Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa
File:                     E5DA330E9FF411EABA55D530C4F9AE02.roa (raw, json)
Hash identifier:          z6vemY7Be4fulCc5xmPy1Z8Av88qjaBaM/88+DS+zPk=
Subject key identifier:   2D:13:E5:8C:FD:41:3B:E8:45:D4:5A:93:43:CA:71:87:0B:5C:C3:72
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       09BD
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:20:05 +0000
ROA not before:           Sat 10 May 2025 20:06:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     28959
IP address blocks:        103.138.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493 (0x9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: May 10 20:06:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42ef5-e9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:ec:56:83:ee:c5:5b:65:75:a6:a0:64:4e:
                    3b:e7:89:61:b2:b7:36:41:e1:68:8a:c4:91:ad:38:
                    aa:f1:69:91:41:4a:dc:8e:10:b9:e2:3d:45:5c:23:
                    7f:65:b9:f9:78:9e:b4:68:10:72:17:4e:22:2d:67:
                    6d:e0:4c:45:7f:01:be:4c:68:7c:2d:07:5a:22:fe:
                    18:c7:4e:72:db:25:dd:f2:2f:e7:98:dc:c9:03:95:
                    77:c4:a5:43:23:27:bd:01:8c:b1:c4:78:a3:d7:36:
                    5f:27:4a:22:a9:32:dd:60:66:56:1e:12:92:6e:0b:
                    1b:b1:2e:2b:df:93:3b:34:73:1c:23:6d:9b:14:44:
                    d7:ef:28:a9:88:c8:70:5a:5a:d0:8c:fb:b2:f7:a3:
                    43:fb:d2:f5:be:ea:2d:cb:ee:b1:e4:5d:ca:9f:34:
                    c3:66:6e:ec:e8:92:d7:bf:16:ad:32:5c:a9:0b:f1:
                    60:81:46:de:ab:0b:fa:3a:72:1a:72:d4:3f:9e:75:
                    f4:0b:2d:e7:83:b6:4e:0d:a9:6e:1c:97:1e:b7:15:
                    66:16:33:dd:fe:4d:92:2a:ed:0f:a1:81:12:5b:0c:
                    72:53:9c:29:12:ae:06:99:d9:98:19:12:79:d8:76:
                    8e:15:e0:07:12:d2:92:20:0b:66:b0:48:33:08:3a:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:E5:8C:FD:41:3B:E8:45:D4:5A:93:43:CA:71:87:0B:5C:C3:72
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d9:3b:81:05:de:fc:9e:e9:e2:8e:2c:5e:8c:90:b4:af:f1:
         ae:89:bc:fa:a0:ae:24:b0:63:af:76:81:d3:9e:c2:84:ff:79:
         a8:e2:41:60:d3:11:e2:a4:b8:f6:32:cc:75:83:54:eb:9d:99:
         b6:89:9d:66:8f:51:6b:37:82:28:9e:ef:60:42:44:ca:fd:dd:
         8c:34:36:64:04:a0:6c:21:f6:a3:47:22:c4:c2:25:1c:ae:94:
         97:8d:6a:06:c6:6e:08:ac:15:88:29:63:28:fe:9e:d4:4b:e0:
         04:6b:d5:b6:14:1b:9b:2a:53:43:9d:85:55:6e:7b:38:8f:ae:
         9f:b7:09:19:51:9e:3f:a7:83:8b:6c:6d:75:d1:10:7b:27:b7:
         34:3f:d3:00:a1:89:34:bc:06:5e:3d:17:04:5a:30:a5:f0:96:
         8b:4f:71:d3:ad:e9:ff:86:a9:5b:ad:17:69:68:35:a9:fd:a1:
         18:43:76:96:e0:13:e6:f1:f6:f4:e4:79:f8:59:ed:b7:5f:dd:
         91:04:7d:d3:46:eb:9c:15:67:33:e0:19:86:67:04:54:18:bb:
         9d:66:20:8a:de:0b:5a:90:c5:e2:28:e7:e0:2a:a9:09:8b:a8:
         cf:a9:54:74:5d:d4:2c:d8:88:eb:d2:1a:0d:0c:f7:64:e2:82:
         fb:de:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:51 2026 by rpki-client