Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa
File:                     485DCAA8418111F093EDEF69C4F9AE02.roa (raw, json)
Hash identifier:          19rQZpp4Df+lZ6FB4t+WOO+mA6WEBb8HvSNnL/TvyQM=
Subject key identifier:   E2:D3:1E:FE:9A:18:2E:B6:01:C9:14:34:64:3B:F1:B1:C2:01:1B:CB
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0314
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:31:37 +0000
ROA not before:           Fri 29 Aug 2025 02:19:14 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152479
IP address blocks:        103.66.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Aug 29 02:19:14 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59139-da06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:e2:88:16:a8:c5:83:85:05:67:dc:c6:8c:
                    3d:29:ef:fa:9a:9f:25:20:82:4e:a2:df:19:13:a5:
                    4a:23:29:00:3a:77:69:b7:bf:54:15:a3:88:a1:fc:
                    44:8b:70:ec:ea:84:9f:da:6d:6e:6e:76:cc:a9:b3:
                    05:29:b3:e7:f5:7c:2a:42:e5:46:b4:c6:73:43:07:
                    cb:df:0d:56:c7:3f:92:29:93:67:7e:c0:db:11:87:
                    57:47:53:3f:fd:07:e8:e7:72:63:00:a5:6c:82:78:
                    b1:be:43:f5:da:36:c4:ca:90:95:32:f2:47:ae:20:
                    3c:52:db:0b:c7:2e:82:9e:61:6e:f4:e0:ad:bf:c2:
                    f0:63:6d:a7:ea:d2:a9:fb:31:a6:76:0e:ef:d7:d9:
                    98:f9:4a:22:a7:3c:65:43:6e:4a:1b:0f:dc:00:be:
                    a6:61:3c:0f:d8:d1:10:8e:77:c9:06:7d:71:52:b8:
                    46:9d:0d:64:c3:6a:a1:90:22:6a:ba:45:b7:56:f8:
                    f7:d3:62:5c:5f:50:6a:3d:71:fa:04:4a:7d:62:9a:
                    5b:72:72:76:97:43:dc:1c:ba:76:18:da:24:3a:e3:
                    19:3c:93:b3:c0:93:3b:4b:3e:30:c6:80:20:c9:b7:
                    6e:3e:c8:af:13:89:5d:8e:8a:bf:0e:6d:08:ca:ad:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:1E:FE:9A:18:2E:B6:01:C9:14:34:64:3B:F1:B1:C2:01:1B:CB
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:19:8c:3d:14:3a:f8:67:1f:dc:35:ef:05:0b:0a:e9:4a:
         65:0b:bc:13:8e:ff:43:33:a0:48:7d:eb:d8:83:e6:c1:c5:64:
         37:7e:1e:1e:f3:bd:ed:a5:44:c3:8f:ff:95:7b:5b:e7:2f:19:
         18:84:2b:90:4a:d1:6f:e3:18:1c:b4:6b:95:9f:d4:89:f8:cd:
         6b:79:76:87:41:29:5e:7d:31:5f:2d:ec:bb:2c:9c:16:a4:fb:
         2b:b4:28:d9:1f:fc:09:c0:9d:8c:cc:de:b2:e0:30:e6:c1:19:
         eb:a8:ea:ad:b2:cf:bc:bf:0a:e1:78:3b:16:75:9d:93:07:18:
         3b:6a:ae:09:b1:bc:1e:85:0a:73:86:20:77:2a:f9:5d:8b:e3:
         a9:f4:04:f7:90:d1:98:2a:eb:d5:82:7a:95:8f:24:c5:52:25:
         eb:e7:bc:79:43:08:79:8e:18:9f:f3:12:3f:ec:8d:4e:7a:a9:
         59:4c:8e:df:ec:ea:4f:e5:72:c9:c4:86:92:e5:c1:06:d3:b5:
         68:1d:43:e1:46:f6:0b:cf:ba:25:a9:b5:fd:7f:68:6f:38:f6:
         41:59:dc:e4:f9:10:5a:23:75:dd:fd:d2:13:62:31:b3:dc:82:
         b9:03:dd:e1:ad:ab:87:ca:c3:db:f3:45:af:b7:65:a7:6b:e3:
         52:6d:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:10 2026 by rpki-client