Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
File:                     C23053B019A911EF97366417C4F9AE02.roa (raw, json)
Hash identifier:          oIgJzpLs8FeOdJlyApHVC57ihP+eNhUbmgmPUwprt54=
Subject key identifier:   42:20:43:6C:54:A0:2F:0B:FB:75:CB:0A:EF:C1:0F:40:E8:31:F6:11
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       015B
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:24:48 +0000
ROA not before:           Fri 05 Dec 2025 03:12:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64006
IP address blocks:        45.116.48.0/22 maxlen: 24
                          103.81.40.0/22 maxlen: 22
                          103.81.40.0/24 maxlen: 24
                          2400:6140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Dec  5 03:12:47 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59db0-2711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:8a:d2:14:79:93:96:03:33:70:a2:f2:95:
                    40:90:6f:4e:c5:a4:de:2b:3b:c9:7d:9d:40:db:38:
                    74:d0:22:60:0c:bc:56:56:2c:50:d0:7f:a3:ab:bf:
                    d7:ee:60:0a:34:46:a5:6f:8b:06:c2:1f:02:1f:4c:
                    41:e8:bc:92:c4:44:16:04:00:6e:17:c3:42:ae:c1:
                    a6:56:42:b2:24:d5:d7:fe:68:15:72:7f:1c:66:d5:
                    24:06:97:5d:4b:bc:df:0b:9e:03:35:24:aa:e0:28:
                    94:df:8e:97:d8:0b:8d:6e:86:96:27:70:0c:1b:7a:
                    4e:5e:71:34:ba:a6:74:3b:ba:5e:24:d6:44:fc:5d:
                    1a:a4:04:8e:33:6f:d3:e5:be:31:4c:7c:df:4a:b6:
                    c7:f8:6e:91:4a:aa:4e:48:62:32:30:7a:0f:c0:33:
                    32:ef:5f:9d:b9:de:9a:ae:fa:fb:4a:75:80:b1:3b:
                    63:45:e5:1a:5f:ce:cd:01:37:50:07:83:56:1f:af:
                    74:93:37:98:04:de:8b:42:51:1d:39:5b:b1:a0:17:
                    67:35:d6:b6:0a:2a:ff:a4:13:9a:c0:de:25:82:c3:
                    7a:b3:b8:30:ce:16:04:0d:a5:66:84:e6:ef:e1:4b:
                    db:69:a8:4b:d2:3c:db:76:66:50:db:4a:54:dd:a0:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:20:43:6C:54:A0:2F:0B:FB:75:CB:0A:EF:C1:0F:40:E8:31:F6:11
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.48.0/22
                  103.81.40.0/22
                IPv6:
                  2400:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:af:a7:30:d4:7f:66:69:b9:6a:7e:18:0c:27:66:63:1c:b0:
         3d:c5:0d:57:11:b7:c9:64:66:9e:6d:24:75:cc:06:fc:19:cb:
         ed:25:47:ca:44:6f:94:c1:a9:6b:2a:5e:49:43:a6:bf:ab:16:
         57:b6:b6:c5:b1:6e:f1:cb:05:f6:d5:98:42:a2:9d:24:76:3a:
         98:a6:70:d0:e0:45:f2:02:23:36:7b:4a:b9:e5:6e:75:a5:a0:
         ac:ec:af:2c:32:00:75:a5:ac:cd:75:6d:d8:e2:fb:dc:39:ed:
         ce:15:e6:3f:98:92:b1:c9:7b:8e:b8:d3:33:ae:65:86:79:84:
         47:f7:98:d0:97:ed:ac:59:ea:8b:39:66:de:e0:73:c7:23:42:
         43:a3:e1:37:1c:02:cd:9d:af:af:01:0e:50:ea:9d:64:18:ea:
         88:66:bd:ab:7b:80:60:13:3a:71:40:63:96:f7:63:86:62:7b:
         ca:2d:b8:2b:9b:0e:43:a6:50:74:c9:2f:8e:dd:fc:1d:20:bc:
         c3:58:51:86:c8:37:40:67:d8:e5:7c:61:1a:bc:c6:ee:66:98:
         7a:f6:ab:0d:e4:ba:34:10:5f:4c:a8:c5:d3:b2:1b:b6:d9:a5:
         13:8e:0e:29:d7:e1:ff:de:63:c9:5b:67:e9:14:56:7e:bf:21:
         5d:cf:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:06 2026 by rpki-client