Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
File:                     1745A0504D7F11EE8487CA3CC4F9AE02.roa (raw, json)
Hash identifier:          LJp9euumgUJgvg5bgQ/2zKDBr11uJnsBS5Uac9bJJe4=
Subject key identifier:   4D:91:04:EA:2B:B0:21:2A:8D:17:17:BF:DC:54:EA:92:39:24:50:FC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0755
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:28:52 +0000
ROA not before:           Mon 02 Mar 2026 22:28:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar  2 22:28:52 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a60f24-06ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:80:7e:d7:26:0e:22:85:0b:ee:32:2b:8b:
                    62:f9:49:f2:25:a3:ac:f2:d2:61:f6:b6:e9:09:4f:
                    65:51:2b:12:71:a4:f4:47:8e:a2:e5:5b:21:a4:ef:
                    cd:c6:d9:43:cc:2a:a6:70:e5:a8:42:24:61:91:07:
                    ea:bb:ed:3d:a2:f0:40:28:dc:7c:37:75:48:f6:ee:
                    51:fd:bc:15:2d:e6:62:c3:b3:ff:77:c2:32:76:ec:
                    2e:d6:14:a6:94:38:02:13:d4:64:34:03:c2:3a:7e:
                    68:14:64:0a:42:fd:ce:70:b4:bc:29:d9:a0:b9:11:
                    a2:bb:fe:df:a3:e2:76:3d:56:79:c2:2b:46:40:75:
                    bc:32:36:26:b9:ad:f1:08:0a:fa:89:50:e4:66:00:
                    3a:84:c5:ca:c6:f5:ff:2e:14:41:65:8e:a5:78:98:
                    77:4f:e5:95:cf:c1:8b:e6:27:09:62:63:9e:4e:69:
                    53:83:0e:50:f9:8b:32:35:ad:12:6a:38:16:e9:07:
                    94:29:be:61:34:27:d0:ba:ca:71:b2:f2:1d:5b:9d:
                    bc:68:6e:45:3b:5a:67:51:fd:57:ff:ee:12:33:39:
                    e9:76:96:5c:bd:c3:e1:ae:23:ec:ca:94:ad:86:3a:
                    6c:c1:d7:91:5f:00:4f:61:ee:87:c3:54:5a:5f:50:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:04:EA:2B:B0:21:2A:8D:17:17:BF:DC:54:EA:92:39:24:50:FC
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:17:63:7a:3c:df:67:67:39:b8:e2:10:8c:0d:3b:ea:ab:
         b5:5c:9d:3f:46:4f:5d:0b:ed:76:88:26:07:a1:a6:31:6e:fc:
         ca:ba:78:c4:52:93:ca:7b:cb:b4:27:5e:1f:7d:02:6b:4b:d8:
         cf:e4:fa:3c:fe:42:40:92:03:95:73:bb:5a:ec:22:fa:2f:31:
         a2:01:e6:68:56:25:39:b7:9b:fa:97:78:6d:bc:70:d5:4c:7c:
         8e:b8:6d:1e:5a:74:d6:cd:ff:eb:5f:b3:d0:2b:b4:a7:53:6a:
         a3:b1:de:7e:2d:26:74:a6:1d:bb:41:21:6e:43:13:ef:62:d0:
         e1:25:05:b3:79:38:34:95:12:f8:0e:ef:28:00:57:b3:9f:7a:
         8d:f2:cf:aa:da:d4:37:a8:ab:46:9f:b4:03:85:57:31:4b:1f:
         25:66:1f:6c:80:00:f0:f6:c6:82:86:bf:14:51:34:d9:aa:7b:
         60:49:c5:f1:53:f5:8c:6a:c5:62:48:a9:c3:a1:9c:4d:f7:e7:
         d8:5f:4d:1f:91:ca:3f:04:e6:0f:09:dc:7a:85:66:b2:d5:f3:
         41:ec:a2:43:46:e8:74:10:40:06:70:3a:86:2a:0c:87:6a:04:
         99:f7:91:d0:dc:ef:c0:81:38:70:cb:91:a2:b6:cb:63:5b:0c:
         b0:1a:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:43 2026 by rpki-client