Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa
File:                     5334D20CDA5E11EBA323F462C4F9AE02.roa (raw, json)
Hash identifier:          paFsFa6qVLCDV+k1MXzHkgPkBlhBBEj3AZlBzmVS9gs=
Subject key identifier:   7D:01:74:A2:53:4B:9D:DE:7A:82:19:86:D9:FC:E2:A1:6B:F6:D8:00
Certificate issuer:       /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial:       0618
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:38:09 +0000
ROA not before:           Thu 26 Jun 2025 23:33:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.168.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
                          rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
        Validity
            Not Before: Jun 26 23:33:43 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a43330-bc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:25:4a:83:25:01:c8:8f:61:90:18:01:36:
                    8a:8e:93:7f:c0:3a:76:e6:29:a4:96:f5:56:15:f4:
                    6d:c4:b7:ed:5f:01:8f:ef:27:65:ac:61:7f:96:ff:
                    d7:5f:a1:e5:d3:bc:70:c6:c3:f3:35:e4:f1:48:d8:
                    8a:14:a2:5b:54:81:b8:3a:a4:4c:d7:f2:4d:9e:8c:
                    50:3d:ad:cb:98:c7:fc:8e:0d:28:99:99:58:61:a9:
                    0f:66:81:22:1a:7f:c9:fb:a3:e0:f1:12:b4:3d:68:
                    7e:7b:0f:68:e6:b2:9d:c8:da:a5:32:ea:d5:ea:41:
                    b7:f2:0d:ca:6a:50:99:75:b2:8a:bc:1a:81:02:d8:
                    21:48:bb:d3:2b:b7:a6:6f:93:51:da:f9:ef:e3:ce:
                    83:34:83:86:45:d1:3c:f3:10:34:06:50:d5:1a:11:
                    f9:30:2e:cf:26:db:56:73:5d:cc:2a:08:60:a5:c9:
                    0f:50:45:c7:7e:15:f2:1c:0c:40:d0:72:dd:45:77:
                    40:b1:e8:a3:f5:a4:96:1b:6e:75:74:f3:5e:80:85:
                    a6:83:34:6e:c9:fe:2f:4d:11:c4:4f:4f:0a:82:a6:
                    28:2b:8f:7f:91:44:ce:30:14:74:f0:ef:f2:c3:8c:
                    a3:4a:bd:1e:a0:5a:cf:a6:12:60:c5:9c:24:d0:25:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:74:A2:53:4B:9D:DE:7A:82:19:86:D9:FC:E2:A1:6B:F6:D8:00
            X509v3 Authority Key Identifier:
                keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:74:11:45:b2:bb:01:f6:ca:02:3d:46:21:a4:a7:64:2c:
         75:d3:18:51:da:b6:ea:03:03:52:7c:9d:68:75:d1:00:f2:98:
         89:ca:8a:95:62:11:57:64:a3:55:54:5b:ff:ac:16:4d:59:07:
         b8:43:34:3a:65:a0:8f:5e:30:d2:dc:37:17:59:e5:22:ea:08:
         c4:cb:26:09:76:ed:ef:59:e0:48:a9:55:12:5b:9c:46:69:9e:
         da:ef:37:ec:1d:41:f6:a2:d2:c9:95:dc:7a:60:68:14:c3:84:
         ce:a4:1b:a0:3c:b5:1d:45:6c:b4:f9:7b:10:98:29:b6:e7:67:
         e0:2a:ed:51:1f:03:a7:53:7c:b0:2e:a1:0f:84:e5:e7:d8:a5:
         30:e1:53:b7:9a:72:8e:48:17:27:10:b8:d1:02:75:25:69:e1:
         eb:9a:8f:5d:23:ff:60:ed:2e:b3:d6:1b:4b:d6:2d:16:b4:17:
         3b:d7:88:6d:69:67:05:f6:a9:47:30:86:cc:85:f5:74:5f:03:
         ff:58:9d:97:e2:7f:c8:2c:74:0e:3e:c7:f8:b7:c8:19:29:63:
         d5:ad:34:33:28:7d:63:dc:73:cb:97:8f:26:65:18:f9:d2:9f:
         b3:ed:2b:0b:d6:99:b9:e3:a8:ef:cc:5b:94:7a:37:c3:d3:d3:
         6e:9b:90:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:19 2026 by rpki-client