Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa
File:                     78A6163A03A111EF8B02B62AC4F9AE02.roa (raw, json)
Hash identifier:          /cyIS7He6/hUkUatIHzzKlcuqjzcEKY9CwicKq3CtKI=
Subject key identifier:   70:F5:5B:7B:CE:2D:C7:2A:37:F9:0B:03:40:44:48:EB:C7:8A:91:31
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       0164
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:25:38 +0000
ROA not before:           Wed 07 May 2025 05:12:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135345
IP address blocks:        103.41.8.0/24 maxlen: 24
                          103.41.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: May  7 05:12:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58fd2-f0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:0e:42:ab:a7:65:02:26:2c:65:5e:29:75:
                    2f:16:c7:0f:f1:62:bd:35:e8:eb:29:25:92:7c:a3:
                    e7:bf:86:76:17:b8:88:ce:29:83:7b:8c:d1:5c:62:
                    08:fe:29:f9:8d:63:23:4b:bd:9a:81:f7:36:02:39:
                    92:f3:b9:7e:5a:e7:5a:09:fb:fd:55:20:6e:79:e7:
                    95:ca:f7:2c:2d:74:f3:44:ce:70:b5:f0:76:e1:76:
                    74:04:8d:8e:84:d2:ea:1b:44:be:f1:8f:c6:55:57:
                    83:fc:24:3b:bc:68:a3:94:41:e9:7f:e2:e8:10:96:
                    9e:d0:70:13:7c:c6:cc:72:e3:72:2c:67:84:a3:85:
                    f3:36:eb:62:18:20:e2:13:7d:4e:b9:ae:76:aa:c2:
                    bc:93:3e:a8:5b:eb:c6:39:bb:f0:96:40:dc:5e:86:
                    1e:f3:9b:0a:8c:e3:34:c6:af:2d:65:81:49:1f:cd:
                    73:12:69:74:25:70:3b:56:95:c6:bf:80:72:ea:95:
                    1d:45:56:53:dd:d7:40:b2:71:28:fb:c7:72:f5:9d:
                    05:56:68:c8:8e:4f:f3:80:c2:0a:a0:67:3f:49:26:
                    18:b6:af:e0:d4:ad:e5:c3:b7:4c:b0:1f:06:36:0e:
                    51:25:ea:76:38:d4:c5:7c:49:dd:d8:c7:e0:0b:0b:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:5B:7B:CE:2D:C7:2A:37:F9:0B:03:40:44:48:EB:C7:8A:91:31
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:79:7c:92:45:9e:42:be:0c:1c:1e:e7:49:2b:66:99:df:
         2f:2a:75:68:5f:61:24:45:cd:a5:c4:81:75:45:55:f2:d9:ab:
         bc:a2:39:6b:dc:b8:ff:7e:35:7b:78:d9:d3:94:3e:05:e5:c0:
         34:ed:e8:d7:62:e0:0a:ab:71:a2:ab:1d:83:1e:e4:94:7c:61:
         27:dc:c3:36:fc:22:e2:4c:48:65:c6:50:9b:d8:51:3e:d1:38:
         2d:a9:d8:c4:55:17:de:56:14:56:e4:c7:3a:45:8b:98:d7:d6:
         e2:35:41:80:36:3b:43:e8:db:55:39:86:52:85:9d:dd:4b:b6:
         9d:8f:d1:1d:cd:60:5f:3c:d8:bc:d3:0e:d0:39:fe:54:60:e3:
         c8:da:12:a7:21:57:b4:2a:dc:03:5d:50:46:db:47:fa:2b:f0:
         9a:13:f5:29:87:ae:7d:ce:32:00:d3:8d:3a:27:f8:e3:1d:59:
         51:2f:b4:d5:a6:d2:c3:b8:b3:30:4a:84:97:29:da:ce:c0:3d:
         2c:0c:67:e9:13:56:2e:d1:ff:f7:29:58:4b:66:f7:39:21:11:
         10:ba:a7:ce:34:54:44:7e:f7:7f:8b:43:70:52:1b:b4:48:52:
         15:47:83:90:e9:cb:27:9b:bd:12:6b:89:73:06:bf:db:76:58:
         26:a8:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:54 2026 by rpki-client