Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa
File:                     810B798472CC11EEA1A5574DC4F9AE02.roa (raw, json)
Hash identifier:          WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=
Subject key identifier:   E3:ED:C1:FE:0B:59:5C:9D:2E:0B:63:86:2E:AB:DE:82:DB:44:E6:79
Certificate issuer:       /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial:       01CA
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:03:30 +0000
ROA not before:           Wed 01 Oct 2025 05:01:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135593
IP address blocks:        103.139.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
                          rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
        Validity
            Not Before: Oct  1 05:01:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43922-5202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:23:bd:b5:0d:81:13:f2:7a:41:e6:81:85:
                    16:61:65:bb:3c:5a:0d:e7:4a:9b:06:a8:3e:2e:c7:
                    6c:6d:12:a1:f1:78:55:c4:0f:9d:4e:f8:da:30:a3:
                    9b:bf:d2:76:b6:9c:47:81:6b:3a:2b:91:29:6d:69:
                    5d:74:c1:b8:a8:74:23:d9:f6:1b:1f:ca:b2:e2:ce:
                    46:52:21:9b:07:2c:7d:60:8e:87:61:ee:09:5a:eb:
                    12:f0:44:d2:ac:7c:d5:38:d0:ac:d2:82:0e:0b:11:
                    02:39:e3:ff:d1:a7:25:4e:8a:1a:af:76:5b:3f:ed:
                    05:a8:a9:e1:e8:eb:41:42:78:9d:11:3a:12:31:1d:
                    3d:25:98:f8:81:42:a4:4f:64:50:40:a2:d5:84:f9:
                    ed:d1:ff:b3:6f:5b:e7:30:fa:21:ea:a3:32:09:82:
                    8d:d3:54:bb:a8:38:f8:76:48:8b:43:5f:07:8c:2f:
                    f3:c6:25:6e:85:46:e4:9e:ef:ea:6e:f5:e5:cc:84:
                    ec:7a:42:c3:41:fc:7b:31:54:a8:e1:e1:f4:7c:49:
                    b4:cf:66:d5:e0:59:b3:35:f3:44:b2:99:83:35:11:
                    8f:c4:6b:6a:13:94:87:41:88:15:a2:52:91:d1:ef:
                    89:0a:c0:ac:04:ec:b9:ca:78:7c:88:33:5d:d2:d2:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:C1:FE:0B:59:5C:9D:2E:0B:63:86:2E:AB:DE:82:DB:44:E6:79
            X509v3 Authority Key Identifier:
                keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:47:53:ad:b5:59:9d:8e:8a:50:ea:75:78:6b:ed:4b:27:
         d8:be:ab:5e:1f:87:4d:4b:3d:5c:53:1c:01:20:7f:4e:8c:aa:
         8f:67:cc:6a:91:b9:08:6b:58:2f:a2:c0:3a:7c:23:9e:0c:dc:
         54:72:5d:c6:0c:6a:55:26:cd:e3:22:df:fc:44:b4:e0:89:53:
         25:e4:3e:ee:61:0b:83:db:d0:f2:bb:c1:f6:50:2b:f3:68:1d:
         6d:b4:69:04:65:27:bb:f8:66:a2:59:f0:90:f8:03:a5:3f:53:
         be:43:a4:62:ee:e7:6b:6b:a9:64:aa:04:c2:ee:e4:a9:2d:82:
         e4:d0:6a:30:20:02:8f:ec:81:e9:9d:00:a2:ff:0c:02:83:2c:
         b9:05:80:aa:33:d4:71:45:e8:39:13:08:e0:90:56:9e:9c:4b:
         77:36:ef:3c:61:8b:a3:55:10:b2:a2:36:af:ac:0d:be:20:59:
         33:72:70:4f:90:cc:09:4f:99:4c:f3:8d:21:1a:22:45:fa:cd:
         cd:a3:75:49:dc:ba:07:03:4b:20:34:e7:88:7b:41:ff:0d:c7:
         40:87:4e:e3:28:83:b6:52:da:a7:30:24:e5:e1:9d:58:c7:9e:
         07:45:5d:09:d5:00:cd:ac:d4:1c:8d:3e:63:01:b6:14:a2:36:
         4e:7d:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:07 2026 by rpki-client