Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
File:                     FF4EB6B2395811ECA422C462C4F9AE02.roa (raw, json)
Hash identifier:          1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=
Subject key identifier:   4F:09:CF:D2:DF:67:08:81:7F:04:E8:6D:2E:18:93:3B:E4:12:81:A3
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       0523
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:44:26 +0000
ROA not before:           Wed 01 Oct 2025 00:26:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141004
IP address blocks:        103.171.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Oct  1 00:26:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a434a9-4440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:39:30:66:96:72:4f:eb:91:31:5f:83:3e:
                    69:3a:d0:2f:23:16:cd:e3:be:37:ad:6b:2b:09:b6:
                    83:64:3c:28:e0:77:97:10:91:dd:48:18:ea:02:5e:
                    af:18:fb:cc:3c:45:41:11:78:26:13:f8:78:c0:42:
                    6d:26:21:92:8d:95:31:02:36:32:b9:94:e9:78:b2:
                    fb:5d:26:a0:30:04:76:12:ae:7f:fa:17:7b:d8:e6:
                    e1:f5:db:5c:a5:c3:27:b4:df:01:3c:74:3a:8e:c8:
                    bd:70:58:39:45:be:7a:d2:7f:e0:5e:47:ea:a6:02:
                    96:36:4f:e9:26:29:94:05:61:d3:45:29:d8:57:f8:
                    0f:56:f2:93:3f:51:21:ec:38:93:43:0d:da:c9:0b:
                    ab:37:66:db:bc:bd:f9:5f:3c:bc:72:81:80:5c:d8:
                    01:6a:7d:fa:d5:de:88:ef:98:9f:92:18:56:99:db:
                    e2:5c:78:a1:7e:90:cf:64:f3:65:c4:2a:fa:99:8c:
                    16:0c:3c:5b:50:c5:92:97:24:20:5c:3e:e6:bb:8d:
                    53:c7:c9:03:1c:ed:ff:d0:62:d4:1c:7f:3a:19:a5:
                    21:af:d0:4b:f9:75:ef:d7:dc:2d:3a:5e:7a:fb:61:
                    61:0a:21:70:87:9b:2a:4c:8e:15:8e:93:64:c2:6c:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:CF:D2:DF:67:08:81:7F:04:E8:6D:2E:18:93:3B:E4:12:81:A3
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:2b:3e:02:ca:a7:ea:6d:06:1a:1d:4b:d4:56:b3:6b:39:
         1c:dc:f8:bb:22:92:7b:44:b5:99:74:85:d2:ba:c5:7b:f5:ff:
         a8:a3:53:d8:9f:3a:88:b1:aa:5f:e3:8e:7a:04:98:71:ee:37:
         a8:2b:0d:6f:19:71:f1:e9:2f:ad:a7:46:28:0e:78:60:93:d7:
         a1:dc:84:95:3c:ab:57:8f:f4:a2:8f:99:65:89:c3:c9:37:ed:
         5d:d2:c8:84:c9:61:d6:a8:cc:ba:da:66:ca:48:51:f8:87:81:
         f8:f8:8d:36:0d:86:cd:6b:03:24:f8:b1:5c:59:39:5b:be:93:
         c5:85:9a:ea:b3:ef:24:98:80:63:58:ef:65:0a:a1:57:83:1f:
         22:ce:69:ee:b0:bf:c9:1c:c6:28:36:1c:2f:87:2d:8f:5f:92:
         55:26:6a:ec:03:41:69:e3:32:d3:06:21:9d:0b:c0:93:83:fc:
         ce:b6:7a:52:57:53:49:de:ad:e9:37:00:d1:dd:7e:2b:43:45:
         e5:b0:24:ff:ae:b8:ba:83:b7:07:50:58:8c:1e:fa:ab:ab:d3:
         03:5e:d0:2f:55:0e:cd:8d:16:f7:f7:b1:c1:1f:69:7b:db:db:
         f8:d4:23:8a:46:21:29:0e:26:61:10:79:95:69:79:f0:08:e1:
         e4:07:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:39 2026 by rpki-client