Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
File:                     F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (raw, json)
Hash identifier:          PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=
Subject key identifier:   FF:E5:B1:97:56:4B:97:27:4F:D8:36:78:25:C6:10:67:2C:FA:18:F9
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       0614
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:51:55 +0000
ROA not before:           Sat 26 Jul 2025 23:34:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142558
IP address blocks:        103.169.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jul 26 23:34:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40c3b-1eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:58:52:2c:e1:ae:4d:73:c0:67:e2:84:cf:
                    3e:0d:a8:4a:a4:54:04:d8:e7:f1:4a:46:f3:e1:ea:
                    34:b2:21:1f:29:99:29:f3:6c:23:cd:5a:36:2a:bc:
                    e0:d7:20:8f:fb:46:1f:5d:69:33:3f:82:43:c7:bb:
                    92:1a:8e:8b:81:fd:e7:06:54:9b:22:a4:c7:e8:66:
                    ca:ff:13:39:72:fb:12:de:ec:4c:17:f8:d9:8a:9e:
                    51:4f:1d:1c:80:1d:42:0b:fd:58:91:e7:ee:38:4b:
                    ac:af:55:27:99:d0:c0:1c:f1:42:30:62:f7:62:21:
                    7c:4d:ce:0e:d7:ff:b0:53:50:6c:69:93:f3:5d:a3:
                    52:d1:0b:0b:ba:ae:02:2f:f1:1b:f8:07:28:63:6c:
                    08:46:00:14:9e:87:05:cd:ae:a0:02:e1:d4:39:1b:
                    7d:ba:ee:ea:99:cf:04:57:bd:24:40:97:74:da:bf:
                    c9:a0:ca:b9:76:ee:3d:f7:5f:16:a7:76:99:04:c9:
                    2b:0d:8d:c9:48:56:0e:61:32:4b:bd:b4:0c:74:0c:
                    55:ad:fc:9f:56:cb:e7:25:f3:6c:ec:1e:ff:2f:95:
                    ac:5f:92:a4:2d:fd:03:49:52:49:9d:5e:cc:3c:0c:
                    04:ef:ba:fa:d1:0c:3e:18:37:26:25:10:b7:bb:d2:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:B1:97:56:4B:97:27:4F:D8:36:78:25:C6:10:67:2C:FA:18:F9
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:08:55:88:bb:11:f2:ef:38:58:31:cf:0c:34:5f:cb:12:24:
         33:d1:7b:bf:e5:59:98:d9:b4:0e:71:d1:39:99:4d:a4:89:2f:
         39:44:65:27:3d:d4:33:5d:dc:87:55:28:52:4b:a9:05:cd:50:
         db:2e:91:48:84:69:8c:d1:3f:d7:61:45:4d:5a:f9:eb:3c:54:
         b5:50:5a:ec:a2:f6:59:6e:f6:5e:49:39:33:bf:03:5b:8f:77:
         a8:a5:f5:23:18:35:46:cb:94:86:9a:20:cc:b9:4f:2e:4d:c6:
         25:7f:7c:e3:14:20:0f:19:d9:c7:6e:2d:a4:f8:b8:93:3c:d7:
         d6:3f:a4:99:81:4c:c7:b3:c1:c4:84:15:e8:20:ac:15:67:b8:
         9c:f5:b0:55:aa:8f:8d:fa:78:af:77:58:59:7e:8c:ae:f4:13:
         67:29:c1:82:0c:e1:44:a9:03:4f:9e:54:c7:4b:f7:f6:e7:86:
         6b:f7:08:3f:b9:fa:a0:f1:73:52:01:54:99:42:a7:60:ec:af:
         57:b2:4c:c8:f6:b5:45:c7:6e:f0:68:f2:68:fa:b5:f2:d3:80:
         dc:f8:12:92:7b:5d:8b:eb:8e:19:57:47:01:65:5d:2d:75:ac:
         4f:cb:86:e6:6c:1f:35:94:d5:97:d5:64:c6:fc:5d:72:81:60:
         9a:be:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:53 2026 by rpki-client