Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa
File:                     140A3D0CEECC11EF9AF7B312C4F9AE02.roa (raw, json)
Hash identifier:          pD6trR4TB9a2oN3BQQVjplBAWJn6NI2LFjigfYoaSo0=
Subject key identifier:   85:6D:21:F3:EE:01:FF:3F:BD:99:9F:6C:AB:69:69:3F:E3:B3:CE:A5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DCE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:15:30 +0000
ROA not before:           Thu 28 Aug 2025 14:52:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131423
IP address blocks:        42.96.16.0/20 maxlen: 24
                          45.119.212.0/22 maxlen: 24
                          103.2.224.0/22 maxlen: 24
                          103.48.84.0/22 maxlen: 24
                          103.48.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24014 (0x5dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c02-c4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:88:21:23:fa:8b:39:75:f9:73:91:7f:bb:
                    66:37:24:91:26:c9:7c:f3:16:4d:bf:0a:fc:b0:f6:
                    58:84:4f:69:41:1d:9b:ea:27:6a:30:67:dc:53:62:
                    3f:31:37:88:31:c3:fb:d4:14:2c:5e:b3:e8:26:07:
                    0b:8a:8b:b5:66:6a:a2:36:e7:bd:51:df:65:dc:73:
                    4a:88:18:d4:cc:a0:43:e3:1f:bc:76:93:b1:8d:87:
                    02:a6:95:84:ac:1b:3d:f2:c9:6b:7c:1f:72:f9:47:
                    e2:97:e6:cc:f5:5d:96:8d:e1:b8:34:2c:15:9c:d7:
                    79:a4:47:c6:c7:d1:a6:96:ee:da:02:c9:1c:93:3b:
                    9c:e7:1c:3e:cd:ce:0a:fa:fe:b6:b9:e5:cd:92:f8:
                    6f:b5:23:c1:7f:b0:39:2c:70:83:f6:1d:87:00:b1:
                    1a:ae:4a:93:77:bf:a5:4b:5d:61:4a:1f:c0:2d:3c:
                    64:5e:8c:18:46:9d:4d:29:df:17:61:63:01:86:8d:
                    5a:9d:b1:2d:b9:9b:c2:25:e8:7d:0f:43:34:2b:5b:
                    ac:23:e4:96:00:e6:db:cf:e9:7a:47:5b:c3:7f:5a:
                    3c:3d:7f:95:d9:79:55:70:1f:ed:1f:d3:da:40:87:
                    49:59:2d:af:ab:a8:22:62:05:e4:69:e5:c8:90:20:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6D:21:F3:EE:01:FF:3F:BD:99:9F:6C:AB:69:69:3F:E3:B3:CE:A5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.96.16.0/20
                  45.119.212.0/22
                  103.2.224.0/22
                  103.48.84.0/22
                  103.48.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:f0:8f:11:f6:9d:65:a2:79:26:7b:21:79:b6:4c:dc:19:
         14:f8:46:36:aa:68:bc:61:d4:d6:25:eb:f9:50:6b:09:0e:2a:
         c7:36:c8:ff:55:a6:ba:a3:a5:2a:68:52:e6:c2:32:d8:0b:54:
         e5:bc:6b:25:c3:c4:b5:4f:c5:a4:a1:4e:38:38:21:f5:82:48:
         ce:ff:3d:6c:ab:ee:22:d9:0d:c2:b6:56:a0:ac:47:e0:b9:c5:
         a2:d5:3f:83:f1:79:c2:e1:34:4b:d4:01:63:28:ab:8f:e8:c9:
         07:07:33:cd:0e:56:59:1b:f3:9f:e9:68:13:e1:5c:8c:58:8b:
         f4:66:0c:35:ab:c0:a2:67:71:aa:ea:e7:93:50:89:cf:92:1c:
         6a:8b:36:d2:e5:62:18:b4:1b:d9:34:4a:bf:28:9e:d6:71:b5:
         ec:7c:ea:7f:39:86:b5:26:f9:0b:af:79:43:67:fc:1e:0d:5c:
         9c:0d:51:8f:b2:ab:da:2f:8a:40:f5:25:79:f2:c8:5b:f5:3c:
         6d:e1:bd:cb:8b:39:ec:85:e5:07:a7:5d:5c:c1:68:6d:ea:3d:
         93:31:a8:04:31:e5:99:4e:be:75:20:2c:8f:3a:38:36:4a:79:
         b6:64:c3:6b:ea:3a:95:68:2f:1d:0c:13:0b:8c:90:2f:05:a3:
         c2:3c:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:26 2026 by rpki-client