Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
File:                     AF91ADB42CE211EC8664D47EC4F9AE02.roa (raw, json)
Hash identifier:          5IBjur6W7h11nvSC9C3ig6x1AZlsiyawRHY054gkkvk=
Subject key identifier:   EE:EB:34:83:76:E4:0E:A9:8C:45:75:28:C2:78:23:69:95:A1:12:DD
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0567
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:49:55 +0000
ROA not before:           Tue 09 Sep 2025 00:05:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.70.49.0/24 maxlen: 24
                          103.70.51.0/24 maxlen: 24
                          182.54.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep  9 00:05:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46e33-1484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:a3:d8:04:4c:63:e5:33:5e:c3:dc:9e:c5:
                    bc:88:6f:44:fd:4f:2a:c4:33:b2:ec:6e:48:ef:18:
                    d3:44:5f:b4:f2:a5:98:5e:9d:64:1b:fe:17:0b:10:
                    05:43:a0:4b:4a:67:bb:0d:69:c8:51:4b:38:12:f2:
                    3a:80:fe:aa:da:4d:b5:88:f5:2c:33:4c:6e:dc:8c:
                    e6:ca:96:78:ce:04:28:2c:95:08:ea:62:6d:89:33:
                    be:24:56:e0:e3:74:76:8c:4d:71:35:87:c7:13:76:
                    15:0d:d8:d1:5e:18:b0:b8:b2:47:6c:ba:d4:15:87:
                    98:61:c2:b1:73:0d:14:16:70:e0:43:7f:b9:8b:ee:
                    cb:ab:dc:f9:f0:1f:25:a7:89:fe:aa:18:8e:27:71:
                    df:da:a7:c5:72:d3:56:ff:c4:34:49:eb:3b:eb:15:
                    10:79:fc:79:f3:ae:dd:c5:c6:80:25:d5:cc:6a:2b:
                    4e:f8:ca:56:65:81:4e:de:ee:d9:32:b8:11:b4:f7:
                    39:26:ad:32:4a:15:59:e6:ad:18:39:15:d5:00:a8:
                    93:f7:c2:04:05:18:b0:c3:fa:e4:c8:41:f7:b3:8e:
                    bd:da:73:de:42:68:1a:d7:82:da:64:59:4a:e6:29:
                    51:c2:c4:cc:a7:83:12:6a:81:b3:57:19:4d:35:71:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EB:34:83:76:E4:0E:A9:8C:45:75:28:C2:78:23:69:95:A1:12:DD
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.49.0/24
                  103.70.51.0/24
                  182.54.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:55:ec:ff:4e:eb:39:10:65:d4:f6:a6:14:04:de:00:a9:ff:
         78:20:b6:55:b3:60:97:13:8a:ba:75:4f:2a:69:e6:2f:2a:2f:
         83:1f:80:a8:34:69:e1:97:84:8f:96:b5:8f:1e:09:6c:ca:63:
         c1:59:4b:c8:8b:d9:19:6f:e7:de:47:e2:1b:f2:e5:27:4b:07:
         82:29:7c:5a:a0:9c:9c:2e:ed:49:6a:19:d5:bb:44:f2:6a:6c:
         56:ba:b4:c8:88:ea:13:ea:3b:58:29:13:28:4b:83:55:3d:55:
         ba:ce:16:87:6d:5a:98:35:6d:95:96:b8:14:a3:f0:19:a8:20:
         e7:cf:00:bf:df:a5:42:89:82:ee:7b:01:75:dd:90:25:51:5d:
         fd:41:12:7f:a1:a8:d8:4f:84:6e:44:48:e5:f8:7c:1d:44:02:
         12:eb:1c:e9:62:53:c8:53:d4:19:64:ec:2e:14:80:52:ed:a8:
         99:95:4e:c4:28:d0:a2:0d:d8:41:31:14:e9:fc:16:4f:6e:d4:
         16:36:11:2a:92:d2:0c:45:9d:fa:ee:a2:89:d7:27:8d:79:aa:
         a9:5d:99:e8:39:cc:ad:ed:20:04:81:21:32:e3:97:b9:0b:57:
         d6:15:70:20:20:72:29:af:3a:f4:8b:ef:32:59:16:4a:3a:03:
         95:d7:d5:67
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE
NDI0REI0RDIwHhcNMjUwOTA5MDAwNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmUzMy0xNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJmj2ARMY+UzXsPcnsW8iG9E/U8qxDOy7G5I7xjTRF+08qWYXp1kG/4XCxAF
Q6BLSme7DWnIUUs4EvI6gP6q2k21iPUsM0xu3IzmypZ4zgQoLJUI6mJtiTO+JFbg
43R2jE1xNYfHE3YVDdjRXhiwuLJHbLrUFYeYYcKxcw0UFnDgQ3+5i+7Lq9z58B8l
p4n+qhiOJ3Hf2qfFctNW/8Q0Ses76xUQefx5867dxcaAJdXMaitO+MpWZYFO3u7Z
MrgRtPc5Jq0yShVZ5q0YORXVAKiT98IEBRiww/rkyEH3s4692nPeQmga14LaZFlK
5ilRwsTMp4MSaoGzVxlNNXFl0wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO7rNIN2
5A6pjEV1KMJ4I2mVoRLdMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD
REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg1QTgvQTUzMDgxNDYyQ0RFMTFFQ0FBNkZFNjc4QzRGOUFFMDIvQUY5MUFEQjQy
Q0UyMTFFQzg2NjRENDdFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ0YxAwQAZ0YzAwQAtjaHMA0GCSqGSIb3DQEBCwUAA4IBAQBXVez/
Tus5EGXU9qYUBN4Aqf94ILZVs2CXE4q6dU8qaeYvKi+DH4CoNGnhl4SPlrWPHgls
ymPBWUvIi9kZb+feR+Ib8uUnSweCKXxaoJycLu1JahnVu0TyamxWurTIiOoT6jtY
KRMoS4NVPVW6zhaHbVqYNW2VlrgUo/AZqCDnzwC/36VCiYLuewF13ZAlUV39QRJ/
oajYT4RuREjl+HwdRAIS6xzpYlPIU9QZZOwuFIBS7aiZlU7EKNCiDdhBMRTp/BZP
btQWNhEqktIMRZ367qKJ1yeNeaqpXZnoOcyt7SAEgSEy45e5C1fWFXAgIHIprzr0
i+8yWRZKOgOV19Vn
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:35 2026 by rpki-client