Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
File:                     C85D0F7E477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier:          fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=
Subject key identifier:   63:2E:38:CA:B7:C1:C3:52:1B:02:C3:9D:7C:E9:F8:61:4C:2B:F5:54
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C2B
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:54:59 +0000
ROA not before:           Mon 02 Feb 2026 16:13:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        103.5.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7211 (0x1c2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Feb  2 16:13:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46153-29b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:a0:66:3f:e3:b4:e6:6b:89:a9:16:4d:88:
                    63:cd:7c:2a:df:2c:fd:72:1d:eb:e0:7e:09:30:e9:
                    51:1f:22:61:3d:38:78:08:57:92:e5:ae:c5:7e:d9:
                    72:39:ca:d7:18:59:4c:28:36:f5:96:87:88:e0:f5:
                    23:8d:42:6f:de:cb:3b:03:5d:b3:29:26:e1:5d:e7:
                    97:b3:04:1c:61:0d:06:12:bb:99:75:af:71:e2:b0:
                    8e:0f:7d:39:2d:9d:f7:99:ef:27:b9:b6:dc:28:6f:
                    78:c6:72:7b:d7:7b:7a:97:0f:70:62:d5:a4:1c:5a:
                    7d:81:e0:14:32:8c:9f:99:11:1c:0c:c7:e0:fc:c8:
                    00:fd:6f:e0:7d:fc:56:8d:0e:5b:2c:72:ae:84:92:
                    e5:11:45:4b:53:51:e5:b8:7b:55:59:5f:71:33:91:
                    64:76:02:e7:4f:e7:49:82:ef:f6:8c:e2:f1:27:c0:
                    3d:76:b3:9b:32:95:bc:80:69:55:dd:18:d9:e8:aa:
                    7e:54:b7:83:89:6e:e4:74:38:9e:88:5f:de:13:f7:
                    d3:b4:9f:2b:c7:b4:7f:be:26:2e:15:cd:35:52:9d:
                    80:e5:3c:16:65:27:e2:7f:b7:67:95:0e:44:22:b7:
                    5b:4e:d3:46:85:b2:1c:e1:c0:b9:d2:c1:a1:dd:49:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:38:CA:B7:C1:C3:52:1B:02:C3:9D:7C:E9:F8:61:4C:2B:F5:54
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:04:0a:ce:93:24:2a:73:4c:28:0a:44:fe:d7:b0:fe:bf:
         af:ac:f0:bc:f9:ec:d4:54:cf:a9:5c:23:a4:15:e9:1b:cf:9d:
         1b:a7:6f:f0:65:11:7b:b3:8a:06:a5:f9:13:1e:62:59:0c:c6:
         0e:c0:83:28:3e:1d:c7:80:7b:ff:52:82:45:8b:b3:8c:12:24:
         3c:29:d1:c7:9a:0c:ca:87:56:89:e3:29:41:a2:e0:17:6a:30:
         52:75:ec:83:7e:64:20:e6:cb:e4:d3:36:f3:95:ea:9d:dc:ff:
         e3:ae:01:d7:2d:cd:52:67:3d:41:0a:75:a0:d8:65:4d:41:b2:
         25:51:f3:1f:ed:8b:e6:3c:81:57:3a:be:e0:7d:47:17:da:22:
         3b:b1:33:2d:ba:24:eb:a4:ae:b3:a6:b8:af:2b:94:1c:55:74:
         06:84:d8:da:9b:c0:95:11:ec:21:86:ec:96:d7:f7:0d:d7:4e:
         3f:c6:13:e3:90:c2:58:a1:79:ef:8f:4c:c2:69:0c:85:d3:03:
         d3:b5:81:35:84:31:11:57:ee:f5:86:ab:4b:e6:24:43:80:c4:
         19:7a:5d:34:8d:c4:73:a5:24:c4:6c:bb:61:0e:6d:25:33:38:
         3e:15:52:c7:39:bf:9f:cc:e2:53:9c:cd:3b:30:d9:96:03:de:
         4c:b8:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:33 2026 by rpki-client