Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa
File:                     B5A31A8E660F11EB8A1DB351C4F9AE02.roa (raw, json)
Hash identifier:          I7lP6s0qx4CBXzMhVXv9t8IMMksM2431h+A1UYoG180=
Subject key identifier:   5E:B8:14:B5:A1:9D:F6:05:21:28:EE:F7:CB:A2:9E:75:96:66:A0:2A
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0B15
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:47 +0000
ROA not before:           Mon 12 May 2025 19:35:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        103.149.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl
                          rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 19:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
        Validity
            Not Before: May 12 19:35:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42727-82f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:9a:6d:52:de:aa:25:43:38:20:84:3c:2d:
                    97:23:95:ff:b9:f4:01:1a:94:09:62:27:a9:b0:83:
                    03:10:a9:f1:93:ad:86:b3:60:50:41:ce:db:de:50:
                    2a:ad:1c:f4:31:05:0e:92:a0:6a:e0:84:a1:f6:60:
                    d3:02:70:e4:81:91:02:11:b0:73:49:f6:4e:26:a3:
                    1e:34:0c:49:20:de:89:95:1f:b3:7b:fe:53:77:6b:
                    51:9e:4b:12:aa:f1:d1:6c:d2:d2:96:b9:37:54:d5:
                    1c:fe:28:40:ce:c6:10:da:7b:f2:09:9b:5e:ab:1f:
                    dc:a3:a1:31:a0:d8:13:ca:ab:d0:1f:d8:98:14:7a:
                    1d:43:b0:ac:9b:b1:60:11:74:29:14:30:4e:84:f1:
                    18:0f:44:57:37:2c:58:63:96:f8:ac:60:38:d7:d3:
                    bd:52:b0:4c:31:ff:99:d0:5c:4a:d4:28:be:f1:86:
                    b2:d7:de:da:60:70:a6:de:6d:17:ab:97:52:7d:ac:
                    53:9c:a9:02:c6:37:db:a3:d4:92:97:d0:fa:fe:91:
                    ec:aa:0e:0b:52:4c:5d:da:a9:e6:64:83:f2:e6:67:
                    8e:e2:23:77:6a:31:b4:d1:f3:4f:f1:92:1e:5e:fd:
                    2f:31:71:56:76:2a:c8:35:71:5b:b5:86:71:e1:fd:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B8:14:B5:A1:9D:F6:05:21:28:EE:F7:CB:A2:9E:75:96:66:A0:2A
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:22:a5:d2:72:7b:53:24:00:ad:9d:29:b0:37:40:28:3a:
         d9:bb:9a:60:bf:07:7a:1f:b1:f3:f3:5f:71:46:d7:c3:65:de:
         13:98:04:08:14:5f:2c:90:cb:e3:69:2c:74:89:ac:3f:6f:36:
         22:66:ee:a9:5d:cb:22:5b:62:9e:e7:56:2a:e8:ac:69:43:c1:
         fd:69:ae:09:ed:05:c3:11:8a:65:cb:8c:dd:6c:76:19:06:57:
         97:49:0c:b3:2b:cd:a3:7a:63:79:85:99:93:cf:63:4a:af:3d:
         44:73:b6:23:f7:47:39:54:1e:4b:8d:e0:88:60:27:19:b5:f9:
         07:4c:34:b7:8e:86:75:ad:bc:6f:9d:5e:df:dd:af:93:c9:cf:
         53:b2:11:1a:4a:65:76:75:65:65:24:73:ee:5d:35:00:8c:84:
         83:1a:4f:18:59:6f:ab:b0:18:41:88:f7:34:f2:1d:5f:21:92:
         c7:32:8d:28:58:da:51:58:ea:06:37:b0:c2:15:81:47:10:f9:
         4a:ab:56:76:69:a8:66:72:7d:f5:28:c5:a6:e5:05:4a:f6:f5:
         7f:e0:fa:13:ef:0f:a3:f5:93:b8:a7:c6:2c:14:cd:7d:b7:16:
         b8:d6:56:e1:97:41:09:77:30:96:3f:06:32:cb:d1:17:23:25:
         04:a8:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:23:55 2026 by rpki-client