Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa
File:                     14172F4C264311EEB0342B45C4F9AE02.roa (raw, json)
Hash identifier:          G7J4NmvkxVUmCKOieqCt0qhLZaViU/M0n2XmU2IN4yw=
Subject key identifier:   22:0D:BA:71:FD:66:B7:22:7B:FF:43:90:0C:BA:26:9A:9C:4A:68:27
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0569
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:49:57 +0000
ROA not before:           Tue 09 Sep 2025 00:05:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     3356
IP address blocks:        103.70.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep  9 00:05:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46e35-8317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:dc:ae:03:e2:b0:8c:7c:d5:01:7d:7c:a3:
                    eb:04:0b:9d:5a:40:11:1f:73:3a:33:13:f1:72:8e:
                    a7:9f:32:8c:9d:1f:b0:f6:c6:d9:de:fb:06:74:6e:
                    01:d0:ec:7f:f1:b5:57:d6:7e:64:74:95:06:4b:27:
                    e6:8a:e9:19:bd:14:4c:f4:e2:66:c2:99:1c:94:73:
                    95:50:83:55:b2:1d:88:f6:68:d1:67:4b:4f:1a:c1:
                    95:32:3c:18:a4:03:23:ce:78:73:f5:37:a8:90:75:
                    04:c5:57:f7:7b:05:4c:b1:f6:2a:6a:f5:6b:56:59:
                    c0:70:1c:3f:00:32:18:f7:90:da:bc:bf:11:13:b3:
                    fa:5d:12:91:11:c9:62:8f:d8:24:32:79:d2:94:be:
                    a1:f2:ce:1e:33:59:d7:b6:76:aa:d1:f9:06:d2:b6:
                    41:89:f6:45:1b:c5:bb:9b:e3:c6:00:c1:6e:f8:49:
                    b6:9a:af:80:8b:c3:cf:49:b9:00:ad:63:9d:0b:fa:
                    d0:97:ee:a3:f9:f8:a9:07:5d:d3:fd:bf:d0:e8:25:
                    7a:e8:92:ea:0a:c3:f8:c6:b6:94:5d:aa:0f:79:d5:
                    24:bb:74:f1:b2:e5:e8:bd:9f:6a:19:31:fb:b9:3c:
                    49:d3:08:67:73:00:f8:d9:e9:ce:4a:5d:12:f3:06:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:BA:71:FD:66:B7:22:7B:FF:43:90:0C:BA:26:9A:9C:4A:68:27
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:8b:eb:54:a7:f8:fb:cb:3c:6f:c9:fa:82:89:5c:e9:18:
         16:4f:25:82:0c:70:85:26:0a:a7:31:bb:93:8e:67:5b:29:f0:
         96:f0:e8:ac:9f:bc:af:10:fa:43:56:ba:1e:60:26:13:2d:93:
         f0:8d:21:35:3d:43:27:f2:de:12:2d:0d:12:2f:d8:f5:3c:69:
         90:19:f6:20:23:15:51:43:3e:14:a8:a1:56:48:db:ff:2e:7a:
         35:81:67:d4:2d:10:e3:0e:05:87:60:57:09:12:01:c9:a4:de:
         c0:28:58:a9:99:fe:07:fa:3f:98:10:48:b6:43:e6:89:af:00:
         01:59:b3:14:5d:0a:26:b9:12:4c:68:19:0f:21:c4:86:8a:3d:
         5d:b5:d0:81:52:6c:81:03:c7:2a:b7:f9:cb:3a:b5:33:6c:f5:
         ef:d5:51:51:11:96:18:f3:cf:69:c0:1d:93:e1:33:ee:fc:84:
         2a:0d:5b:16:de:d3:28:ce:5b:7d:28:92:d8:b7:95:31:55:35:
         0b:bf:a1:57:a0:73:99:32:2d:68:c6:79:4b:34:89:88:60:d5:
         76:8e:b4:ad:5c:70:f8:28:4b:58:81:69:20:0f:af:09:a1:9a:
         8d:38:de:33:74:09:61:84:c5:a8:76:0d:d0:80:9b:6e:e1:fe:
         cc:d3:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:55 2026 by rpki-client