Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa
File:                     B5A31A8E660F11EB8A1DB351C4F9AE02.roa (raw, json)
Hash identifier:          08g4OPklUHVULEUELGzxteax8eXWgqhM63vO17HquiM=
Subject key identifier:   62:7B:59:1E:42:C2:77:B4:1B:2A:4B:E0:79:4D:D8:E6:B7:C7:BD:E5
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0B3C
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa
Signing time:             Wed 06 May 2026 19:23:33 +0000
ROA not before:           Wed 06 May 2026 19:23:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        103.149.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl
                          rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
        Validity
            Not Before: May  6 19:23:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fb9535-9464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:f7:a6:77:a8:ad:d3:69:bd:0c:88:20:11:
                    c6:77:17:5e:77:b6:d9:15:1d:1d:29:15:c8:3c:e2:
                    43:11:09:64:de:45:27:61:f0:56:9f:19:5d:f5:c3:
                    d9:de:97:1b:4b:8f:f6:e3:bc:d1:2c:a9:23:1e:13:
                    85:ca:3c:b5:83:86:6f:ac:42:e6:bc:3b:b8:b5:5c:
                    04:d2:48:74:78:52:e4:55:bb:e9:11:8a:52:c9:69:
                    88:3a:15:db:f6:ea:96:5f:96:43:0e:60:50:6f:40:
                    d2:e3:e7:ae:96:6f:cd:09:3d:97:fc:05:a9:00:2f:
                    e5:1e:07:8e:74:f2:35:9a:23:f6:09:00:8a:e8:f9:
                    10:44:29:3c:61:b1:98:11:a4:1b:04:ae:21:fd:dc:
                    d1:2c:60:70:d5:ef:53:f1:3e:3a:b2:df:54:98:ab:
                    ee:eb:53:ab:58:47:3f:59:ed:d2:c4:9d:21:6c:b5:
                    9f:e4:13:87:96:ea:04:7e:cb:7d:c7:13:53:47:a6:
                    22:3b:b2:62:04:5c:32:cc:20:78:69:2e:e7:f9:58:
                    eb:c9:9d:8b:5e:1c:6f:07:09:5c:68:a3:cc:3c:42:
                    a8:38:8e:83:f7:85:12:99:80:62:42:10:c4:e3:1b:
                    67:76:87:11:c0:64:5b:84:5f:6b:fb:95:ad:6c:bf:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7B:59:1E:42:C2:77:B4:1B:2A:4B:E0:79:4D:D8:E6:B7:C7:BD:E5
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:82:15:08:f2:e6:57:f0:0c:0b:4d:6d:5c:42:e3:1e:a8:1d:
         41:bc:36:4b:7d:32:4c:71:9f:28:4d:5e:34:d6:d1:e1:4a:82:
         e5:8c:82:d5:ae:ef:1c:c2:be:8f:1f:f0:26:5d:ec:fa:87:c1:
         13:ae:c5:b5:ae:4a:c8:2b:a7:d8:bf:4c:2b:a9:0c:47:08:fd:
         53:dd:29:50:da:63:d6:c3:d1:a5:9d:cc:0a:b9:13:b6:dd:e8:
         f3:79:ca:5b:b2:17:e3:88:1d:43:4d:17:a2:51:71:ca:cd:2a:
         e8:50:fd:34:aa:fe:71:3b:a9:f0:3a:69:60:ff:06:80:31:55:
         7d:ea:d6:30:a6:77:a4:a4:fa:de:cd:4e:f7:f8:f5:00:7e:24:
         25:8a:71:2f:ce:57:08:43:40:ea:54:9e:ef:58:cf:c8:23:f6:
         85:d6:86:73:ed:c2:bc:c8:d3:bc:d2:21:0f:08:77:d9:b3:62:
         7c:63:f6:f2:9e:af:be:a6:8d:b4:7d:cf:0a:6f:b4:8e:10:72:
         84:a1:b4:71:ca:55:7d:94:f8:38:a4:2c:c2:7e:cb:f9:d7:53:
         c9:55:e7:10:9b:e4:08:d2:9c:a4:b7:5c:1d:cd:ac:be:52:02:
         c5:09:c6:bb:56:4c:fb:95:c1:50:54:e4:a2:0f:f1:1a:68:bd:
         b5:3e:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:01 2026 by rpki-client