Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/DAC9D5960C7E11EF9A189E18C4F9AE02.roa
File:                     DAC9D5960C7E11EF9A189E18C4F9AE02.roa (raw, json)
Hash identifier:          3ZTRfxQhvuFdMMCMeOtUEE9gemCV8Xo1LJyuC+LNhgA=
Subject key identifier:   94:86:95:17:D4:EF:BD:29:70:2B:EB:81:F7:C3:2D:E1:B5:91:85:7D
Certificate issuer:       /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial:       017A
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/DAC9D5960C7E11EF9A189E18C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:44:37 +0000
ROA not before:           Wed 07 May 2025 05:12:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152711
IP address blocks:        103.51.62.0/24 maxlen: 24
                          103.51.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
        Validity
            Not Before: May  7 05:12:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58635-c585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:01:88:b1:95:9f:0c:4b:72:31:8c:50:ff:
                    33:35:7b:6d:c8:27:e9:ed:88:a1:aa:7d:3d:66:24:
                    2b:3a:74:2b:fe:5f:da:8a:6c:cf:28:52:9a:b1:fc:
                    db:58:3d:98:34:80:a2:89:99:8d:ee:4a:d7:bc:c4:
                    86:04:7e:5a:49:56:d3:41:c0:68:00:47:57:97:00:
                    79:4a:80:f0:ed:d1:53:d8:c0:72:71:bc:7d:db:98:
                    b2:f1:1e:b9:9b:e1:60:23:ce:d6:a4:9f:cf:74:7c:
                    bc:98:ed:4e:04:62:c8:55:04:81:9e:39:06:f1:7b:
                    0b:4f:c8:10:e2:a3:68:6a:96:92:99:7c:99:38:07:
                    5c:7b:12:26:a8:69:6c:4a:3c:81:42:a2:fe:99:90:
                    ca:37:24:6c:6f:9e:57:61:7c:c8:54:ad:54:0f:c5:
                    bf:8e:b0:2c:4e:b4:e8:97:bd:2b:d8:43:2d:9e:63:
                    3b:08:68:70:ed:ea:64:34:bb:46:a2:ec:94:68:e0:
                    e9:f0:9a:13:63:6d:bf:04:a4:e8:db:18:36:11:4a:
                    cc:59:ea:44:cb:4c:4d:23:92:59:04:95:cd:83:c2:
                    a2:80:83:e2:71:14:8f:de:af:5d:df:9c:72:6c:fd:
                    d5:47:86:0d:b8:b2:a0:74:ff:d1:4e:05:8b:b6:af:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:95:17:D4:EF:BD:29:70:2B:EB:81:F7:C3:2D:E1:B5:91:85:7D
            X509v3 Authority Key Identifier:
                keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/DAC9D5960C7E11EF9A189E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:c9:3f:6b:04:f5:d7:70:47:db:67:25:54:4e:19:cd:9d:
         a4:02:7f:ca:92:7d:bc:d7:3c:23:19:31:13:1f:81:db:e8:23:
         d7:5b:9b:d9:76:0b:1f:40:20:e6:50:8f:12:32:a9:e5:4d:d1:
         5a:d7:21:2d:3b:93:57:2d:46:5f:c2:7d:9e:17:17:a4:50:c0:
         9e:4a:68:96:e0:a7:41:f2:ca:0d:fd:88:c8:80:9c:e7:e7:f8:
         05:0b:a8:67:c4:4d:08:7b:f5:7f:48:c0:b6:bc:7b:cd:bb:0b:
         45:53:b4:ae:30:5f:ba:1d:e0:67:3b:e3:ca:d6:fb:c4:99:4e:
         b8:c2:18:be:3d:1a:f8:95:43:45:aa:6d:df:9d:05:7f:62:4a:
         bc:14:84:24:da:a1:95:7a:21:5f:a6:13:2b:00:2a:39:85:69:
         33:36:ad:4b:c6:1e:bf:9e:a9:75:3c:53:64:d7:d5:de:ad:04:
         b4:ab:76:1b:7a:4a:2e:80:ca:bc:a6:fc:6c:e5:33:19:17:9c:
         23:bf:15:ba:5b:2d:ca:0b:e3:cc:b2:fc:4b:1b:28:25:97:b3:
         4e:25:6b:1b:6e:6d:89:7c:f1:a4:a6:f1:40:ca:af:ac:bb:b7:
         4f:b5:30:4f:a9:dc:2f:b0:1c:f2:53:31:cc:66:7e:f0:cb:36:
         c7:f7:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:40 2026 by rpki-client