Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa
File:                     D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (raw, json)
Hash identifier:          +d57M7XA1iwaKErPIm6p+j4YRMOhWn89QZNMY2addAM=
Subject key identifier:   45:DC:E6:9A:13:D0:D2:1F:94:25:34:5E:FF:09:74:A4:93:00:8E:C3
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       013D
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:22:46 +0000
ROA not before:           Wed 13 Aug 2025 07:17:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        45.121.212.0/24 maxlen: 24
                          45.121.213.0/24 maxlen: 24
                          45.121.214.0/24 maxlen: 24
                          103.62.52.0/24 maxlen: 24
                          103.62.53.0/24 maxlen: 24
                          103.62.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Aug 13 07:17:16 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a459c6-5c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:8a:f5:4e:8b:5d:14:13:05:39:77:87:bd:
                    d8:45:30:39:f5:dc:23:b1:39:74:a5:c7:1f:4c:98:
                    72:29:5e:f5:78:7d:d7:48:e1:47:fa:0b:ef:3c:36:
                    c3:68:d8:20:63:33:b1:4d:a6:ca:97:46:98:3e:be:
                    f5:45:13:59:6e:f1:0b:94:3a:90:9f:33:fa:48:e4:
                    3d:66:51:d8:80:a3:66:18:17:19:00:c4:3a:65:a9:
                    34:8e:46:d7:db:57:d1:5f:e0:bf:98:f1:ee:d9:73:
                    53:6e:79:88:26:ed:18:25:b6:1e:e5:fc:26:68:f9:
                    69:8b:12:c8:37:8c:62:b1:ba:e4:9e:cd:dd:f1:ad:
                    e0:11:9d:4a:ef:16:6b:ad:67:ba:65:34:37:92:82:
                    1c:02:97:51:76:7f:09:d8:b2:b5:c6:d1:ed:bb:a2:
                    75:8e:0b:87:a5:97:39:da:47:ba:47:5b:13:7f:f7:
                    20:bc:90:3b:0d:7e:04:d8:78:16:01:04:89:79:4e:
                    42:cf:fd:8e:44:9e:f4:9d:70:42:51:cf:cd:20:41:
                    32:16:57:2c:4a:ed:84:09:17:98:f1:f5:f4:20:ee:
                    0e:da:4a:98:97:fa:2b:45:c1:f0:7c:2f:0e:da:5b:
                    a1:c0:48:f1:14:fc:54:71:13:ea:84:41:3c:7c:67:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DC:E6:9A:13:D0:D2:1F:94:25:34:5E:FF:09:74:A4:93:00:8E:C3
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.212.0-45.121.214.255
                  103.62.52.0-103.62.54.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:4c:b0:56:4c:12:dd:40:d3:ae:62:8c:34:28:37:d8:14:
         10:06:c6:aa:d6:e7:63:72:7a:49:d4:7a:68:98:79:76:24:ec:
         e3:df:f2:6b:9a:94:9d:27:0f:f3:6f:e4:58:2b:cb:5a:11:24:
         1b:a5:43:1d:e1:15:41:15:be:2d:6d:5d:c0:99:b9:7f:e9:f9:
         b3:3b:8b:06:55:5f:97:25:22:23:78:b7:7f:46:42:d0:ee:e1:
         49:8a:a2:89:32:4e:b0:1f:f3:78:38:76:30:06:9b:d7:fa:a3:
         93:8b:3b:fb:ec:1d:13:89:e7:0d:57:83:bf:72:88:76:70:32:
         dd:84:f9:85:8d:2c:d7:c9:2e:b5:f7:d2:52:6b:e9:cc:5f:6e:
         22:59:a4:76:6b:8d:80:3a:83:17:69:ca:16:3a:53:6e:5e:19:
         4c:d6:e0:2f:90:3e:80:21:01:29:2d:73:ae:28:89:fa:ce:77:
         74:77:d5:ef:48:e2:10:d6:62:4f:f0:ba:c4:62:fc:26:5e:3d:
         cd:81:4f:53:c6:4a:43:28:62:a8:15:4a:16:2d:47:83:ac:09:
         0d:6a:a7:43:d4:8f:68:5b:70:76:61:98:41:b4:a8:59:ae:0b:
         49:ae:20:48:e2:00:24:83:7b:96:d2:28:d7:bd:a8:00:d1:07:
         38:27:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:50 2026 by rpki-client