Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/5DB76F8212B211F19AC313AEB5EE528E.roa
File:                     5DB76F8212B211F19AC313AEB5EE528E.roa (raw, json)
Hash identifier:          thz/xu5SDCp7IsXyHkAV4UbX3Fz6LFdXZp57ebWT6zw=
Subject key identifier:   33:8C:4C:05:F9:CE:9A:6F:4E:20:6C:D8:26:51:2A:D6:79:BA:A0:1A
Certificate issuer:       /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial:       DF
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/5DB76F8212B211F19AC313AEB5EE528E.roa
Signing time:             Sun 01 Mar 2026 16:57:18 +0000
ROA not before:           Thu 26 Feb 2026 01:27:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9268
IP address blocks:        103.17.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
        Validity
            Not Before: Feb 26 01:27:51 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a46fed-d6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:c7:ed:a0:6f:b7:a0:0a:05:a8:71:5c:b9:
                    2f:19:c4:c7:23:a6:d2:57:61:e1:42:fd:8d:b1:79:
                    90:95:b0:85:ae:11:aa:59:17:a1:d2:c4:75:1f:5a:
                    f0:a2:fd:c7:3a:6e:49:ed:6e:f3:cd:51:48:5a:6b:
                    61:1d:b5:0a:38:9c:66:02:b9:a8:46:95:05:3c:55:
                    53:13:67:8a:a1:1d:d4:2a:21:72:89:9d:9b:5c:43:
                    5f:91:01:50:6a:4f:2d:02:a5:07:09:59:1f:5c:a0:
                    78:22:1a:33:40:07:43:34:d0:ea:19:9b:3c:99:0f:
                    1c:fe:9f:6c:ad:f3:9b:56:34:64:fa:50:2f:ba:17:
                    4c:d0:82:70:1a:63:c6:be:a5:8e:bf:17:af:9b:85:
                    5d:45:b1:70:61:54:a1:99:f0:3c:7e:15:d2:87:39:
                    68:5c:98:3d:1a:58:1c:62:e0:e6:6e:19:c7:c5:ba:
                    d7:39:50:7b:32:81:4c:4d:fd:c9:25:29:31:55:78:
                    94:ee:9e:79:75:a5:0e:7a:95:d9:5e:df:a2:72:78:
                    0d:ae:3a:e3:3b:53:a4:c8:37:c5:91:f0:ce:23:c2:
                    9f:5d:85:a0:d5:f8:a5:ea:a9:3c:11:d9:ca:07:e3:
                    b3:ed:5e:d7:34:b4:54:71:72:d6:a3:57:97:fd:4b:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:4C:05:F9:CE:9A:6F:4E:20:6C:D8:26:51:2A:D6:79:BA:A0:1A
            X509v3 Authority Key Identifier:
                keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/5DB76F8212B211F19AC313AEB5EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:1f:af:bb:c5:75:35:8f:f2:d0:01:7c:bc:82:7a:14:39:
         1e:03:00:a9:23:f7:fb:3e:31:a4:e5:e2:05:8c:d6:91:99:98:
         35:0c:66:e0:2f:76:0e:49:68:29:df:09:fe:5a:ae:7d:19:58:
         e1:c3:6e:8d:af:79:61:35:78:f2:a2:46:3e:23:42:38:f0:89:
         d0:e3:61:c9:51:42:4f:ab:3e:6a:92:63:3f:eb:40:83:f8:5a:
         12:41:16:12:9c:b4:dd:ce:68:05:09:c7:54:02:92:c0:93:75:
         df:28:99:ec:eb:0f:b3:62:fb:f7:46:5f:1e:0f:42:d2:00:08:
         8a:15:a9:cb:a6:a4:e6:d6:73:4c:4f:fd:b6:f7:a2:1e:43:01:
         11:9b:ec:f0:7e:b5:02:cb:1e:6c:a2:56:cd:73:a2:ae:87:fa:
         ec:be:2c:1e:75:43:f9:21:a4:68:6b:b3:30:52:41:5f:0e:2b:
         72:c9:f9:ba:86:63:13:cc:49:24:f9:fa:46:83:6f:e5:6f:d4:
         fe:d6:a5:d5:e4:08:4f:6e:86:23:ac:e0:2f:70:cd:15:cb:7a:
         92:86:97:a3:62:8a:72:e7:af:ad:13:2b:55:ef:75:40:52:8e:
         ec:e3:a0:86:ad:40:4c:f0:7b:e2:af:5f:2f:fb:e1:a8:fc:20:
         34:72:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:25 2026 by rpki-client