Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
File:                     AB22314C35C211ED8FD8923EC4F9AE02.roa (raw, json)
Hash identifier:          twFwFJC3J8ZUbcarYXRq8YtJ8WV2nBAuve1Zg5XyTww=
Subject key identifier:   31:D3:D5:A4:9B:6E:C2:CC:A0:17:A8:B6:AB:3A:DF:FD:E0:A8:67:0B
Certificate issuer:       /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial:       05FD
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:52:22 +0000
ROA not before:           Wed 14 May 2025 23:53:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134715
IP address blocks:        103.166.42.0/23 maxlen: 24
                          2407:5040::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
                          rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
        Validity
            Not Before: May 14 23:53:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51785-d4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:9e:66:76:b4:b8:26:bd:08:da:44:3a:74:
                    8b:27:9c:d9:04:36:de:a5:0d:a3:bd:75:1d:dd:62:
                    b0:b4:72:0a:0d:6c:34:ae:49:4c:65:7e:65:77:31:
                    75:8e:37:5d:b2:7a:82:58:dc:01:1d:0a:6c:65:4b:
                    af:04:45:45:46:3f:3a:03:c4:13:ca:37:70:db:eb:
                    d5:64:e1:ac:20:9e:73:2b:be:f2:83:4c:f3:a7:5e:
                    77:97:76:fc:b0:f7:60:c9:9f:95:2c:1f:2e:b9:a2:
                    dd:84:ec:ed:bb:58:9b:14:b2:51:48:fe:61:18:c1:
                    94:ef:cd:0b:0e:25:52:dd:7d:9d:91:2f:47:99:7b:
                    54:e5:61:8c:e2:a1:24:32:6d:20:02:c5:2d:fa:68:
                    44:f9:b7:db:2f:fd:06:62:53:3b:65:5f:f5:2e:1e:
                    74:74:20:83:56:67:53:64:95:43:c5:4a:c7:e3:95:
                    d2:c8:3a:16:61:d8:b3:41:32:7c:60:aa:77:71:03:
                    1f:2c:0a:32:0f:f4:3b:29:b1:ec:c4:9b:22:e0:29:
                    1b:c0:11:5e:e2:71:5d:42:2d:5c:25:cb:1a:c8:5d:
                    0c:79:e5:58:6a:aa:54:48:91:f4:7d:5a:23:7b:22:
                    e6:93:4b:90:ed:39:9b:d2:6f:93:cd:12:ce:06:1d:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:D5:A4:9B:6E:C2:CC:A0:17:A8:B6:AB:3A:DF:FD:E0:A8:67:0B
            X509v3 Authority Key Identifier:
                keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.42.0/23
                IPv6:
                  2407:5040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:5b:8d:99:c9:f8:65:e4:e6:b4:78:ed:9c:0b:a1:a0:76:
         ae:f7:a0:8c:3f:62:be:ec:6f:57:26:84:10:ff:26:dd:94:02:
         5d:73:35:b3:e3:b1:4a:a2:2a:13:47:64:c8:63:da:95:70:a0:
         73:d2:6d:21:0c:1d:56:ee:c1:47:93:1c:c5:4c:19:c7:95:70:
         46:f3:5f:87:0e:b4:ff:71:85:d6:80:26:49:d8:df:44:45:5f:
         71:f2:14:4d:b7:79:b3:fd:89:04:bc:d6:4b:ad:47:26:15:69:
         33:46:7b:ec:73:d6:17:9a:d8:50:82:48:78:34:97:c4:78:19:
         ce:bc:aa:75:ec:43:e8:79:9d:88:c9:33:b1:cb:08:31:29:33:
         2a:27:1c:04:1c:7a:c8:25:53:e0:d1:0f:89:e7:e5:dd:a7:8b:
         fa:f6:6c:4e:09:58:34:36:1b:5e:4a:17:be:30:c3:a0:30:e7:
         b6:b3:c3:91:b6:62:f9:44:31:c8:c9:df:74:83:9a:6c:30:b2:
         1e:10:27:95:2b:2c:f3:15:8b:0e:22:e8:a1:b3:10:f6:44:55:
         46:0e:d6:47:87:a7:79:67:bd:bb:80:60:f1:06:a5:dd:21:7f:
         5c:63:da:18:f5:ca:b8:39:93:ce:af:d8:12:da:09:a5:89:f5:
         c2:5a:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:42 2026 by rpki-client