Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
File:                     517F49AA822611EB8990276EC4F9AE02.roa (raw, json)
Hash identifier:          AiOBrVM7jcIowiVFU6dduzLILwALxoJy2D7zLUEvCBQ=
Subject key identifier:   37:D5:22:FA:54:DB:72:1A:07:F9:B5:CE:84:44:4D:24:FC:4C:D1:39
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       0708
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
Signing time:             Thu 12 Mar 2026 22:29:21 +0000
ROA not before:           Thu 12 Mar 2026 22:29:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.163.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar 12 22:29:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b33e41-e7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:f9:b2:97:36:55:0c:d7:09:b6:53:19:55:
                    ca:0c:78:a1:df:c7:6f:bb:41:be:78:fd:01:2b:96:
                    0c:69:25:5d:c2:f3:50:d9:24:dc:40:fd:c2:3c:4c:
                    ba:97:f0:a9:0a:b6:a3:6d:b2:75:92:c0:2d:27:6b:
                    26:50:4a:8a:91:c3:48:83:a5:52:d6:ba:9a:1c:8a:
                    96:a9:dd:a0:6a:ab:19:c9:da:37:04:54:11:04:5b:
                    db:ea:cc:fa:21:60:75:44:d7:57:8e:21:0f:e6:fd:
                    c3:8c:87:92:22:32:63:51:7e:ba:8a:3c:a0:e4:c1:
                    3d:84:d4:e7:04:53:39:20:91:fc:2f:74:10:02:83:
                    e6:0f:ad:44:fd:6b:5e:de:f1:73:49:a7:3f:6e:04:
                    11:f0:e3:df:ed:58:df:88:a7:25:8e:bb:a9:8e:26:
                    0c:0e:3d:35:81:4f:f8:3f:f6:81:45:16:fe:83:1d:
                    1d:76:3f:0f:c2:fb:2a:8f:47:1a:26:57:87:57:86:
                    5a:49:ff:1a:6c:14:ae:bb:e9:bf:23:86:98:89:a2:
                    c8:45:fb:8a:f2:87:3d:6b:3e:69:88:44:06:64:be:
                    94:0c:36:7b:d7:7e:28:42:b8:dd:39:2f:cb:a7:c7:
                    14:5f:6a:5a:33:4a:58:49:15:cb:a1:6d:a6:7a:09:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:22:FA:54:DB:72:1A:07:F9:B5:CE:84:44:4D:24:FC:4C:D1:39
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:86:da:0f:99:ad:43:b7:c6:4b:a4:3e:98:32:7f:58:81:a0:
         0a:5c:cb:9b:01:8a:39:c2:71:06:13:12:20:a1:3d:01:4b:c6:
         41:33:c9:2f:bb:1b:45:eb:61:99:27:a8:a0:0b:f9:7a:da:75:
         c1:c8:d5:5a:15:1f:b4:1b:81:59:b7:e2:c9:0b:45:0e:79:a8:
         13:11:01:4c:aa:9a:5c:de:be:ae:8e:73:db:74:4a:47:c5:df:
         47:d8:6d:2a:a1:33:d8:7f:ee:b7:a5:68:a4:e1:39:36:b6:62:
         52:ec:02:e9:a2:06:cd:28:1d:5f:7b:f4:fd:44:b1:f4:4e:3a:
         c9:c3:8c:3b:79:3e:54:55:20:b1:5f:aa:fc:f2:a1:36:de:1d:
         6d:23:9a:bf:6d:e4:f3:7b:6b:dd:2f:17:6f:0b:8d:8c:84:1e:
         10:20:e0:33:62:fd:c8:f6:8a:84:71:31:6f:30:f0:5d:a2:98:
         2c:ba:e7:97:9a:e4:70:e1:a1:43:b2:69:51:25:1c:74:2e:04:
         e9:4e:34:d9:e1:6a:fc:01:3a:bd:56:2d:df:79:22:20:a1:97:
         1a:e5:4f:6a:0a:4d:33:af:2c:dc:a7:93:17:88:49:25:99:36:
         64:f6:b3:4f:33:2c:f4:64:02:e7:92:36:f7:38:62:41:72:c3:
         9b:65:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:19 2026 by rpki-client