Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa
File:                     1DDE652A03C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier:          llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=
Subject key identifier:   1F:18:7E:49:96:D2:F2:7D:41:5A:29:DB:90:65:84:3C:46:0E:36:38
Certificate issuer:       /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial:       0216
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:07:22 +0000
ROA not before:           Sun 23 Nov 2025 01:18:46 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137418
IP address blocks:        103.197.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
        Validity
            Not Before: Nov 23 01:18:46 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4562a-eca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:29:47:e0:97:d3:fb:1c:90:4f:09:d1:12:
                    5b:34:39:21:1e:51:0d:79:8d:94:b9:6f:76:fc:2b:
                    79:e6:4d:ae:ae:6a:29:48:9a:0b:21:fa:2b:0b:78:
                    9c:b2:b3:a9:47:dc:66:64:2a:e5:fe:96:bb:b4:75:
                    a3:85:f0:32:78:b0:8e:b8:e5:b6:e3:22:9e:49:85:
                    4e:db:c8:17:52:ca:7a:de:ef:c2:cb:1d:12:74:e4:
                    12:4a:35:ee:af:25:f5:4d:f3:21:f0:57:eb:5a:89:
                    96:fb:b0:f3:ed:93:f7:0d:fd:02:64:55:da:42:0e:
                    68:a0:45:9d:81:68:aa:91:95:e2:49:06:46:bb:04:
                    23:58:d5:5c:cf:52:73:82:4b:a4:36:a8:28:19:79:
                    68:66:8e:b4:7e:a5:7b:91:cd:1d:9c:dc:55:9c:e1:
                    49:39:3d:ba:dc:7a:09:84:84:e6:b2:3b:13:71:35:
                    a7:76:29:38:2f:e3:01:09:ef:f2:99:00:23:b7:1e:
                    6b:35:55:81:85:c1:25:12:63:18:c1:c7:95:33:d4:
                    0a:13:b8:3a:9e:bc:f5:2b:c2:f2:a2:e9:e5:eb:de:
                    6c:5d:79:30:ce:6a:32:ae:c2:67:37:fe:41:55:ce:
                    5a:12:49:dc:b6:af:99:c3:c7:9f:f8:1c:0c:56:e4:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:18:7E:49:96:D2:F2:7D:41:5A:29:DB:90:65:84:3C:46:0E:36:38
            X509v3 Authority Key Identifier:
                keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:35:58:a3:7a:cd:98:73:61:a5:95:ad:68:99:cc:2e:39:
         25:15:30:87:32:b7:71:fd:ee:81:72:61:cd:f3:40:7a:ca:ec:
         f3:3e:98:f0:56:3e:3f:e1:f9:39:62:1d:85:08:6c:47:65:e4:
         9b:5d:c6:88:a4:fb:3e:8b:12:22:8e:82:c1:c9:d6:fa:cc:71:
         a6:0e:74:6f:72:0c:86:85:79:03:76:40:1b:4e:e9:fe:71:94:
         30:b5:d6:8f:f3:b7:0b:30:b7:ed:6b:2a:0e:6d:81:3b:4e:16:
         b8:c0:44:de:52:b3:8c:11:1f:20:16:21:64:e8:3d:bd:cf:08:
         d2:8f:77:77:de:88:d7:07:d8:c4:f4:0a:62:c9:73:d9:60:7d:
         8c:01:1e:b1:85:3a:2c:ac:8d:49:11:ab:51:6e:6a:9e:f1:e0:
         ef:55:17:39:db:e9:dd:f3:a9:d7:c0:51:b0:50:b1:89:97:3d:
         1a:d8:d8:d1:ac:85:9b:26:f5:10:fd:b7:54:01:a5:d1:94:bb:
         19:75:80:a4:47:61:21:8b:26:ae:41:c5:89:8d:48:e9:eb:a8:
         36:c2:ce:0a:c2:67:da:05:43:d2:2f:f8:9c:15:69:10:98:12:
         be:d2:8b:e2:e3:90:6b:3a:b2:94:f1:ba:4f:f1:9c:45:b9:f1:
         27:6f:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:28 2026 by rpki-client