Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
File:                     A1491F7CEB7811EB9134133BC4F9AE02.roa (raw, json)
Hash identifier:          LMpJMuYVTyY2sVa9uHYEonkQ7494tf0v3yx1gmrO5vY=
Subject key identifier:   16:13:8D:C4:BC:7D:50:9C:2D:75:76:1D:5D:39:12:89:AC:57:16:FC
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       05E7
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:50:03 +0000
ROA not before:           Sat 31 May 2025 00:25:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135607
IP address blocks:        103.166.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: May 31 00:25:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fdbb-b5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:8d:6e:77:1f:a7:44:b4:4b:5e:a4:e3:0f:
                    0e:80:b6:c8:7e:3c:11:9b:41:b0:c2:40:1e:77:49:
                    c5:17:0a:da:53:88:31:5a:1f:61:06:26:2f:2e:d9:
                    da:94:85:a7:0f:d0:c2:46:a8:3c:ae:b8:2a:ab:4d:
                    55:00:cf:fc:66:65:ad:e6:01:f7:75:0a:f1:ca:70:
                    65:9b:f9:2a:43:9a:7e:f9:92:7c:80:41:b8:3a:a5:
                    fc:c6:48:9d:7a:bf:b5:16:5f:c1:d9:91:5f:fe:e7:
                    69:3a:e7:33:34:92:20:4d:3a:a0:b5:4b:6f:7b:a9:
                    b9:0c:b6:a6:d2:df:23:eb:7a:4b:9c:3d:99:3f:82:
                    55:56:c0:ee:02:ff:ba:e9:93:df:a6:35:02:0c:b9:
                    30:e9:08:01:b1:ed:1e:9c:53:2d:e9:bd:5c:c2:b8:
                    29:82:52:d7:25:bd:41:87:79:93:63:4a:51:e2:dd:
                    57:48:32:ae:3f:a7:be:08:81:d3:43:a6:ed:21:50:
                    4b:de:e8:70:fa:67:15:35:76:1b:86:ed:1d:9a:6e:
                    11:ff:1a:ac:fd:f1:a0:ff:fc:a3:51:be:e9:71:ea:
                    d1:38:af:e8:24:f0:c4:35:73:38:9d:4f:40:92:b9:
                    a1:77:61:4f:14:2e:f0:4b:86:39:81:c1:b5:fd:61:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:8D:C4:BC:7D:50:9C:2D:75:76:1D:5D:39:12:89:AC:57:16:FC
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:5d:63:55:37:5c:2d:cc:13:d0:a4:76:8e:a4:c5:f8:50:
         bc:62:a9:84:7c:cc:94:1f:88:04:52:be:bf:4f:e7:25:73:56:
         0c:ef:63:0d:19:49:c2:12:6c:b8:7a:e1:1c:f0:4c:9e:b5:f8:
         f2:7d:1a:eb:d7:08:50:7b:db:9d:ec:4c:56:03:00:09:98:43:
         1d:0b:a9:ac:a6:8b:87:e4:bc:f9:4f:02:0e:29:8a:49:96:15:
         a5:e4:d9:ac:bc:09:8e:1b:44:85:03:f8:19:0c:e2:b2:3a:7d:
         60:cb:00:53:9e:aa:23:69:8e:66:e8:9c:f7:67:bb:48:5f:57:
         f4:1a:4e:a9:7d:80:0b:67:f4:21:30:bc:2a:92:d5:82:e3:14:
         05:1d:07:83:2e:16:e0:a1:6a:c5:55:70:18:d6:9e:1b:bf:b4:
         d8:67:b6:4c:68:30:d3:69:a6:cf:32:3c:f2:21:00:c6:97:d8:
         74:93:14:bf:be:b2:2a:9f:f7:d9:a7:e6:35:80:91:eb:0b:3f:
         4b:7f:90:a0:5a:98:ff:36:06:e9:a0:92:d3:17:60:20:a5:88:
         59:b5:39:a7:72:18:e7:53:9d:99:ee:28:80:d0:90:f5:13:51:
         3d:88:72:c8:46:a3:4e:a5:b4:ff:94:55:85:2d:1e:8b:de:67:
         92:a4:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:04 2026 by rpki-client