Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa
File:                     AE929D88823711E782F9A440C4F9AE02.roa (raw, json)
Hash identifier:          VGW6op9Jt58zCIJmnt9wzfxbg01YKQLR1kaa8y0ck8k=
Subject key identifier:   C5:F1:99:8F:EC:80:25:DD:FE:9F:F1:2F:7B:41:54:E2:B7:26:DF:85
Certificate issuer:       /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial:       19A4
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:43:34 +0000
ROA not before:           Wed 16 Jul 2025 16:54:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136738
IP address blocks:        103.94.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6564 (0x19a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
        Validity
            Not Before: Jul 16 16:54:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a585f6-8b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:6b:be:ed:4f:6e:66:49:35:61:22:5c:8c:
                    f1:3c:34:76:57:6b:2b:03:11:bf:70:3b:63:01:f1:
                    07:fb:80:67:05:36:18:b1:35:1d:8e:de:f6:4e:c8:
                    28:da:c7:32:50:b5:ad:58:cb:96:43:23:a1:4e:a2:
                    96:bb:e1:ae:89:08:2e:6c:a8:c9:1b:31:d1:fa:22:
                    01:d0:b0:12:d0:13:89:eb:7c:08:b9:da:bf:67:16:
                    d4:2f:66:7b:ca:c1:a9:f6:53:84:03:84:da:59:f3:
                    ce:43:6e:72:9f:9c:82:40:e0:b4:d4:b0:30:e3:8a:
                    f3:8f:ea:a9:df:3f:2b:fb:55:31:a6:a5:d5:23:3b:
                    07:53:6a:0e:70:d2:96:13:2b:2f:45:40:19:39:4b:
                    01:a6:55:0d:73:c2:c9:ad:01:8e:27:d4:ec:4a:ed:
                    3a:84:84:0f:ed:09:fc:14:03:1b:49:d1:5a:01:1b:
                    b8:75:a1:b4:bd:18:0d:50:46:a2:55:1b:b0:c0:05:
                    cf:fb:86:94:df:e3:e7:0c:20:b3:c3:b3:53:57:ad:
                    96:c4:8c:e9:01:4f:44:8a:56:c6:22:26:68:e3:49:
                    2e:5c:fc:75:53:3c:35:e0:05:3f:80:45:48:ae:7d:
                    bd:59:d3:c2:71:eb:dd:84:ff:2b:3e:6b:26:cd:ff:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F1:99:8F:EC:80:25:DD:FE:9F:F1:2F:7B:41:54:E2:B7:26:DF:85
            X509v3 Authority Key Identifier:
                keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/AE929D88823711E782F9A440C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:89:75:1f:c1:69:42:d2:b3:8e:cb:be:97:2f:fc:b3:4c:
         2e:6a:6e:80:1c:6c:ff:d6:33:9a:40:15:4f:ee:f9:72:80:f8:
         1e:69:e4:da:32:32:f1:ce:a8:2a:9d:7f:51:b7:05:8d:55:ef:
         7f:31:97:9d:a4:fd:db:e9:ca:b5:52:59:81:46:e2:3d:ae:25:
         62:03:4e:b4:93:5e:0d:c2:10:75:88:fb:84:1e:c1:d5:37:fc:
         fc:45:2a:f2:3a:64:15:98:2f:0b:1e:cd:07:03:98:bc:ea:4e:
         84:c3:4c:66:fd:1a:46:64:6b:7b:60:1f:0c:e8:fb:48:57:1d:
         bf:7e:b1:9c:8f:3c:cc:81:35:22:fa:cd:f0:d4:41:a2:60:be:
         6b:fb:5e:e5:40:a4:5f:99:8b:65:93:30:99:7e:ec:a3:9c:2a:
         88:a2:87:d9:3c:eb:64:ff:92:28:b5:40:a7:25:9b:c7:a1:1b:
         8a:4e:9a:81:bd:e0:61:4f:f0:b4:99:cc:d8:c8:5c:ae:9d:81:
         61:65:c8:25:cf:88:53:81:de:ca:2e:86:98:e3:63:f2:41:6a:
         59:59:81:2f:1f:d8:f7:9d:cf:49:e7:01:95:c3:8a:de:48:28:
         b9:c0:ca:48:1a:be:d5:40:3f:9c:f5:43:83:a1:cd:c5:10:81:
         84:ec:5f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:56 2026 by rpki-client