Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
File:                     E5723CA260C111F0A9EB0333C4F9AE02.roa (raw, json)
Hash identifier:          cYt+KD2Qk+BlMRrfFar8wLBaPDEtviMRQH8N+k8Q4G4=
Subject key identifier:   77:04:33:02:D2:DA:48:19:86:FD:B8:D2:66:04:B1:F7:EC:56:D2:D3
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       80
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:20:49 +0000
ROA not before:           Mon 14 Jul 2025 14:50:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151335
IP address blocks:        103.105.22.0/24 maxlen: 24
                          103.196.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jul 14 14:50:34 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a51e31-6ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:50:09:33:da:73:e3:75:a7:df:26:73:59:
                    1f:6d:27:36:21:83:23:c1:62:10:d6:cf:02:e0:0b:
                    25:6b:d6:73:30:fe:fa:d6:76:46:ec:a6:37:6b:1f:
                    4f:6a:cc:c9:aa:dc:f4:5f:51:68:11:80:c3:fb:90:
                    6a:bb:d3:c4:53:23:fd:f3:ce:9d:3c:e7:e1:aa:46:
                    05:03:c2:03:a6:dd:1e:40:99:a2:8c:46:be:b2:59:
                    df:84:ad:fd:ed:b1:f2:55:b3:f8:ec:f7:fc:ef:11:
                    af:84:0a:b4:ed:58:8f:80:d2:35:dc:a5:bf:44:c7:
                    ff:81:ee:f4:9b:26:23:dd:99:3d:1a:7d:84:e1:ea:
                    9b:ba:ac:a4:38:d6:16:65:4f:a7:06:6a:c0:5b:5b:
                    67:65:99:76:4d:0b:fd:01:be:b2:18:62:75:f6:b2:
                    fc:04:40:b0:1b:ab:6f:af:a1:d9:28:15:c0:ef:4f:
                    90:ea:1e:a0:88:16:01:88:41:e3:59:9c:d2:53:a3:
                    a5:b0:7e:7c:fc:2e:61:f2:c9:2b:68:b8:04:75:99:
                    58:0f:36:c1:80:c6:67:1b:37:f8:2f:10:b5:24:db:
                    eb:36:3d:8c:b4:08:5f:5d:2b:f2:3f:d2:e8:d5:88:
                    9a:47:75:78:26:ed:3a:de:56:ee:28:63:eb:15:32:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:33:02:D2:DA:48:19:86:FD:B8:D2:66:04:B1:F7:EC:56:D2:D3
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.22.0/24
                  103.196.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0c:01:81:d7:11:44:8a:5b:cf:13:45:50:2a:46:14:78:ac:
         b6:14:dc:3c:9b:36:f2:4e:8b:6d:8a:7c:ba:3c:bb:67:61:cb:
         e3:97:08:c2:69:91:5a:53:cc:28:87:1d:cb:93:89:40:a8:17:
         4a:53:34:8d:67:30:89:7e:ab:0d:34:4c:c1:fd:32:86:13:64:
         03:c5:0f:13:34:44:84:f3:1b:6c:5b:fb:30:b9:c2:91:74:57:
         d9:12:fe:59:22:52:df:0e:14:d1:64:59:6a:c0:0a:ea:4f:6a:
         ce:71:d9:d2:b6:a1:da:4d:63:ef:8c:98:83:22:88:1d:cd:fc:
         75:7c:a5:0c:22:34:6b:78:11:e3:30:fb:9f:16:4d:f8:ab:00:
         d1:15:4e:d4:f4:1a:9d:13:26:bd:70:4c:a8:37:fa:2a:ff:f0:
         83:ec:ea:2f:3a:7d:8e:53:83:b3:3c:c0:81:89:4c:5c:4b:ee:
         5d:6f:36:39:e6:20:10:27:fc:aa:2d:f8:31:17:1d:1c:5f:8c:
         aa:c9:9b:c8:a1:76:32:bf:52:8f:be:6f:29:7e:b5:cf:14:5b:
         39:69:43:f4:d2:c1:88:1d:03:9f:9b:14:69:31:d5:e3:08:19:
         b6:8d:48:f6:38:59:ba:f7:7e:28:09:0f:9a:b7:37:93:78:19:
         a2:bc:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:45 2026 by rpki-client