Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/5C5F31B09A2A11ECAEE8C819C4F9AE02.roa
File:                     5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (raw, json)
Hash identifier:          /QFvUN14R1O1KVpjrV19SJEs/S3B1Q2N0TzOckdFv0Q=
Subject key identifier:   75:6F:94:B8:02:F3:C8:AE:B9:D5:38:A1:D2:0A:69:EC:2D:FB:F6:3F
Certificate issuer:       /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial:       05EB
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/5C5F31B09A2A11ECAEE8C819C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:38:53 +0000
ROA not before:           Sat 09 Aug 2025 00:05:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142584
IP address blocks:        103.170.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
        Validity
            Not Before: Aug  9 00:05:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4335d-be00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:be:6c:25:39:54:4f:53:df:0e:7d:13:e1:
                    f4:d6:e0:a0:4a:a9:f8:a8:98:c8:e3:ff:2e:46:f1:
                    6d:30:da:c7:61:e8:49:aa:41:00:b7:5c:c1:69:4a:
                    43:0c:d8:1e:99:f9:75:11:2d:c6:3f:c4:bc:6c:2e:
                    18:1c:fc:f8:d2:b9:67:16:5c:88:d1:a3:87:f6:e7:
                    fc:5a:bd:19:c8:47:dc:fd:92:9d:4e:88:7f:5d:75:
                    a9:33:db:0e:a0:f0:fb:02:d8:ff:f2:ca:72:88:40:
                    32:f5:a0:24:87:5b:d0:7f:18:56:3f:cb:3d:16:df:
                    2f:77:5a:73:af:58:91:f5:81:17:94:46:db:60:5b:
                    e7:2c:5f:9a:79:92:76:ac:9c:6c:0e:ab:c5:7b:3d:
                    58:c1:58:7e:55:c9:1b:fa:58:21:0d:0f:82:13:1d:
                    b7:51:46:71:6b:9b:a8:82:c7:11:03:8f:6c:f0:92:
                    b8:0f:20:e5:8d:e8:e9:0b:49:b7:0e:5a:c5:ab:0f:
                    f9:db:d2:1b:9a:d4:48:61:ff:fd:e6:05:5b:58:c8:
                    63:18:f0:05:9b:ab:90:34:2e:8b:cc:45:fb:59:48:
                    a7:15:04:3d:f9:f2:18:5a:a3:3a:11:1a:6f:38:58:
                    b0:51:eb:40:4f:ac:fc:39:c9:37:5a:d3:6c:20:53:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6F:94:B8:02:F3:C8:AE:B9:D5:38:A1:D2:0A:69:EC:2D:FB:F6:3F
            X509v3 Authority Key Identifier:
                keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/5C5F31B09A2A11ECAEE8C819C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:52:1b:55:1c:be:f4:17:ae:ff:b3:0b:7d:2f:b9:c4:c3:
         4c:b9:6a:81:51:10:3b:7f:76:d2:e9:15:09:e5:0c:73:09:e4:
         f6:02:c4:57:02:38:2a:70:8d:1a:37:f1:6a:79:f9:3c:b5:b3:
         66:e9:5d:cc:e0:b2:5e:71:16:b4:1f:19:ad:e3:af:64:ae:9a:
         b9:32:c8:64:ad:e7:54:84:fb:29:b2:48:13:3c:6d:13:1b:23:
         03:a4:91:e1:dc:ef:0c:99:c4:ee:49:dd:ce:5a:8e:a2:3f:14:
         13:aa:00:0b:1d:47:97:cb:e5:52:21:c4:b4:f3:3e:9f:86:96:
         12:41:3a:be:ef:34:ad:37:d9:a3:8e:66:bb:78:71:27:f4:5f:
         a7:65:5b:0c:07:e2:78:7c:b3:6e:5a:30:e9:8a:04:14:aa:7f:
         75:fb:ac:96:a1:90:91:dd:6b:ef:34:ca:6a:c1:df:73:d7:48:
         f8:b3:a1:c2:d4:ec:03:bf:f7:20:99:d0:50:fc:7d:a0:c4:1b:
         c3:ba:c8:85:c5:f2:7b:64:9e:36:72:85:4e:ad:55:90:40:34:
         6b:00:62:aa:a9:56:6e:e0:cc:9d:be:74:f4:74:9c:f6:ac:e4:
         a7:45:b8:93:1e:97:3e:32:0f:33:69:5a:22:ce:c5:9f:e3:b5:
         96:ae:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:55 2026 by rpki-client