Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa
File:                     8E80453E23EF11EF8A1CE76FC4F9AE02.roa (raw, json)
Hash identifier:          rRWKOXpmpMpzEk8/XP6WT07lE9CN7OHmVqYsIMZt8sk=
Subject key identifier:   8F:FD:1E:74:AB:5C:D3:E0:92:53:EB:FD:72:5B:1D:0C:40:D8:CD:9F
Certificate issuer:       /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
Certificate serial:       054E
Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:43:49 +0000
ROA not before:           Sun 30 Nov 2025 22:55:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147181
IP address blocks:        103.174.50.0/23 maxlen: 24
                          2001:df7:b880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl
                          rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
        Validity
            Not Before: Nov 30 22:55:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43485-e236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:42:26:e4:7e:d2:3e:48:a1:d1:73:3e:9f:
                    fd:9d:8b:e7:a1:4a:f8:b6:9f:27:25:4c:43:ff:37:
                    d6:4d:34:54:bc:d5:dc:24:8f:d3:22:93:55:06:ba:
                    13:51:b6:38:7d:72:28:26:21:79:1d:fe:d8:6f:74:
                    f0:37:0e:65:57:e4:a2:0e:61:94:7b:1f:48:f1:73:
                    2a:2e:75:96:4c:85:1f:75:26:59:f1:47:fd:5f:1d:
                    4b:e0:48:e9:9d:ac:cb:10:89:8f:82:a6:c2:1a:92:
                    4e:04:56:78:25:8b:60:34:9d:cd:9d:26:0c:44:ed:
                    ea:ae:73:df:73:89:a1:2e:c9:91:a4:01:8c:9a:ba:
                    4c:2d:6f:26:39:79:47:10:55:45:46:01:3a:25:1e:
                    47:7e:28:ba:be:45:8b:d0:f9:29:d8:8e:c4:78:a5:
                    18:56:ab:50:71:81:56:bf:3c:21:30:62:d8:c8:61:
                    c0:da:72:f0:26:86:95:64:3f:57:ab:8c:11:a4:b2:
                    9d:ba:71:fe:0f:3c:ad:5f:e0:10:73:9a:88:d0:de:
                    ff:a4:94:9a:a2:93:a1:11:da:7c:d0:55:33:94:01:
                    49:8c:7c:6d:9b:34:21:d0:c8:e0:0a:96:a6:89:76:
                    d5:b5:35:c0:63:61:1d:0d:ba:df:29:a1:6f:ab:f1:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FD:1E:74:AB:5C:D3:E0:92:53:EB:FD:72:5B:1D:0C:40:D8:CD:9F
            X509v3 Authority Key Identifier:
                keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.50.0/23
                IPv6:
                  2001:df7:b880::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:c1:a5:14:b6:e8:ad:e5:ca:49:48:47:70:fd:b0:bb:ef:
         c5:15:39:22:84:bd:df:14:dc:68:b1:ed:a9:3c:6d:08:5f:01:
         d4:d8:e0:2d:9f:aa:36:b5:86:3d:d0:cf:b0:37:94:25:eb:5a:
         4b:dd:3f:e7:b0:cd:ab:73:37:b0:81:8a:5b:25:5b:56:13:cb:
         42:bc:a5:92:93:b1:59:b6:fc:0b:12:9d:27:46:41:3f:24:13:
         3d:45:9c:b6:17:0c:6e:4c:69:b3:30:1a:71:24:72:d8:97:e2:
         7a:01:fe:86:3a:a0:45:65:ff:67:64:19:67:b4:a7:31:d0:33:
         16:86:5f:5b:7a:88:de:10:6d:94:52:ac:f1:05:23:95:97:97:
         d2:e5:c2:65:28:f6:ec:53:3f:12:fe:06:2c:14:76:94:10:d5:
         be:cd:f7:f6:b3:46:bd:c3:af:e1:27:e0:48:fe:1a:de:16:a5:
         91:89:4d:a1:1a:60:f2:e0:26:6a:03:d3:ff:67:44:f3:bc:2e:
         09:f0:9e:61:65:7f:19:38:cb:cb:ad:d1:b5:29:9b:f5:13:b2:
         4a:62:f0:d2:a9:45:48:ed:ac:20:e4:b2:8d:bb:d0:0d:17:33:
         d7:7a:b1:e7:e4:e4:99:72:1b:cf:d4:fd:cf:6b:7d:b8:25:d7:
         28:10:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:37 2026 by rpki-client