Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
File:                     DEBDCECAC2CF11EFA805380FC4F9AE02.roa (raw, json)
Hash identifier:          /ycYefsrCAkt4UHFlzokHoXIxkbvkF32l5iChlZZJd0=
Subject key identifier:   6C:C2:A1:F0:A7:84:C8:65:BA:AC:6F:97:EB:5D:20:B4:D9:63:2D:FD
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0525
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:42 +0000
ROA not before:           Wed 24 Dec 2025 05:12:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135046
IP address blocks:        103.152.116.0/24 maxlen: 24
                          2001:df4:e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Dec 24 05:12:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4806e-9b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:d7:08:82:6c:09:5e:6d:ed:10:be:c6:d5:
                    d8:4a:09:f9:85:0b:38:98:85:04:4c:22:49:7d:e7:
                    8b:0f:3a:60:28:28:9d:06:4a:5d:be:54:00:d7:d4:
                    65:05:db:e4:73:fe:37:ea:3c:3d:47:b5:b2:ed:55:
                    24:59:52:69:50:0e:d0:ca:49:41:c6:06:00:6c:d1:
                    0f:f4:70:8b:d9:30:7c:3e:6b:20:67:35:ba:6c:46:
                    cc:ec:d3:f2:67:b8:69:7a:01:ba:eb:8f:4a:ca:18:
                    50:b6:80:c5:9b:4f:65:b2:67:e6:d1:a2:33:19:10:
                    5a:23:a4:37:10:7f:5f:10:12:ff:1b:70:1a:3b:01:
                    87:25:dd:a3:2a:bc:70:7f:36:04:1b:1f:87:8f:8e:
                    43:73:16:cb:76:7c:58:0a:bf:06:34:81:1f:98:71:
                    70:74:a7:3d:51:d8:39:89:07:2a:d0:2f:dd:09:19:
                    fe:71:c6:e5:b1:c7:69:57:2b:bb:07:62:15:15:ec:
                    d2:f6:42:5c:20:16:5c:d4:59:83:9a:fc:b6:fb:90:
                    4c:97:9c:d0:e2:eb:e7:48:ef:6f:d4:1c:87:13:fb:
                    a3:55:db:73:f4:7f:22:39:44:0a:f0:a2:bc:eb:f0:
                    29:0e:be:ec:ec:9f:ce:35:33:fb:d3:57:67:36:06:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C2:A1:F0:A7:84:C8:65:BA:AC:6F:97:EB:5D:20:B4:D9:63:2D:FD
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24
                IPv6:
                  2001:df4:e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:8b:bb:0a:09:27:01:66:e0:af:2a:56:12:2d:06:bb:f1:c2:
         af:f8:60:1f:22:40:b8:7a:aa:8f:f1:8c:36:9c:24:ee:e1:fd:
         9e:52:be:4d:8f:4f:1e:f6:5d:f6:42:7c:47:ce:2e:f5:86:79:
         5d:2f:17:61:91:01:37:7c:de:13:4c:c7:fc:05:df:59:2d:5f:
         d1:ae:dc:c2:f7:f8:71:c8:90:0e:08:57:8d:a9:56:95:c7:ed:
         fe:b6:b6:45:0e:a5:2f:d5:7f:97:59:37:5d:3d:2f:50:4e:30:
         e0:25:97:a2:25:47:66:f1:f9:c0:12:d0:db:04:09:ad:b9:82:
         6d:1a:7e:04:a9:aa:25:44:51:56:72:6a:64:ad:92:7f:e3:3f:
         19:c6:48:4c:e7:2e:ef:10:4d:a4:20:5e:a5:2c:3e:e8:cc:16:
         88:7a:cb:52:0a:6b:00:8d:24:af:f5:b0:3e:ad:4e:8e:6b:02:
         79:da:2a:1c:2b:90:a8:24:05:29:9c:c7:d0:6c:7e:0f:4c:78:
         63:18:7b:6c:28:16:4f:79:dd:34:2a:ce:b0:8e:ad:3f:61:1e:
         fc:94:10:33:06:2d:f4:74:1e:b1:30:1a:75:44:95:a7:5a:1f:
         b5:12:88:55:4a:02:96:31:59:63:31:3a:63:7d:06:23:0a:51:
         6d:e2:46:3c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0
ODVCMDVBMkMwHhcNMjUxMjI0MDUxMjI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODA2ZS05YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtarXCIJsCV5t7RC+xtXYSgn5hQs4mIUETCJJfeeLDzpgKCidBkpdvlQA19Rl
Bdvkc/436jw9R7Wy7VUkWVJpUA7QyklBxgYAbNEP9HCL2TB8PmsgZzW6bEbM7NPy
Z7hpegG6649KyhhQtoDFm09lsmfm0aIzGRBaI6Q3EH9fEBL/G3AaOwGHJd2jKrxw
fzYEGx+Hj45DcxbLdnxYCr8GNIEfmHFwdKc9Udg5iQcq0C/dCRn+ccblscdpVyu7
B2IVFezS9kJcIBZc1FmDmvy2+5BMl5zQ4uvnSO9v1ByHE/ujVdtz9H8iOUQK8KK8
6/ApDr7s7J/ONTP701dnNgbV1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGzCofCn
hMhluqxvl+tdILTZYy39MB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD
QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVFMDYvMDU1OUVFQUU1Q0JFMTFFQ0IyNzNEQzdDQzRGOUFFMDIvREVCRENFQ0FD
MkNGMTFFRkE4MDUzODBGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ5h0MA8EAgACMAkDBwAgAQ30DoAwDQYJKoZIhvcNAQELBQADggEB
ALOLuwoJJwFm4K8qVhItBrvxwq/4YB8iQLh6qo/xjDacJO7h/Z5Svk2PTx72XfZC
fEfOLvWGeV0vF2GRATd83hNMx/wF31ktX9Gu3ML3+HHIkA4IV42pVpXH7f62tkUO
pS/Vf5dZN109L1BOMOAll6IlR2bx+cAS0NsECa25gm0afgSpqiVEUVZyamStkn/j
PxnGSEznLu8QTaQgXqUsPujMFoh6y1IKawCNJK/1sD6tTo5rAnnaKhwrkKgkBSmc
x9Bsfg9MeGMYe2woFk953TQqzrCOrT9hHvyUEDMGLfR0HrEwGnVEladaH7USiFVK
ApYxWWMxOmN9BiMKUW3iRjw=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:29 2026 by rpki-client