Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa
File:                     A697738410FA11EF9A068536C4F9AE02.roa (raw, json)
Hash identifier:          EdzxP0a00HkPN54k8gpU2BilaJEJRC+0OsIsMRED8nA=
Subject key identifier:   96:A1:13:89:21:58:EF:95:A0:2D:FA:DB:95:27:77:30:81:BD:1C:10
Certificate issuer:       /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial:       0166
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:31:29 +0000
ROA not before:           Sun 29 Jun 2025 04:54:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135658
IP address blocks:        103.155.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
        Validity
            Not Before: Jun 29 04:54:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59131-ab70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:f1:ef:30:de:9f:27:b5:65:92:65:34:7b:
                    f8:1f:59:61:df:a9:4f:78:c1:e1:87:bb:9d:a1:26:
                    4e:b2:45:4e:43:8f:17:19:28:0e:22:c1:a7:ec:aa:
                    15:d8:2f:11:98:ea:dd:50:34:5e:21:f6:8b:87:b1:
                    ac:a9:7e:03:21:fc:b4:d1:07:9f:bc:82:06:d5:3b:
                    08:db:4c:a7:df:88:ec:6f:a6:0c:fc:f0:50:21:6f:
                    c9:fe:a0:f7:80:4a:af:30:c8:3d:55:57:21:a8:0d:
                    0c:69:fd:e1:26:cb:d5:46:1a:08:d6:58:4d:97:98:
                    92:6b:5e:39:e5:de:a8:83:25:44:28:f4:29:b2:2e:
                    bf:bb:11:38:5c:54:8e:08:19:21:99:fa:d1:4d:e1:
                    8b:dc:3d:11:9c:28:5c:f8:e9:f6:8b:a1:27:d1:25:
                    f8:4d:75:6a:9b:aa:d9:c9:76:28:be:7a:99:ff:45:
                    ce:f9:3a:9e:b3:01:65:30:d5:67:6c:ef:60:d5:3b:
                    49:c4:7a:f2:84:22:4a:27:08:05:4b:f4:02:c9:23:
                    0c:ec:89:15:6f:20:22:f9:d7:e1:69:0b:6f:a4:5b:
                    43:27:65:d9:e0:4d:83:cd:ef:79:81:b0:cf:1f:bc:
                    c7:9e:08:e8:40:93:2c:81:df:27:af:06:98:eb:a4:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:13:89:21:58:EF:95:A0:2D:FA:DB:95:27:77:30:81:BD:1C:10
            X509v3 Authority Key Identifier:
                keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:34:99:86:ef:67:66:ad:b5:69:90:4a:33:b7:df:33:6f:51:
         44:82:8c:c0:c6:a6:52:96:18:a8:96:0e:06:52:b1:9f:e0:35:
         58:84:d9:58:a6:e9:19:38:22:c7:3b:54:67:6d:ec:59:fe:a7:
         9a:a5:b5:3a:3f:28:fd:d0:74:d1:3a:0f:ba:c5:25:c8:4d:e3:
         d5:d9:10:59:05:b4:16:ef:21:df:bb:21:23:42:6a:68:28:a5:
         27:46:fc:76:5d:49:45:82:c3:45:56:a5:ed:07:00:83:44:22:
         6a:d7:4f:28:7b:93:a1:31:bd:1e:18:fc:ce:6f:cf:6c:a9:dc:
         ff:fc:9b:ed:58:e9:93:cc:eb:2a:3b:fe:7c:2a:d6:07:9e:66:
         64:c5:88:5c:60:39:ad:43:01:7d:31:88:01:a8:f9:7f:fd:c4:
         51:33:7f:df:d3:a9:39:fc:68:68:85:0f:7e:c1:ac:8d:e3:14:
         bd:8c:97:8d:3f:04:f8:88:b8:7a:b5:a4:85:d4:e0:3f:a2:2c:
         8b:a9:0e:9d:be:7f:02:67:9a:f8:de:65:81:11:94:1d:43:71:
         84:53:8b:56:5c:1b:8b:d5:12:cb:f0:3d:02:c9:1d:e4:22:88:
         1b:0d:ab:e3:70:fa:d3:bf:2f:d7:26:d9:84:56:da:6f:b7:70:
         cb:f5:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:47 2026 by rpki-client