Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa
File:                     695C5050C27D11EEB0AE466DC4F9AE02.roa (raw, json)
Hash identifier:          rB30xmuASYWjmKcidZhlL3g3FgthN2+a8/JMg6RBy4A=
Subject key identifier:   7C:B1:66:36:E2:A0:3D:3F:84:CE:B5:F4:5F:FA:0D:35:62:EE:87:39
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       0673
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:18:57 +0000
ROA not before:           Wed 02 Apr 2025 23:25:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        103.136.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: Apr  2 23:25:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51dc1-5c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:dc:b7:a5:58:b1:6b:39:d6:d6:2d:5c:dc:
                    84:62:a0:cb:be:04:c3:d1:1d:9b:98:5c:a3:27:44:
                    da:bf:14:dd:c6:44:b7:0d:ed:3b:3c:f6:b8:22:f7:
                    4f:98:9c:d3:1e:65:bf:3e:62:9f:a2:d5:b9:c0:62:
                    ab:cc:35:8f:72:f2:d0:5e:84:99:23:f7:fa:40:ab:
                    af:02:43:ec:f8:fb:7f:f8:77:9d:20:17:13:e2:8b:
                    fa:cf:aa:b0:fd:29:f3:92:0c:b8:41:5d:f7:fd:a0:
                    a0:37:3d:8b:12:b3:0e:e5:45:b2:74:a6:27:f1:1d:
                    39:1e:4a:14:cc:99:6f:26:5f:4f:90:30:5f:5b:f5:
                    27:46:93:44:e0:e7:96:34:28:b4:80:be:c6:46:42:
                    1a:e5:b4:ad:f3:5f:7a:43:72:aa:46:bb:f6:db:1b:
                    1e:85:d6:51:de:3c:14:5d:96:db:a2:e4:66:c2:6a:
                    b5:86:64:6c:8b:68:5c:de:1c:53:24:c2:aa:30:7c:
                    a3:d1:03:e4:9f:9a:17:63:17:cc:c6:ea:47:fe:d2:
                    0e:69:0e:b0:ab:15:0e:1d:be:29:95:76:9c:e5:85:
                    21:7a:56:64:95:40:78:85:25:29:77:f6:ae:bc:7e:
                    3e:8d:23:4d:39:ae:8f:10:ed:2e:16:cd:ce:77:42:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:66:36:E2:A0:3D:3F:84:CE:B5:F4:5F:FA:0D:35:62:EE:87:39
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:72:79:d9:17:9c:ae:01:bc:08:37:d2:36:87:ad:d5:61:
         2c:b2:11:29:85:00:1d:39:36:02:d0:00:fc:ec:27:e7:16:c6:
         b8:34:be:d4:ed:de:3f:44:d0:8a:20:15:44:a8:c6:8c:ff:5c:
         4f:cd:6a:05:0f:be:68:0c:a7:1f:23:d1:44:38:5f:a9:15:be:
         8e:4e:15:58:0f:f0:6a:47:a1:28:a8:41:e1:a3:e6:c6:59:f7:
         79:1c:58:bc:9b:49:f4:61:d7:51:8e:00:06:78:f3:dc:1c:ad:
         66:a2:2c:b1:58:9a:0b:24:af:bc:fd:db:f9:44:23:be:14:b4:
         34:7e:72:f8:ff:bc:b1:d2:f1:5a:ad:e2:d2:e0:8e:8e:2f:2a:
         46:72:f4:8e:e6:9b:c2:3c:67:16:46:4a:6e:3b:cb:c3:ba:04:
         1d:ba:0a:e7:ec:64:3c:00:a9:ba:e3:32:77:ed:5b:dd:78:98:
         76:8a:98:31:67:ae:9d:c2:e2:d2:0c:1c:3a:c9:93:3d:08:21:
         ba:2b:d1:43:1d:86:01:5d:38:7c:ef:37:18:a5:92:c3:7c:9d:
         66:f7:ae:83:f7:6b:3c:15:2d:76:60:ce:6f:8a:12:2a:95:eb:
         f5:7b:6a:04:92:38:84:03:0e:77:4d:58:11:c6:aa:fb:6a:9d:
         16:69:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:05 2026 by rpki-client