Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/C27BAE1E63B411EF9A87155DC4F9AE02.roa
File:                     C27BAE1E63B411EF9A87155DC4F9AE02.roa (raw, json)
Hash identifier:          k+syne/qwmIS8QA8cfkIQ/6o3usgazmP314zIWYqprk=
Subject key identifier:   A5:91:5F:2B:E1:77:28:91:04:FA:CE:79:59:C8:FF:CF:27:A4:B5:75
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       0173
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/C27BAE1E63B411EF9A87155DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:52:28 +0000
ROA not before:           Fri 23 May 2025 04:56:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55933
IP address blocks:        103.23.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: May 23 04:56:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a42c-ac5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:94:18:35:e4:d4:a6:1b:78:5d:dd:03:51:
                    26:cd:c2:1e:c0:76:c8:0b:56:2b:f1:c1:2d:4d:88:
                    3c:71:a2:af:04:59:45:14:cb:ac:d8:67:e6:3f:63:
                    04:33:bf:f8:92:7c:ab:01:69:1a:cd:9c:cf:44:0e:
                    d6:33:20:36:ab:3d:77:a8:43:22:a2:d7:7f:30:60:
                    9f:12:3c:28:28:f9:a8:cb:90:62:08:82:9d:ca:33:
                    1b:67:8f:30:79:8e:e8:4d:e8:cf:11:96:53:77:77:
                    9b:c8:18:e6:a3:24:c9:bb:02:f6:1c:a2:17:bf:5b:
                    6c:a6:a2:db:13:eb:49:eb:12:b0:07:1d:f8:31:90:
                    0d:de:bd:79:9d:55:53:52:0c:76:10:ad:61:27:81:
                    ea:93:3c:44:52:05:e4:19:44:44:9b:7e:d6:57:2b:
                    8e:69:5b:d7:6b:89:62:c3:07:28:a6:40:d4:d9:e8:
                    3a:cf:bc:66:99:ad:a6:23:fc:c7:30:3a:ff:9a:ba:
                    f9:47:de:ad:73:6c:e8:59:65:8c:1f:fa:8c:5d:a0:
                    e2:04:be:5e:8c:f8:0a:0e:50:3e:87:4a:e8:e1:f0:
                    52:e2:94:c9:97:aa:79:88:c5:15:04:5c:7f:14:93:
                    e8:a0:48:3a:00:a9:25:e8:88:c6:a5:e7:78:f5:9e:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:5F:2B:E1:77:28:91:04:FA:CE:79:59:C8:FF:CF:27:A4:B5:75
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/C27BAE1E63B411EF9A87155DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:4f:5b:17:05:1a:fb:3b:f8:c5:7f:df:35:cc:90:91:55:
         9f:f8:74:be:c2:b8:be:3f:25:1b:45:60:fb:7b:26:3e:5d:70:
         4e:f9:0c:78:25:a7:ac:6b:c9:35:9e:fc:f0:5d:3c:7a:9b:7a:
         64:2a:a2:b4:db:5d:5d:fb:8a:39:a6:5c:38:ea:ca:bc:fc:52:
         3a:04:3d:a4:b7:5e:10:14:73:e8:7d:77:69:b2:2b:68:19:58:
         9f:e3:7a:f7:69:83:88:4f:66:9c:b7:ae:0d:64:f1:63:cc:3a:
         b3:d0:26:28:27:9e:ef:da:51:77:88:4a:83:9b:9d:76:c8:82:
         aa:e4:d4:0d:45:fa:55:9f:1e:54:c1:3f:18:94:4b:3b:c2:a8:
         d6:89:bf:6b:47:b6:1f:34:7e:82:3d:85:d4:c2:20:13:08:e4:
         72:47:e8:cb:38:8c:86:8e:dc:75:0b:d1:7d:44:95:61:ad:be:
         a3:df:fb:7d:69:44:a1:fd:df:ab:fd:0f:6a:23:57:1f:1f:a7:
         79:17:aa:8d:61:13:e5:cb:48:6a:ee:e5:46:9c:f7:31:ec:38:
         8d:55:6a:a9:57:6e:f2:b0:e5:30:a7:97:5b:e2:da:d8:86:62:
         bf:e3:a8:36:6c:81:94:88:80:ec:77:77:a8:50:e7:7d:75:28:
         75:7e:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:22:46 2026 by rpki-client