Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
File:                     01BA52A28CF411EFAE6F7F10C4F9AE02.roa (raw, json)
Hash identifier:          EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=
Subject key identifier:   FE:91:D0:81:B7:28:C9:47:C7:67:3E:1C:EC:D5:D6:1D:F5:FC:45:20
Certificate issuer:       /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial:       0115
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:57:51 +0000
ROA not before:           Wed 01 Oct 2025 07:05:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        103.75.236.0/24 maxlen: 24
                          2001:df1:c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
                          rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
        Validity
            Not Before: Oct  1 07:05:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a56e-4f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:76:a8:ae:dd:95:15:8e:2a:e1:bc:94:bd:
                    d0:8f:66:da:44:0b:5a:20:31:f9:d6:db:ab:d0:4a:
                    8e:8c:d3:4a:e6:5b:68:b0:1e:46:2b:03:e6:fa:9c:
                    08:1f:03:d3:f5:4b:6a:41:b3:79:7c:47:f1:42:f7:
                    ec:08:9a:5a:ac:c8:e6:16:91:59:5f:37:fd:b6:01:
                    7f:cc:2b:e1:98:e3:39:e4:0e:90:0a:92:11:7c:4f:
                    02:21:62:a9:ad:cc:09:78:bd:bb:52:03:5a:f6:1e:
                    90:70:7c:ef:c3:2f:5c:92:36:ea:80:82:fe:05:c0:
                    ac:fe:43:31:53:ef:d1:2b:17:60:90:95:3c:94:d6:
                    c2:c8:5e:f3:7c:eb:96:4d:78:14:56:64:59:48:42:
                    37:92:1c:3e:67:b8:df:70:d6:cd:a4:04:30:78:95:
                    b7:a5:a5:59:73:68:7c:e2:17:b4:48:f0:71:b9:30:
                    07:26:ce:ad:2c:90:6b:5c:58:e0:2c:09:0d:c5:38:
                    9d:f6:9a:0f:5e:cb:32:64:ba:9b:58:5d:ef:65:6d:
                    5a:35:02:d8:7e:01:bb:e7:91:e1:41:7c:9d:78:7e:
                    d3:aa:0b:fc:68:bd:4b:0d:ef:64:ff:41:55:c6:f4:
                    fb:e1:5f:d1:5c:19:4c:d8:6e:52:b4:aa:20:87:4f:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:D0:81:B7:28:C9:47:C7:67:3E:1C:EC:D5:D6:1D:F5:FC:45:20
            X509v3 Authority Key Identifier:
                keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.236.0/24
                IPv6:
                  2001:df1:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:86:cd:8f:4b:55:8d:24:1c:41:db:51:19:4d:8d:e9:a8:
         88:c5:4b:79:e0:d1:ca:d0:17:1c:05:14:61:73:49:71:e3:18:
         33:ca:54:f1:c0:0d:ed:90:24:de:87:79:b3:c3:28:3d:75:75:
         93:fd:68:a5:ea:fb:2a:fd:f6:6b:ec:9d:77:93:bc:1a:19:51:
         43:b0:60:d6:cd:1c:19:ef:de:c8:b0:2b:61:4d:72:f9:77:10:
         38:46:ce:25:4a:02:23:c4:e4:a6:33:b0:05:e5:4a:50:7f:dc:
         63:89:36:d0:6f:30:6b:b3:53:66:b2:19:90:fc:33:b9:32:6c:
         da:fb:e0:86:c4:2d:18:d8:fe:b1:1a:2e:e7:cb:dd:ca:3f:a1:
         3c:fc:5f:6e:f0:f1:66:94:ff:a8:d4:bb:93:14:e2:09:d5:d7:
         16:2b:b4:d2:1c:c3:bd:e8:11:02:0f:93:8a:8b:45:ae:f3:3c:
         ff:9c:b4:73:80:99:c5:ad:e9:ee:66:ce:7c:54:56:46:e6:c4:
         f1:c5:9e:64:44:81:84:b1:44:e1:70:20:81:b5:a1:cd:8d:ea:
         83:52:19:fc:d0:46:8d:b9:b2:63:da:f7:b0:07:a8:2a:4a:6b:
         b4:d6:85:8b:2c:f9:71:a9:db:68:ef:d0:5d:97:49:e2:be:16:
         50:c3:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:44 2026 by rpki-client