Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/34EEA87C040511EEA466E336C4F9AE02.roa
File:                     34EEA87C040511EEA466E336C4F9AE02.roa (raw, json)
Hash identifier:          Z6+FwOSORTO5IhxDQLbyy7addHO+Ye/7DWvOrUrjW0k=
Subject key identifier:   14:D7:7D:7D:8B:8D:68:C9:B6:75:A7:D1:EB:D1:5D:71:D7:7D:C3:49
Certificate issuer:       /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial:       020D
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/34EEA87C040511EEA466E336C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:32:57 +0000
ROA not before:           Mon 05 May 2025 03:09:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151191
IP address blocks:        103.161.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
                          rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
        Validity
            Not Before: May  5 03:09:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59f99-dd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:83:74:8b:02:ac:07:d2:b3:37:8f:bc:e3:
                    b1:f2:3b:9a:14:e2:08:be:4a:5f:8f:53:e6:03:3b:
                    0b:a9:01:70:05:38:20:ac:09:46:33:a8:e6:53:ac:
                    eb:e4:60:42:f1:d0:7f:b4:9c:ea:4f:2b:b1:f1:e0:
                    5d:09:e8:d0:a8:10:a4:c2:ff:2a:81:46:d8:39:17:
                    e2:47:a8:8b:51:f7:f6:be:c8:2a:85:7a:36:b0:f3:
                    05:e2:bd:a9:95:fa:e9:22:f0:be:7d:64:a7:ba:8e:
                    32:28:19:9b:92:1c:3e:b8:bb:c1:cb:dd:2f:50:64:
                    8e:12:da:12:fa:46:c7:e4:86:09:cd:55:0f:c6:04:
                    83:f2:b4:32:99:89:06:ac:2f:88:8c:87:ad:70:24:
                    77:a6:47:e6:cd:00:9d:08:ba:bc:72:f1:e6:3b:bc:
                    85:dd:af:a7:a1:66:53:c3:6f:19:2f:f2:4e:8d:f6:
                    ef:b9:f2:18:c2:4e:96:56:cb:d7:93:56:f1:aa:d3:
                    3a:36:dd:86:7a:7a:6a:23:b9:b2:a7:88:23:2d:3f:
                    27:ef:1e:a5:30:76:c2:40:a7:00:3e:c0:3f:ee:f5:
                    98:ac:be:a3:ce:1a:2a:e7:6a:df:55:17:82:e3:14:
                    02:3e:d4:3c:10:3b:ef:19:d5:53:a2:09:e0:0f:33:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:7D:7D:8B:8D:68:C9:B6:75:A7:D1:EB:D1:5D:71:D7:7D:C3:49
            X509v3 Authority Key Identifier:
                keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/34EEA87C040511EEA466E336C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:eb:42:71:26:ef:cc:27:b1:73:aa:a9:ab:8f:d5:31:78:55:
         b1:21:67:63:77:ce:d3:c9:5b:87:c8:a5:a6:57:cd:a2:d6:ae:
         ae:08:ac:bc:9e:4e:fe:d2:63:52:2a:8a:0d:84:88:b5:0a:b6:
         8d:ac:c1:fb:11:d8:56:28:4a:f6:78:f1:52:41:fe:7d:46:1c:
         f8:79:c9:df:09:05:74:c9:ab:71:50:78:a5:ba:96:5c:96:ad:
         42:7a:6b:ab:f5:5d:1e:3f:64:c5:40:a4:c2:46:a7:bd:0b:cf:
         b2:c1:9f:dd:f2:54:e0:08:2a:86:6a:c4:87:9e:cf:6b:ef:2d:
         2f:24:84:31:77:0d:e9:9d:fb:8b:3b:c2:30:9b:76:4a:2d:e1:
         ab:ef:af:4e:91:49:22:ef:7a:7a:9d:64:12:21:17:70:a6:80:
         bb:c2:56:66:7e:a2:aa:c3:37:69:17:fe:3c:f0:e6:6e:02:c6:
         e0:32:cc:1d:94:16:9a:44:7f:d5:b5:d7:70:d6:c1:06:b2:6f:
         1a:ef:04:e5:4e:29:dc:94:6a:8a:d4:64:ff:c9:9c:8a:11:54:
         8d:bb:6e:3a:eb:96:4a:42:99:c8:ea:d6:44:ec:ae:2f:f3:6d:
         1c:d2:d9:87:ca:c9:6b:cb:2a:da:82:80:26:3f:92:d5:f8:c1:
         23:2a:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:49 2026 by rpki-client