Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
File:                     F1A4DAD6403211EEB47BF84AC4F9AE02.roa (raw, json)
Hash identifier:          FdNaF3+d7P8rDGstXuH8gApZBnIYbbzLiawSXMHrTM8=
Subject key identifier:   4C:D5:10:43:AA:D6:39:C1:27:20:97:54:A9:5A:4E:25:E4:AB:C2:81
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01EB
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:16:37 +0000
ROA not before:           Sun 21 Dec 2025 02:23:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150683
IP address blocks:        103.255.66.0/24 maxlen: 24
                          103.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Dec 21 02:23:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46665-3f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:a6:7a:60:38:9d:c2:c4:3a:20:8a:6f:ce:
                    98:fb:92:29:f0:71:79:8d:38:57:aa:d5:dc:20:e7:
                    16:97:b0:77:00:ac:ad:23:e0:71:58:31:eb:5a:ab:
                    5f:f3:62:2a:b6:75:1d:20:9f:89:6e:0f:47:26:70:
                    a3:d1:11:54:f5:36:eb:e8:17:8c:25:1c:30:71:ca:
                    4f:16:ca:89:3d:d1:ab:33:08:c5:c9:37:0c:e1:08:
                    54:eb:2f:13:42:a0:ef:59:93:66:87:32:42:8a:ca:
                    72:79:48:da:1a:fc:13:c3:32:0a:52:d8:ea:b3:17:
                    c9:02:c6:c7:bb:4f:f4:80:3d:cf:60:96:34:89:85:
                    9d:04:68:33:86:ed:5e:4a:24:20:68:05:29:b6:df:
                    be:89:4e:d1:c0:0d:4d:48:17:16:f7:ec:b9:80:fd:
                    65:3c:bb:94:07:be:1e:cc:7f:0f:77:49:f2:30:0d:
                    c9:1b:d6:20:39:55:70:d3:7a:e5:ef:df:27:63:d1:
                    1d:c7:7d:e4:a8:90:0f:d7:0a:d8:46:dc:89:3f:12:
                    df:34:c7:e1:06:b0:52:b9:73:15:64:a1:20:59:9e:
                    00:f0:ab:8a:da:41:97:8c:12:5c:f0:54:8f:73:96:
                    f5:6e:db:b5:3e:e5:99:82:ae:27:b0:ab:57:f4:44:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D5:10:43:AA:D6:39:C1:27:20:97:54:A9:5A:4E:25:E4:AB:C2:81
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:d1:ad:c2:a4:6c:52:a7:11:66:0c:10:11:dc:0f:4f:dd:
         6e:8f:17:b5:2b:cf:da:f6:ef:e3:2f:12:99:d2:69:39:f6:ee:
         ed:80:e3:1a:79:b3:43:4f:d8:aa:41:56:a4:67:db:b3:eb:0d:
         02:5d:71:64:07:d5:5b:65:c5:96:68:06:47:1a:f4:e3:5c:79:
         cd:85:73:70:ac:79:d1:01:45:36:0a:c5:69:ad:94:82:55:ab:
         61:45:90:d2:04:b8:c4:63:60:68:a9:a7:8b:58:8b:97:6e:62:
         ef:16:19:25:a7:ce:a2:c3:14:c8:60:bb:a2:4c:ee:fd:8c:b9:
         d0:99:9f:69:91:25:c5:73:99:88:d3:ea:1e:ae:0d:11:99:2f:
         93:68:2c:6f:61:93:56:91:7d:e8:02:a3:ce:e0:1f:e9:3f:07:
         13:70:bd:61:c0:b9:20:bb:fa:34:c7:07:f5:40:9a:ee:3e:fd:
         83:3c:fe:d4:9e:10:a9:c1:77:c9:7d:ca:18:97:07:b1:54:13:
         d0:cf:42:d5:3d:7f:0a:b2:62:0f:fe:40:3f:57:05:8c:6d:4a:
         e6:5f:8c:75:c8:a1:2e:06:e1:90:8d:30:99:29:0d:1a:95:02:
         41:a4:bd:0b:bd:d0:79:54:04:5d:ca:59:58:dc:be:53:82:2b:
         8d:c9:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:00 2026 by rpki-client