Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
File:                     71014290D87411EE97234F5CC4F9AE02.roa (raw, json)
Hash identifier:          6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=
Subject key identifier:   D5:6B:5E:BA:6B:DA:2B:5C:4D:1C:AF:C4:72:92:7C:AC:C0:28:95:4C
Certificate issuer:       /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial:       01D4
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:44:03 +0000
ROA not before:           Thu 07 Aug 2025 04:41:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.14.230.0/24 maxlen: 24
                          2001:df2:b740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
                          rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
        Validity
            Not Before: Aug  7 04:41:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5a233-3743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:2e:12:43:63:c0:7e:c4:63:60:f4:20:09:
                    6d:98:11:24:9f:5a:f1:da:a0:06:57:47:35:d6:d4:
                    7d:bc:78:4e:ce:be:35:bc:b8:29:07:ca:ad:b0:42:
                    48:31:a8:8c:77:3e:a1:4d:72:7b:2b:10:cb:3f:2d:
                    01:33:9d:58:e5:c2:a1:a0:e5:95:eb:09:50:73:7a:
                    b7:ee:4c:11:f5:02:75:af:76:53:3c:f9:e3:86:c7:
                    f6:d8:fb:86:86:2f:35:ce:6d:bb:65:d1:69:30:d4:
                    c7:3d:51:17:d0:7f:90:69:72:6b:ad:39:55:0a:f5:
                    14:2a:2c:93:bf:31:f0:f7:73:99:95:11:9b:f6:49:
                    2b:36:23:9c:e8:33:d4:a4:19:b6:93:09:d8:84:c0:
                    c3:3d:2d:c4:82:56:49:31:c7:6a:8e:54:39:b0:83:
                    7b:7c:10:df:87:f8:33:f6:ec:22:d3:5e:fa:f0:be:
                    67:75:fc:82:06:b2:6e:75:9a:1f:18:75:16:7f:fc:
                    69:1a:7d:b5:ec:78:5e:a3:9a:10:d1:e2:26:e9:fa:
                    94:82:ef:43:ca:b6:0c:57:0b:d4:50:a6:8a:ef:c1:
                    b1:17:34:54:b3:05:cb:1f:76:46:31:bc:e1:96:b5:
                    33:8b:09:19:9f:62:8a:a9:b6:f5:bb:6e:4a:9e:a1:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:5E:BA:6B:DA:2B:5C:4D:1C:AF:C4:72:92:7C:AC:C0:28:95:4C
            X509v3 Authority Key Identifier:
                keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.230.0/24
                IPv6:
                  2001:df2:b740::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:59:1b:c3:a4:3e:11:f1:ff:65:42:49:51:5a:d8:4d:c0:be:
         13:06:6c:04:4d:3f:04:69:fa:03:0d:82:51:e0:93:f0:d1:12:
         55:c1:56:09:54:37:e7:12:9d:4a:32:c8:33:fc:73:46:50:e2:
         48:fd:9a:dc:cc:85:57:15:c4:73:6b:74:3f:97:9c:63:51:91:
         05:7e:28:b6:cb:8a:aa:54:b8:d1:7e:3b:9a:14:15:e5:3e:65:
         d0:e3:b7:dc:43:10:41:0e:f1:d9:44:a3:b3:a5:a1:f4:61:55:
         0d:a9:d9:9e:92:03:9b:4f:16:a4:96:8d:b2:34:20:3f:ae:ae:
         09:1a:50:35:b2:6d:f3:0d:dd:f9:5f:d0:0e:d0:bb:70:df:bf:
         1c:02:53:da:72:b5:db:54:f4:41:61:5f:74:a5:bd:88:70:ec:
         a1:a7:7b:9d:9b:4c:09:43:6a:4f:e3:3d:f5:c5:ae:26:3f:9a:
         f9:3e:23:41:f1:ec:49:12:30:54:c7:a8:e2:d9:2a:5e:bd:64:
         9e:7c:43:a9:5d:01:d6:8c:ab:4b:03:1c:c0:3d:83:e7:3c:39:
         fa:1d:a8:22:c6:5f:2e:1a:1d:54:f3:18:84:96:4e:d5:cc:b1:
         25:e7:9b:77:a9:8a:cf:17:64:5c:92:8a:fa:cc:86:64:f1:76:
         7e:e9:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:47 2026 by rpki-client