Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa
File:                     C5BEFEE204AC11F1AA081403413D8C67.roa (raw, json)
Hash identifier:          7ZzB1zIsUdysWS6DCJBltedFFgcyCRwU6dpnMLNOte0=
Subject key identifier:   89:0B:F8:66:D8:F5:CA:74:7F:3F:52:C3:6E:BD:DE:B8:81:02:3D:10
Certificate issuer:       /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial:       02AB
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa
Signing time:             Sun 01 Mar 2026 14:28:54 +0000
ROA not before:           Sun 08 Feb 2026 05:12:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        103.232.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
                          rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAEAF, serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
        Validity
            Not Before: Feb  8 05:12:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44d26-0660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:a8:43:ae:ff:b9:5d:c5:80:f5:09:28:b1:
                    92:93:eb:cc:df:56:24:90:0a:81:fe:f7:cb:ff:b3:
                    6a:cc:03:01:f5:dd:a6:28:09:7c:a3:d1:ce:f7:d8:
                    11:15:43:a5:15:09:52:25:01:2c:96:69:e0:33:95:
                    13:03:ef:a8:72:87:e9:a4:de:6c:44:55:a7:7e:e3:
                    a8:df:42:1c:99:33:aa:49:ef:01:94:8f:56:53:7f:
                    80:49:a5:40:9a:f2:3f:df:7b:7d:66:f3:29:6b:68:
                    9b:d8:e6:74:74:28:ff:d8:e0:ae:62:86:9f:44:76:
                    70:34:85:a7:b3:4d:27:13:84:36:46:72:42:20:d4:
                    1d:ae:9f:31:7b:59:89:e8:bd:20:87:c3:6e:ce:84:
                    c4:d0:87:fc:86:14:b5:75:6e:90:7a:6c:11:84:92:
                    81:ff:51:43:94:9b:79:e3:79:ed:2c:0a:ae:02:9d:
                    5a:9d:4e:29:da:5e:36:3e:e6:b8:f3:14:18:ac:e8:
                    8a:e6:a4:56:2c:87:80:94:e8:84:bc:38:51:af:90:
                    51:7c:d7:23:d6:ca:69:77:d9:7c:6a:26:ad:e5:05:
                    95:54:05:6d:d4:88:ea:42:d2:c3:32:63:93:82:02:
                    dd:2d:e2:36:af:7c:e2:0d:7f:58:ff:b6:6d:ed:4c:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:F8:66:D8:F5:CA:74:7F:3F:52:C3:6E:BD:DE:B8:81:02:3D:10
            X509v3 Authority Key Identifier:
                keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:73:10:63:a9:64:e0:1f:16:26:7f:17:de:d7:0d:81:88:
         c1:f1:d4:76:05:fe:69:a6:52:f3:01:71:26:3f:53:66:9d:aa:
         7d:71:29:39:f7:6c:f9:84:5f:6c:37:ea:82:8b:07:d4:0d:36:
         f8:4e:99:5b:a8:21:f4:7d:6b:eb:87:25:1b:ff:e8:4b:ee:b9:
         d3:ca:5e:d2:a5:75:cd:50:b0:0f:f8:94:b0:c3:45:a5:d9:f5:
         18:5a:7a:d1:bb:69:99:2e:c1:cf:99:12:5e:21:79:20:1d:ac:
         a4:72:24:ba:b1:0a:f9:f0:f3:b2:be:4e:97:a7:a2:95:7a:9e:
         b8:d2:1d:4f:82:40:19:c3:c8:96:07:dd:84:e5:7b:2b:13:c9:
         c8:52:72:86:3f:56:13:b0:37:e8:ad:51:60:3a:51:cc:86:2d:
         38:fd:8e:49:bf:da:53:b8:f9:f7:d0:6d:da:50:be:a2:e9:fe:
         65:43:05:5f:01:bd:7d:a4:09:df:89:71:ee:8a:51:9f:24:cb:
         7d:06:b7:d6:d0:a0:aa:63:cc:c7:b5:4c:2e:5a:3d:b9:75:96:
         f4:f8:53:3c:ff:b1:e2:50:4f:29:86:2b:c2:8e:10:c5:5c:ba:
         2a:c7:0e:48:58:0a:85:46:83:6b:a9:f7:27:05:fa:8d:3b:e0:
         03:29:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:55 2026 by rpki-client