Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa
File:                     5E9461285DB711EF8AB66F0EC4F9AE02.roa (raw, json)
Hash identifier:          VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=
Subject key identifier:   BD:C9:B0:AF:17:89:4E:DC:46:26:3D:81:4E:E5:15:0A:5C:1A:36:CB
Certificate issuer:       /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial:       014C
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:45:46 +0000
ROA not before:           Tue 03 Mar 2026 05:45:46 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9313
IP address blocks:        103.21.144.0/24 maxlen: 24
                          103.21.145.0/24 maxlen: 24
                          103.21.146.0/24 maxlen: 24
                          103.21.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
                          rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192
        Validity
            Not Before: Mar  3 05:45:46 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a6758a-e077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:0d:45:43:c1:5d:f8:2f:36:d9:72:35:c3:
                    d7:28:ba:54:a8:69:6a:3f:50:60:8e:52:aa:39:b6:
                    a8:3b:62:5c:64:1f:6c:43:a4:e5:ea:c6:79:82:c3:
                    2a:49:71:76:3b:9b:8e:a8:52:26:25:e0:dd:01:ad:
                    26:de:f8:6f:42:83:aa:fe:b0:4e:94:e8:d9:15:80:
                    83:a4:16:2d:5d:27:ea:8f:af:7b:9b:2f:81:89:b8:
                    f4:12:07:d4:95:a7:7c:1a:4f:8c:a2:2c:c2:33:c3:
                    af:08:3e:8c:3d:b0:f5:10:02:8d:41:69:1a:e6:42:
                    ba:15:1c:96:fa:32:29:cc:37:7f:2d:3e:ce:7d:03:
                    5e:1c:c7:5e:d1:80:54:af:14:51:f2:39:a2:cf:9b:
                    d2:7e:6f:af:28:50:39:f9:03:24:ed:3f:55:e9:aa:
                    c6:cc:0f:96:95:fe:27:4a:92:ca:b3:6b:03:8d:ba:
                    d3:b6:0a:fc:13:2b:f4:c2:bd:1d:f0:12:d5:05:a7:
                    97:4f:1c:8f:f9:44:20:34:27:b8:12:32:a7:3f:ee:
                    be:e8:ed:85:bb:c5:d1:00:53:91:ca:61:16:48:31:
                    98:95:24:60:3d:f6:75:49:e9:73:80:7c:07:cb:07:
                    b6:8f:f3:70:49:7a:f7:d4:11:44:b7:4c:c3:3c:58:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C9:B0:AF:17:89:4E:DC:46:26:3D:81:4E:E5:15:0A:5C:1A:36:CB
            X509v3 Authority Key Identifier:
                keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:00:7b:10:a5:60:80:31:d0:2a:85:3a:75:18:22:0d:90:
         69:2f:49:8b:d4:f6:f6:21:8f:fb:20:15:67:95:5c:26:d4:88:
         d7:a3:7e:ce:70:c8:65:a9:93:ee:1c:07:1a:f4:cb:e9:57:3b:
         f2:bd:0a:b9:1a:20:dc:f3:5c:07:86:30:85:56:0a:ae:62:b2:
         d4:f7:4e:2e:b4:0d:1f:86:c1:f7:f1:8b:43:89:ae:1b:e9:bd:
         7b:ff:1b:4e:9a:08:a5:1c:d1:ef:b3:3e:9a:50:cb:cf:7b:f0:
         be:60:58:ac:be:fb:57:01:c1:7c:8d:24:c4:99:70:1e:85:bc:
         81:b1:05:55:2b:02:dc:08:50:b8:9b:a2:a4:c2:69:4b:9b:c9:
         e2:2f:6f:fc:f0:06:0b:6b:7d:9d:8a:cc:a5:90:cb:f9:74:1b:
         75:46:6b:92:d5:a0:24:42:67:2a:e1:82:d0:48:81:9e:01:63:
         80:0f:35:6e:57:82:a8:78:2d:cc:74:7d:c8:b1:70:a0:90:5b:
         78:01:74:de:3a:e7:00:71:24:dc:83:4f:d8:6a:3b:09:58:59:
         79:af:10:23:47:6d:7e:c7:0d:ec:9a:eb:6b:e2:8e:91:77:7f:
         26:ec:fe:ff:77:e0:26:81:1e:8a:9b:67:1f:6e:8b:5b:7d:53:
         d7:f9:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:34 2026 by rpki-client