Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa
File:                     B4C25A82772811ECA418E366C4F9AE02.roa (raw, json)
Hash identifier:          jsBQ4IjJHGtGDAZLpB0JonWlKEkmPOsB+LjjK4ifeUU=
Subject key identifier:   79:06:BE:19:A4:64:0B:1B:D4:AD:FC:DD:16:B6:53:5E:6F:BB:2E:F2
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       048C
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:59:40 +0000
ROA not before:           Thu 07 Aug 2025 01:07:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138693
IP address blocks:        103.170.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
                          rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Aug  7 01:07:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40e0b-fa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:44:de:f2:21:a1:da:bd:12:3d:5c:4b:7b:
                    4e:06:5f:23:02:68:97:12:cf:1b:a3:05:81:3c:0d:
                    34:e9:dd:32:03:d5:90:20:c5:4c:ce:0a:ab:9e:24:
                    f2:13:95:e1:e3:0f:84:ca:e4:ad:a4:f6:fd:bb:1e:
                    27:5f:cb:92:69:5d:c4:86:69:ac:56:42:1e:ff:45:
                    3f:83:95:86:4d:43:72:e7:97:9f:19:0a:6d:a1:27:
                    3a:14:d8:88:37:a1:af:0d:4d:7e:ce:8d:6f:ea:c3:
                    72:52:95:51:52:19:16:81:ef:73:86:65:a8:54:47:
                    5b:e0:3f:4d:cc:a3:a5:56:5b:f6:d7:42:b4:80:54:
                    ad:de:02:d0:62:7c:45:bb:d3:83:2f:d4:4f:ca:a2:
                    5d:30:aa:bc:0c:ed:92:a5:8b:51:61:e0:80:f9:07:
                    fb:9a:b3:11:08:dd:7a:6f:20:f6:c2:39:e8:bb:5c:
                    ed:63:91:b2:41:d7:70:b3:d9:b1:4d:a4:99:b3:18:
                    71:61:60:26:52:4b:a3:d0:ba:fc:c2:25:97:b5:31:
                    a6:3c:70:7d:84:ee:4c:6a:9d:06:f7:86:28:7b:dc:
                    d3:cf:32:c0:db:98:b6:c3:3e:bd:ad:64:30:fa:7c:
                    71:76:05:fc:55:be:09:c0:de:65:9e:42:5c:15:4b:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:BE:19:A4:64:0B:1B:D4:AD:FC:DD:16:B6:53:5E:6F:BB:2E:F2
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:4a:83:a6:6b:ad:21:6b:ef:b8:72:14:84:c7:51:ea:a7:
         10:b6:58:78:cd:da:c6:93:bb:f4:08:1f:87:33:f5:70:a3:cc:
         64:4f:4f:d4:2c:65:07:55:49:f8:6e:3e:e4:d7:69:40:58:cb:
         0a:85:f8:18:c9:60:9e:ad:f5:38:46:9d:ab:b8:75:c6:95:54:
         e3:03:ab:5f:84:6f:d6:be:5d:4b:7f:70:b0:3e:7a:5f:44:0f:
         eb:ba:4d:8a:d6:78:3b:96:be:43:28:03:0a:35:70:db:61:eb:
         f7:14:9d:85:6a:25:c0:2f:a1:1b:56:5e:99:8a:f7:a4:f8:f7:
         de:e5:1f:4c:e6:60:8d:ee:cd:f4:83:b8:df:54:36:57:e4:25:
         ee:9d:16:d7:98:52:92:95:83:b1:3c:82:9c:b5:ce:bc:40:7f:
         bd:00:8e:c0:ff:df:d4:f2:65:02:4c:69:af:de:9a:c8:0d:1b:
         91:f3:3d:ca:27:0d:0e:2c:66:b4:b4:dc:a9:c4:57:88:94:e5:
         9c:fa:67:fc:9c:28:3d:51:72:08:e5:6a:6f:d4:a8:f8:5d:b3:
         52:4a:6f:8c:b4:6f:30:f8:b6:5e:2e:ac:5d:19:33:41:81:af:
         63:25:fd:7e:2b:5c:79:a3:7c:f3:50:da:54:ae:bb:e3:a1:72:
         81:cc:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:36 2026 by rpki-client