fa:53:94:b5:64:25:e1:77:12:c1:8b:64:fe:76:4e:3a:1e:
         15:56:c0:24:67:77:af:34:ef:4e:08:25:25:e5:65:be:36:fa:
         1c:28:a5:dd:37:da:48:ce:08:72:20:d1:35:64:4d:84:cc:63:
         c4:62:36:4f:0c:dd:e7:14:67:6e:32:b8:1c:53:6a:ed:29:b2:
         22:8a:11:04:3b:b0:f4:89:88:54:51:43:c9:93:ac:39:c1:f5:
         78:57:b0:cd:87:01:df:0a:5f:a2:84:46:6a:f6:b1:3e:bf:89:
         87:ad:b9:22:e8:b7:ca:27:55:30:5d:c3:db:1d:75:1a:ca:2d:
         2a:b3:46:2e:6a:83:b1:23:fd:a2:27:83:44:72:02:ce:c2:83:
         0c:93:d5:ee:13:8d:db:29:99:4f:81:88:a0:ba:4e:c2:72:93:
         42:16:59:47:b6:31:4f:4d:79:96:8b:77:3a:81:23:12:81:42:
         68:d8:38:58:5e:94:52:7c:c6:32:1c:77:56:ec:8f:47:76:a0:
         a4:9e:49:5a:2e:2e:1f:e6:1f:ed:c1:7d:07:b2:f5:d0:15:51:
         99:af:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:38 2026 by rpki-client