Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/5192AB7ED47811EEB5A6D21AC4F9AE02.roa
File:                     5192AB7ED47811EEB5A6D21AC4F9AE02.roa (raw, json)
Hash identifier:          7BC7HNDh6Br/00hX4ySBoQmimMqlfllsxVp+csn53ug=
Subject key identifier:   05:28:0D:8E:6B:F7:4A:AD:EE:42:0A:FA:16:74:3C:F9:60:9F:73:4A
Certificate issuer:       /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial:       0239
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/5192AB7ED47811EEB5A6D21AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:29:11 +0000
ROA not before:           Mon 07 Apr 2025 02:40:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152479
IP address blocks:        103.224.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
        Validity
            Not Before: Apr  7 02:40:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3eac7-e4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:39:75:ab:6c:51:73:70:73:19:ff:33:e7:
                    01:da:d7:50:f5:94:d3:bb:b5:b6:f9:60:f7:f4:3e:
                    07:bf:fc:4b:55:14:19:29:ee:73:64:8f:92:72:5d:
                    ac:40:0f:80:05:aa:20:30:4b:eb:ad:fc:2d:1a:64:
                    5c:86:12:62:f4:e1:ef:af:9f:f3:a3:99:88:28:03:
                    5e:28:fe:1f:bf:63:ab:9b:4b:17:83:73:ff:0e:8a:
                    a9:ed:bc:95:19:1c:2e:3e:88:e8:8b:6c:09:b3:d2:
                    ed:44:6a:31:16:1f:13:3b:bf:1b:fd:ff:e5:d7:3b:
                    05:f0:1f:cf:49:d4:61:5e:cc:db:e0:20:93:5d:b5:
                    49:ec:42:52:ef:15:a0:e8:6f:42:15:6f:45:8c:b9:
                    df:18:d2:00:f3:1d:77:2b:fb:d0:87:25:da:23:64:
                    83:bd:4b:53:4e:fb:3a:c3:1b:eb:92:27:e2:9d:8d:
                    6c:f6:72:a4:fd:54:8c:e4:f5:55:9b:33:7e:19:c3:
                    c6:e1:7e:99:52:e9:f2:4c:df:8b:10:3e:8b:c8:c4:
                    3e:9f:a1:e0:25:81:6d:3f:0e:e3:b7:ba:5f:25:40:
                    e3:96:5d:8a:dc:31:77:d9:88:5c:f0:9c:4a:e5:3f:
                    c0:d5:a1:7e:ac:ad:05:b4:a8:00:7d:06:75:48:4d:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:0D:8E:6B:F7:4A:AD:EE:42:0A:FA:16:74:3C:F9:60:9F:73:4A
            X509v3 Authority Key Identifier:
                keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/5192AB7ED47811EEB5A6D21AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:b6:b5:b6:23:a3:74:75:36:9d:d7:36:95:3b:a0:ef:6c:8c:
         cd:37:08:f5:b0:0d:47:e0:45:c4:f0:c1:b4:92:bb:94:15:dc:
         41:75:b9:a1:6d:5d:01:ef:85:dc:f4:18:e3:68:a4:cb:f6:bd:
         93:7d:85:38:08:1e:b8:a5:bd:31:8e:2b:8b:27:20:3c:c1:c5:
         94:e3:95:89:ad:53:01:df:05:72:b6:9b:53:06:dc:22:06:51:
         45:59:b7:56:6e:ec:a2:a1:66:0d:be:42:88:a5:bd:0b:d2:97:
         7d:c8:bf:fe:76:b3:d7:74:96:ab:25:e8:01:50:4f:9a:89:09:
         ed:66:fc:f1:85:06:98:d8:56:30:66:fd:07:be:1a:6d:73:bb:
         5f:28:f5:97:ab:6d:40:7a:86:d6:83:bf:97:f9:73:8a:5f:03:
         36:d7:82:44:b3:5c:f7:e2:72:26:d6:4a:94:87:41:82:8a:b1:
         26:7f:34:94:d8:a0:5f:6f:95:83:9e:b7:b0:0d:a4:53:31:03:
         13:2c:bd:c6:d2:68:66:78:1c:2f:00:ac:3f:7e:28:89:5a:c5:
         2c:4c:b6:3b:a2:d7:5e:cd:16:33:8b:14:9e:98:ca:52:9e:d7:
         f0:fe:61:12:df:65:2c:5d:76:1d:7b:ee:95:6f:95:0e:2a:22:
         b7:4a:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:07 2026 by rpki-client