Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
File:                     B5F911E8429411EC8882FA1EC4F9AE02.roa (raw, json)
Hash identifier:          /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=
Subject key identifier:   96:1F:84:9B:41:43:35:7F:01:B8:A0:88:2B:D7:0E:4C:2D:21:C8:40
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       0517
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:24:35 +0000
ROA not before:           Tue 30 Dec 2025 23:19:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131316
IP address blocks:        103.100.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Dec 30 23:19:08 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a58f93-5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b5:b0:7f:8b:6f:96:eb:b6:2d:cf:af:bc:de:
                    d0:5d:1c:6f:fd:33:a3:f6:e3:32:fa:6a:21:e5:ac:
                    a2:c0:24:19:2d:f3:39:52:f6:43:81:65:d1:4a:66:
                    a8:4d:e3:b4:78:64:3d:e9:7d:cf:17:c8:99:ad:1e:
                    60:53:51:3b:ab:e4:2e:f8:5b:07:85:7b:69:a6:4d:
                    40:1c:7d:a5:48:63:bc:96:49:c8:f6:f7:b3:c1:a0:
                    8e:d0:b3:b9:a8:a3:93:9a:9f:2c:22:0b:d7:3b:f5:
                    c5:28:01:0a:41:c9:74:1d:f7:3f:b6:7e:9e:a7:5a:
                    9f:0e:b5:0d:26:17:2f:1c:2c:37:8f:9c:ee:dd:94:
                    a9:b9:07:70:d1:6a:a7:51:ba:b2:cc:fb:d6:b2:01:
                    83:45:f2:76:a9:ed:26:00:5c:cb:b5:a5:e0:7d:c8:
                    57:4d:ba:66:bf:45:2b:5c:65:ef:9d:f3:43:c0:e5:
                    95:c6:cf:36:e4:38:c5:a2:e6:db:55:00:67:86:f4:
                    50:32:21:08:c1:be:0b:fa:ff:5f:5b:e9:a3:5c:78:
                    c0:4b:1e:92:18:0f:d8:e0:7a:78:c7:d3:ee:99:16:
                    94:49:0a:1e:67:96:c7:89:9a:38:d7:3d:6d:c9:3a:
                    1f:dc:56:9c:96:ac:78:5d:3d:94:41:d5:d7:d1:f0:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1F:84:9B:41:43:35:7F:01:B8:A0:88:2B:D7:0E:4C:2D:21:C8:40
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:c9:85:30:7b:60:ae:45:df:0b:60:32:99:93:b8:e7:9e:
         a6:b1:99:03:a2:79:1e:77:95:95:d1:09:23:6e:3e:1d:60:ae:
         f0:7a:f5:05:fe:dd:85:2c:07:cf:be:96:80:4f:a6:e5:fe:4d:
         18:e9:d6:cf:2d:78:d1:49:6e:e2:4a:c3:81:d3:bc:f6:9f:6f:
         0f:b2:68:6e:a9:24:b6:16:31:78:9f:a0:56:b0:d7:51:5d:25:
         32:06:ca:0f:1f:dc:e2:6b:6c:6b:e6:27:cb:03:0f:a8:60:09:
         87:79:e8:07:06:76:41:dd:e1:90:8e:6b:a1:41:74:04:d1:13:
         31:a8:c8:6d:ff:1a:c2:84:70:14:c7:ab:e1:db:d3:bb:c7:4a:
         a6:c5:4f:c9:31:5f:f5:5a:b3:bd:4d:7d:31:d1:54:18:8a:05:
         28:0d:2c:d5:c1:5e:65:ac:e9:50:f0:98:c2:19:5d:8e:1d:d7:
         69:54:77:65:6e:3a:d9:84:00:f7:51:11:08:c5:af:f6:c8:0e:
         d9:23:3f:73:e9:b5:aa:81:fb:60:3c:29:07:d8:02:0f:fc:be:
         7d:f0:c0:4b:fb:50:32:82:75:e4:a3:0a:6d:f0:f4:dc:7e:41:
         32:b0:38:8e:eb:35:13:63:39:b0:e5:de:33:7c:a2:a9:39:e6:
         f7:71:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:17 2026 by rpki-client