Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
File:                     5D31D17ACE9811EE9392467BC4F9AE02.roa (raw, json)
Hash identifier:          yiiAX2llQ6hAEkQaEwfWJJMvBw/dD+dotQQ+ZmoUPZY=
Subject key identifier:   F3:F1:D6:3F:C7:5D:F0:0D:4F:F0:78:34:2D:68:4C:F4:D0:AA:6A:30
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01A3
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:39:11 +0000
ROA not before:           Thu 01 May 2025 04:41:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        103.197.54.0/24 maxlen: 24
                          2407:9d00:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: May  1 04:41:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a584ef-5b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:89:1e:e5:0e:bd:29:cf:33:4c:08:46:5c:
                    52:1a:8b:12:4c:49:e3:73:6d:ac:ea:12:a2:73:49:
                    4c:a1:45:b9:a6:5b:6b:61:fa:a5:01:10:0d:95:76:
                    22:13:b2:9e:d0:55:a3:4b:9d:e8:3c:07:c9:a9:0f:
                    e2:8f:e3:2d:df:72:96:e2:c0:26:8b:9a:2b:85:23:
                    ce:7e:c0:52:7b:bc:1e:65:7f:f3:ae:df:e5:d0:35:
                    a3:d0:a1:48:94:c8:6a:16:23:6f:94:e5:da:8c:89:
                    48:b5:50:13:aa:34:fa:8c:b1:7d:12:7a:8f:9c:0e:
                    67:9c:90:91:bf:88:70:57:a6:5a:03:ab:0b:54:de:
                    f0:9f:07:58:14:40:01:18:38:d8:d2:0c:fa:21:7b:
                    bf:46:70:e1:8b:99:d9:5c:4d:f7:aa:87:f4:b4:cf:
                    e6:d1:0d:3b:9f:a1:8a:c1:6d:ae:57:39:69:9d:d3:
                    7a:a2:d6:a9:25:11:3f:ec:3b:df:8d:33:9c:35:25:
                    7f:e5:e4:59:9f:55:e6:48:e9:1d:b8:4d:63:3b:83:
                    a6:1f:56:20:8f:37:be:59:d4:bc:ae:da:50:8b:64:
                    0f:aa:54:6e:e3:75:62:18:36:4e:a3:47:1a:11:ca:
                    63:fa:e8:ac:8c:7e:e2:3f:05:1c:1d:94:07:08:ed:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:D6:3F:C7:5D:F0:0D:4F:F0:78:34:2D:68:4C:F4:D0:AA:6A:30
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.54.0/24
                IPv6:
                  2407:9d00:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:f9:b3:e2:cc:6b:37:04:30:ce:b7:ac:80:a0:6b:ca:9f:
         50:1a:c6:3d:13:6f:88:73:dd:37:cc:d2:ab:9c:d3:45:dd:03:
         22:e4:06:31:40:78:e4:8d:32:42:96:b7:39:f6:01:67:94:47:
         35:37:99:75:bb:10:ad:e4:2e:3c:9d:e2:76:9d:d8:6c:16:09:
         9f:5d:de:fc:8d:99:70:20:13:30:13:cc:70:ec:24:ba:42:4c:
         ce:f1:54:89:9f:2a:15:1f:2a:b9:23:e3:56:8a:38:cb:d8:63:
         b9:dc:35:bd:de:94:b5:cf:af:6f:bc:29:01:72:08:0f:e6:97:
         5d:33:51:7c:14:b6:22:e6:e5:d1:83:4b:55:22:b9:f0:ea:c1:
         60:96:5b:58:33:9d:14:21:4e:35:44:84:8c:66:6f:4a:07:6f:
         eb:44:89:44:b2:65:6f:ff:56:c2:bf:c2:07:36:9b:21:98:24:
         28:f6:68:44:39:c0:a6:d0:3b:72:6f:c1:5a:d6:16:fc:ee:88:
         d5:78:b4:43:3e:01:50:63:58:fe:4b:e9:20:20:c9:82:69:d2:
         69:43:8e:8f:65:40:78:9d:91:13:f6:b7:d2:0c:42:61:2c:44:
         0d:15:eb:5f:35:96:f4:db:b0:d5:9f:43:c6:d3:71:89:1e:05:
         17:cd:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:37 2026 by rpki-client