Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/6229E2DC5C7911EC8C7BD812C4F9AE02.roa
File:                     6229E2DC5C7911EC8C7BD812C4F9AE02.roa (raw, json)
Hash identifier:          8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=
Subject key identifier:   25:EC:63:38:B9:1F:9A:89:D9:B9:AB:C5:57:FA:3D:1F:EF:B6:43:98
Certificate issuer:       /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial:       04D0
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/6229E2DC5C7911EC8C7BD812C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:47:26 +0000
ROA not before:           Wed 29 Oct 2025 00:14:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147000
IP address blocks:        103.172.174.0/23 maxlen: 24
                          2001:df7:7580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
        Validity
            Not Before: Oct 29 00:14:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4355e-e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:d0:f8:aa:7f:2b:1c:18:93:61:0c:d3:f2:
                    da:55:92:42:ce:b9:0e:f0:7a:b0:c6:5b:4d:dc:d9:
                    1a:b7:ed:ce:2a:19:9e:75:f7:b0:d1:96:ea:ec:db:
                    b0:2e:0f:bb:96:b0:eb:ec:12:9a:62:d0:6d:ff:3e:
                    12:69:fa:fe:ba:56:85:aa:b5:f6:bf:f3:74:b3:f2:
                    30:6c:08:88:d9:06:e9:54:00:61:3f:89:90:1c:55:
                    8b:84:5c:05:cd:27:f8:06:24:0d:af:1c:85:31:9d:
                    5e:77:8d:28:d9:59:f6:52:f8:05:13:7b:40:39:bb:
                    1c:19:6a:19:a8:8e:ba:5f:10:d3:99:80:45:1f:6f:
                    69:d7:ea:3b:90:71:2c:ed:33:4b:04:ad:10:28:d4:
                    bf:89:d2:1d:a5:49:a6:eb:53:00:ea:aa:4b:35:3d:
                    4e:ae:0b:6d:15:cd:c7:df:b5:e5:06:5e:3c:73:d4:
                    7a:d5:de:8c:d0:ba:d3:31:f3:9e:9c:e5:b1:ab:ec:
                    09:54:43:d3:58:a6:b8:51:c8:3c:6c:52:0a:88:b1:
                    a3:a2:32:fe:8f:28:05:fc:d4:cc:ea:dc:f2:64:be:
                    7d:a0:cf:cd:d2:5d:11:2c:0c:b1:af:e3:39:a5:9d:
                    b4:24:0c:77:9c:77:ad:84:d9:3b:1a:ff:8b:3f:61:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:63:38:B9:1F:9A:89:D9:B9:AB:C5:57:FA:3D:1F:EF:B6:43:98
            X509v3 Authority Key Identifier:
                keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/6229E2DC5C7911EC8C7BD812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.174.0/23
                IPv6:
                  2001:df7:7580::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:98:2f:85:ab:65:c2:6e:33:b1:46:2b:2e:81:24:58:2f:
         5e:89:cd:35:11:fe:19:7f:30:18:c3:25:0c:06:70:01:3f:f0:
         da:b8:75:8b:fe:a5:d0:66:80:6c:8f:ae:9e:63:6a:de:be:23:
         88:5f:c9:93:f8:67:ad:bc:ac:34:96:42:1d:ab:c0:46:7f:f6:
         a1:7d:1f:02:75:10:36:3c:94:2f:09:40:e5:e7:0d:b1:8d:3b:
         21:61:5d:fa:7d:fb:d7:c7:49:f3:f9:54:e1:4a:81:87:56:96:
         05:5b:60:52:cb:99:f5:58:46:06:fa:26:cd:20:ab:d2:81:bf:
         32:90:65:57:05:48:94:84:3d:8a:8d:2c:da:53:cb:aa:8a:f8:
         5a:3a:db:73:92:57:27:5e:d6:ce:77:80:d2:0b:c4:9f:8f:37:
         a3:e7:bd:76:82:90:6a:3e:a2:c1:1b:69:35:7c:f2:46:29:f1:
         35:36:5e:6a:25:3c:82:64:b9:09:aa:15:7c:86:b7:78:4d:73:
         81:e8:67:87:b5:70:06:63:09:04:bc:89:2d:d1:89:9a:ca:b0:
         47:5d:ed:2f:aa:bb:75:75:7a:f5:81:a2:56:7e:f5:e2:17:87:
         d6:e4:35:94:42:ba:0e:b6:d7:93:b8:38:04:5d:cc:05:3c:c3:
         5f:c0:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:51 2026 by rpki-client