Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa
File:                     80F32E7C2C5511EF83ECC535C4F9AE02.roa (raw, json)
Hash identifier:          jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=
Subject key identifier:   19:BA:F0:D4:E9:0B:FD:0A:DD:3F:35:8E:D6:45:8D:0F:28:49:F9:45
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       014A
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:11:49 +0000
ROA not before:           Mon 03 Nov 2025 05:20:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136980
IP address blocks:        103.101.42.0/24 maxlen: 24
                          2001:df2:8f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Nov  3 05:20:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59aa5-4b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:02:4d:69:58:56:54:7e:a5:0f:b7:d7:e4:
                    d6:50:53:44:b4:08:d7:fe:eb:a8:60:72:5e:47:18:
                    f0:99:e9:94:92:87:34:b2:5f:0b:70:94:02:6a:ec:
                    73:df:35:90:ae:16:79:96:76:57:9d:05:df:f9:23:
                    6b:45:6d:b4:43:d5:73:fe:f0:38:9a:8b:69:bb:f1:
                    77:c3:cf:a9:e3:37:3d:93:dd:c7:cd:03:ca:80:8a:
                    b2:18:dc:0c:8a:ac:8b:a0:15:15:ac:5f:7c:23:0e:
                    b9:39:79:7d:b4:94:c2:ab:19:05:80:5a:e0:6f:a8:
                    81:95:8c:72:fc:5c:c0:ab:25:25:c9:37:20:e2:8a:
                    14:a4:6f:e2:20:14:4b:d1:2d:87:79:f3:87:05:d4:
                    74:60:9b:da:6d:04:6d:f9:fd:1e:bd:e4:c5:ce:7d:
                    3d:84:24:11:3b:c9:6d:b2:37:6f:e3:b2:ac:a9:2f:
                    9f:e2:73:34:22:dd:cd:fa:65:74:3e:aa:d1:9e:e6:
                    c6:58:4a:1f:df:d8:52:41:80:2b:80:41:45:80:ea:
                    7f:db:ce:df:38:fe:40:12:d5:57:d6:18:ca:c3:3e:
                    1c:b5:6e:15:b5:3f:99:61:b9:16:80:38:91:9e:0e:
                    19:ea:ee:86:e7:9b:8f:24:23:8c:18:94:11:0f:cb:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:F0:D4:E9:0B:FD:0A:DD:3F:35:8E:D6:45:8D:0F:28:49:F9:45
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.42.0/24
                IPv6:
                  2001:df2:8f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:92:0a:37:9e:aa:9c:e6:d4:f4:57:58:f1:8a:9e:a1:cd:
         81:49:4d:f7:08:a2:2e:64:e4:fe:ca:2a:e4:75:1f:d0:0d:7f:
         a7:77:b1:62:55:3b:32:d7:61:5f:72:05:25:2d:46:a6:b1:50:
         74:52:50:08:df:b5:5c:1f:8a:d2:26:09:ef:64:4b:06:82:a7:
         63:09:72:5c:67:5a:bc:75:c8:b1:e7:1d:22:de:c8:9d:cd:ec:
         15:f1:a8:83:f4:0d:f3:83:dd:63:71:e3:7e:ca:38:9f:48:c8:
         b9:f6:e7:58:69:35:15:4b:42:59:27:01:03:2a:c0:ab:27:2d:
         a5:a6:c6:75:ca:5b:44:45:67:b2:40:a6:ac:e2:5c:a0:da:bd:
         85:c3:c8:22:3d:03:e7:67:f7:48:c6:05:59:67:9d:d7:f2:71:
         ff:a1:d8:2c:77:73:8e:df:d1:34:d7:56:e3:ba:44:6b:fb:a4:
         df:39:5e:8d:02:44:d0:50:55:17:e3:8c:4c:bc:c7:ae:9e:e0:
         eb:34:ab:e8:37:cc:02:9e:f0:da:2c:d7:7e:24:c3:f4:2f:a0:
         5b:c1:f7:bf:2c:08:c1:de:73:a7:e2:b9:76:bd:68:be:0a:f9:
         30:b0:7d:00:5a:73:33:74:36:97:a0:a9:37:92:09:94:c3:a5:
         26:4d:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:05 2026 by rpki-client