Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa
File:                     C25659465C9D11EC99F7D10BC4F9AE02.roa (raw, json)
Hash identifier:          6SMT1AnOauj5YAPAP3C0QKupLOTw71ii/bAztVft8xw=
Subject key identifier:   98:C5:2F:22:A3:97:5B:E3:DB:58:79:4B:9B:97:35:E2:9F:4E:21:AE
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       0623
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa
Signing time:             Sat 04 Jul 2026 23:24:45 +0000
ROA not before:           Sat 04 Jul 2026 23:24:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136969
IP address blocks:        103.167.162.0/24 maxlen: 24
                          103.167.163.0/24 maxlen: 24
                          2001:df6:b980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: Jul  4 23:24:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a49963c-c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:ca:d2:30:61:1a:48:57:c1:41:9b:cb:6c:
                    38:31:83:ed:d3:8e:db:60:bb:29:f3:31:3d:05:52:
                    e1:a2:08:3f:60:00:a6:f6:74:7c:bb:63:38:b1:02:
                    19:eb:60:c4:b1:7e:12:da:68:bf:84:f0:44:dd:be:
                    0a:e6:b5:49:9f:f4:b5:66:24:92:37:63:cd:e7:fd:
                    5e:df:ed:66:e6:cb:51:99:5b:4a:5e:97:e8:73:f8:
                    6d:67:21:f4:d6:fb:cc:e7:fe:b1:40:db:44:e4:59:
                    1f:4f:7c:a2:5d:28:6b:cf:e8:0c:62:a1:c0:ce:4d:
                    33:d3:95:1e:85:19:bd:c0:d8:04:62:ce:75:2b:ee:
                    31:5b:32:0b:0b:af:82:5f:1e:61:0e:86:c0:04:47:
                    2d:54:4d:19:8a:fc:d2:a3:8a:6c:f0:83:b0:83:48:
                    cd:64:dc:5c:5e:4b:92:2b:f9:f2:03:20:f2:4c:5c:
                    6a:ef:7c:4a:cd:06:d3:58:eb:c7:3d:74:2e:1f:3d:
                    5b:37:fa:c7:95:72:7d:45:41:e4:00:69:ca:dd:95:
                    0c:f6:e3:ca:10:9b:f3:8e:d5:11:c0:b6:44:b9:f7:
                    66:1d:cd:db:71:b6:df:b2:eb:5a:c7:cc:50:9c:33:
                    dd:3b:8f:bb:58:29:e3:15:96:6a:3e:cb:b4:a8:7c:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:2F:22:A3:97:5B:E3:DB:58:79:4B:9B:97:35:E2:9F:4E:21:AE
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.162.0/23
                IPv6:
                  2001:df6:b980::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:fb:10:f7:d9:40:0d:af:4f:9b:ea:a2:9b:ca:9f:ac:03:
         70:40:25:90:50:3b:db:e2:db:c8:65:b3:d7:60:cc:d8:48:f5:
         1c:ba:12:f7:1d:6c:fb:11:74:bf:0e:3e:98:48:98:ac:41:7e:
         3e:fc:12:c2:5c:28:a9:d9:c1:7b:aa:76:de:99:d7:20:ab:0b:
         24:0c:5f:81:f2:da:b2:ad:39:45:77:5a:0a:3e:9d:db:27:b0:
         e5:d3:0f:0f:8b:9b:8e:1c:3e:ba:24:5c:ff:86:96:35:14:04:
         f8:55:e3:6e:6b:4e:cf:3d:d3:cd:ca:ec:ae:be:d4:09:53:d4:
         a9:da:19:e9:b4:74:76:8e:93:d4:ab:5d:8d:0f:f9:07:2b:d4:
         b8:f4:fc:69:c3:01:a5:af:45:9d:97:68:f8:b6:55:62:da:7f:
         a4:47:a9:7f:8f:22:2b:67:1b:b3:3c:88:6e:72:42:3f:fe:62:
         03:73:f0:42:c2:92:98:5d:fa:44:1d:bd:41:d3:9e:b8:e9:1e:
         60:ce:58:84:93:75:36:04:f5:42:58:15:e7:a0:e8:5b:59:7a:
         2b:04:76:8d:1e:19:a0:36:bf:e4:7d:f6:28:a4:cd:fa:86:46:
         ed:75:81:38:39:73:cd:ea:39:39:32:6c:1e:d1:bc:c1:ee:c4:
         82:ef:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:19 2026 by rpki-client