Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa
File:                     D0CA23541BC611F09FDAC047C4F9AE02.roa (raw, json)
Hash identifier:          0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=
Subject key identifier:   D8:6A:F8:06:A8:44:C0:86:39:95:9F:E1:DA:25:0E:20:29:C7:B0:40
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       A4
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:35:39 +0000
ROA not before:           Thu 17 Apr 2025 20:01:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     31287
IP address blocks:        103.170.192.0/23 maxlen: 24
                          2407:b6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Apr 17 20:01:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5922b-cdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:4d:41:8f:8c:e3:cb:a5:5b:72:2d:66:33:
                    6f:10:01:7a:b5:aa:06:ce:0a:00:9e:b4:53:98:57:
                    6c:2f:88:65:ea:f8:00:1d:09:87:e7:40:b0:a7:e4:
                    20:08:61:6e:7a:c6:0b:21:32:d0:fe:b5:73:4e:a1:
                    c0:7e:ec:74:25:0a:da:d1:8e:cd:17:71:4e:92:b9:
                    4d:4c:9e:73:2e:b3:6e:10:89:12:8f:a9:6c:b7:5e:
                    e4:07:09:af:3c:a3:89:b9:91:e4:69:9a:65:03:f8:
                    db:c1:b2:6d:3d:ed:b9:b2:51:53:ce:0b:cf:90:dc:
                    f4:cb:39:b8:a4:3c:32:c7:f0:d5:fe:cb:99:ef:38:
                    2a:da:a6:24:0e:2a:94:f0:5e:ee:9e:2d:74:00:40:
                    ae:22:5f:9e:50:4b:1a:52:b5:aa:7c:47:9e:82:87:
                    e2:e6:30:21:fc:24:bd:df:6e:8f:3d:95:74:47:db:
                    ef:90:9f:02:64:38:6f:98:9f:c8:44:1e:3d:1b:c1:
                    1a:bc:e5:ca:ff:ec:e6:c7:8a:21:fd:49:3a:cc:e1:
                    88:a9:03:7e:5a:9c:ad:b1:dc:ab:87:e1:d3:61:69:
                    c2:7c:d9:70:ff:50:8b:f4:a7:99:83:e0:93:22:3f:
                    32:77:c3:cf:47:c2:d9:b9:e8:f9:cc:70:8a:c3:01:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:F8:06:A8:44:C0:86:39:95:9F:E1:DA:25:0E:20:29:C7:B0:40
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.192.0/23
                IPv6:
                  2407:b6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:4a:a6:84:53:d8:5a:54:5f:b7:af:f0:09:e3:a1:30:f9:
         82:51:52:db:e7:4e:5a:d1:85:bf:10:de:f5:d8:e0:ee:0d:25:
         96:82:8f:40:a7:fc:a0:e4:69:48:5f:86:30:67:8f:31:65:b6:
         9f:31:71:e2:4a:ef:6e:c3:9a:70:7e:73:67:5b:70:b0:60:8e:
         63:61:a2:a0:f2:e8:c8:85:65:6f:be:ab:5a:4c:ce:82:a6:6c:
         33:9f:ee:4f:96:7a:a7:7a:d7:ad:a0:59:1f:15:1f:4a:7a:5a:
         47:17:f7:ea:4e:e1:d7:da:57:15:d9:24:36:3a:8e:1b:c6:e2:
         50:cd:42:fe:e5:d8:ec:cf:07:1c:eb:4b:fb:40:8e:91:44:5f:
         6c:36:6d:81:7b:dc:0e:de:b7:22:75:18:2b:87:c6:65:87:0d:
         b3:1e:0c:2e:13:18:a9:b7:82:ae:30:95:74:a9:c4:80:01:58:
         9d:3b:f2:13:0f:43:f4:2e:c3:46:9a:c1:3b:51:bf:b0:7e:8b:
         f8:78:8a:85:8f:67:b7:1b:2f:d7:7c:f6:67:21:09:0c:b4:b4:
         2d:3a:65:e7:7f:f8:c4:23:33:4f:4d:04:4a:8a:f7:aa:1d:e0:
         4e:11:02:a5:9a:0e:44:f1:ce:b9:db:82:9d:f6:37:04:a4:70:
         cf:11:3a:04
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMDExMTAvBgNVBAUTKERFRTVCOEJDODUwQTVCNkJDQjQ2RDdFM0I0Qzk3RThC
ODMyOEE3QTAwHhcNMjUwNDE3MjAwMTU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTIyYi1jZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr1tNQY+M48ulW3ItZjNvEAF6taoGzgoAnrRTmFdsL4hl6vgAHQmH50Cwp+Qg
CGFuesYLITLQ/rVzTqHAfux0JQra0Y7NF3FOkrlNTJ5zLrNuEIkSj6lst17kBwmv
PKOJuZHkaZplA/jbwbJtPe25slFTzgvPkNz0yzm4pDwyx/DV/suZ7zgq2qYkDiqU
8F7uni10AECuIl+eUEsaUrWqfEeegofi5jAh/CS9326PPZV0R9vvkJ8CZDhvmJ/I
RB49G8EavOXK/+zmx4oh/Uk6zOGIqQN+Wpytsdyrh+HTYWnCfNlw/1CL9KeZg+CT
Ij8yd8PPR8LZuej5zHCKwwG+/QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNhq+Aao
RMCGOZWf4dolDiApx7BAMB8GA1UdIwQYMBaAFN7luLyFCltry0bX47TJfouDKKeg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwMS80NUFBQTFFODFC
NTUxMUYwQTM5NUI4MTNDNEY5QUUwMi8zdVc0dklVS1cydkxSdGZqdE1sLWk0TW9w
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN1VzR2SVVLVzJ2TFJ0Zmp0TWwtaTRNb3A2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUyMDEvNDVBQUExRTgxQjU1MTFGMEEzOTVCODEzQzRGOUFFMDIvRDBDQTIzNTQx
QkM2MTFGMDlGREFDMDQ3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6rAMA0EAgACMAcDBQAkB7bAMA0GCSqGSIb3DQEBCwUAA4IBAQBX
3UqmhFPYWlRft6/wCeOhMPmCUVLb505a0YW/EN712ODuDSWWgo9Ap/yg5GlIX4Yw
Z48xZbafMXHiSu9uw5pwfnNnW3CwYI5jYaKg8ujIhWVvvqtaTM6Cpmwzn+5Plnqn
etetoFkfFR9KelpHF/fqTuHX2lcV2SQ2Oo4bxuJQzUL+5djszwcc60v7QI6RRF9s
Nm2Be9wO3rcidRgrh8Zlhw2zHgwuExipt4KuMJV0qcSAAVidO/ITD0P0LsNGmsE7
Ub+wfov4eIqFj2e3Gy/XfPZnIQkMtLQtOmXnf/jEIzNPTQRKiveqHeBOEQKlmg5E
8c6524Kd9jcEpHDPEToE
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:19:43 2026 by rpki-client