Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa
File:                     5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (raw, json)
Hash identifier:          krsw6Fa1qgGJutUutzyS3Jt3HU2ieijRofRxs6ui7eo=
Subject key identifier:   72:6F:04:69:6E:1E:45:D1:94:A8:FC:6E:11:AD:C8:61:ED:12:09:DE
Certificate issuer:       /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Certificate serial:       015F
Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:40:00 +0000
ROA not before:           Sat 31 May 2025 06:06:08 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152718
IP address blocks:        103.51.128.0/23 maxlen: 24
                          2001:df3:bcc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
        Validity
            Not Before: May 31 06:06:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5932f-f84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:72:8b:f1:12:ad:41:1c:ff:02:f5:67:b6:
                    66:fb:8d:29:dd:7c:d1:74:20:02:d0:fc:af:63:d6:
                    f1:d6:ad:21:ad:35:1c:e4:69:02:fc:02:84:93:b5:
                    29:10:12:f3:c0:0b:cb:c6:f1:3e:46:fb:85:49:95:
                    7c:2d:fd:65:eb:3d:8f:22:52:8c:16:c5:39:88:c0:
                    76:6b:bd:6a:bc:c4:8a:04:b5:cf:a3:e4:1f:d1:2c:
                    91:0a:ed:55:02:a0:16:bb:c2:7e:6b:3f:c8:8a:ee:
                    51:b4:58:42:25:9f:45:b9:9b:24:89:65:2b:b4:aa:
                    e1:c1:81:79:1b:29:f4:72:ad:0b:a5:21:33:72:05:
                    f1:fa:92:18:db:ed:fb:aa:7f:d2:df:67:4d:f9:fa:
                    46:32:a5:2e:d4:c5:8f:eb:a3:8e:e6:06:38:43:32:
                    fa:78:9b:c7:a2:e9:6c:24:77:4b:bf:96:eb:80:75:
                    4b:1c:0a:11:78:66:fd:d4:16:72:df:2f:e3:61:58:
                    cf:3c:ba:38:51:eb:04:49:b7:42:d2:65:21:52:52:
                    67:c1:4c:d8:db:b0:ba:0e:2b:26:a8:93:d4:a5:52:
                    3f:0c:1f:b6:d9:f2:6e:27:65:0c:ad:9e:0d:1e:97:
                    da:d8:7a:72:2f:43:fc:ba:ea:3f:f6:00:79:8b:f3:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:04:69:6E:1E:45:D1:94:A8:FC:6E:11:AD:C8:61:ED:12:09:DE
            X509v3 Authority Key Identifier:
                keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.128.0/23
                IPv6:
                  2001:df3:bcc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:1b:74:1a:35:d6:c9:eb:c0:32:11:e3:8d:e3:d9:e6:6b:
         34:c5:18:32:72:5e:a1:81:93:99:70:8c:74:b8:47:ad:e3:37:
         fe:54:dc:34:51:a6:9b:1a:2e:c6:75:79:07:8c:57:d2:2d:a7:
         2f:8d:1f:6a:c7:1c:4d:8e:43:ba:56:ab:66:ff:b7:46:19:01:
         56:5f:ce:9f:26:01:f9:e3:2b:c5:c4:fe:29:d5:3c:c6:32:4b:
         77:99:1a:4e:c7:fe:0f:d5:e5:e1:ec:1d:1e:5e:26:6b:70:0d:
         1d:89:18:11:c0:b1:f2:f2:a2:26:da:f3:05:10:fd:68:dd:f5:
         53:e8:34:0a:ab:04:9c:0e:12:16:06:29:91:bc:b5:9e:d7:ed:
         a3:bb:ca:5d:c2:e9:63:3b:7a:bd:82:c5:66:83:00:3e:a4:3e:
         95:41:ab:5c:7b:27:2e:c2:65:5f:15:4a:f3:b1:a9:6d:2b:57:
         13:c8:8c:79:d5:d3:3a:c8:c5:b3:fd:7e:47:cb:65:07:49:f1:
         4c:89:2d:c7:9d:e0:59:36:23:9f:79:a4:f1:1b:b1:1f:fd:a8:
         ce:de:f2:88:e3:70:53:df:db:e7:4f:8a:f5:48:69:de:fa:84:
         bd:ee:0d:f5:62:2e:a6:79:45:ff:25:45:03:23:be:34:67:e1:
         df:29:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:00 2026 by rpki-client