Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24A1B3C61BE111EEB00B7263C4F9AE02.roa
File:                     24A1B3C61BE111EEB00B7263C4F9AE02.roa (raw, json)
Hash identifier:          ftM/y0pAbSnJ/JzSvH6ALJvTDNrZeexBt7NQGjMgUBk=
Subject key identifier:   54:1E:36:9C:9B:9F:85:46:05:0E:69:FB:4D:2F:EF:59:B4:08:14:C1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E6C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24A1B3C61BE111EEB00B7263C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:08 +0000
ROA not before:           Thu 28 Aug 2025 14:55:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150850
IP address blocks:        103.164.226.0/23 maxlen: 23
                          2401:ea0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24172 (0x5e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60ca0-7572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:df:97:6e:27:5b:60:b2:1f:14:1e:9d:fb:
                    7d:e6:01:71:71:9f:e8:38:84:77:4b:f9:ba:0a:85:
                    1d:dd:20:e7:91:24:49:6b:68:b8:f7:1f:9b:30:36:
                    86:c7:bc:d7:8e:a9:b2:75:33:81:74:38:a6:10:77:
                    37:43:69:68:6d:5c:2f:85:c4:d0:b0:63:6d:15:93:
                    cc:0f:72:76:ff:6a:25:75:98:1b:7a:6f:1d:15:c8:
                    7f:ec:3e:e8:19:9a:0c:da:47:49:f8:a6:14:16:17:
                    86:f1:14:58:bc:9b:d2:c5:6c:08:89:35:57:1f:97:
                    e5:59:64:d7:8d:9c:10:c8:8a:04:1f:95:95:ec:e0:
                    0b:75:d3:c9:e5:85:70:56:67:ff:5a:55:f4:67:d4:
                    2d:e9:94:ad:13:0e:d5:88:ea:3d:c7:c3:fd:ad:4b:
                    8b:6a:29:df:61:a8:91:91:2e:ef:6e:39:29:6c:9f:
                    de:eb:79:7e:3f:6c:ee:c9:54:ab:a9:a1:da:c7:45:
                    de:46:3d:16:f9:10:a5:9b:68:b6:3e:15:4d:d0:d3:
                    2c:51:7c:9a:5f:6f:aa:6f:8c:b5:3c:13:e0:fd:5b:
                    48:d9:53:62:be:17:2d:4e:dc:04:56:27:3d:f6:56:
                    fb:06:fd:8c:80:6c:d9:b1:48:36:24:fe:a4:f2:3f:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:36:9C:9B:9F:85:46:05:0E:69:FB:4D:2F:EF:59:B4:08:14:C1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24A1B3C61BE111EEB00B7263C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.226.0/23
                IPv6:
                  2401:ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:3a:6f:33:e6:03:3f:5c:6b:ae:2b:97:f3:7f:c9:44:e0:
         98:e5:0c:22:c5:ea:0b:94:7b:af:29:d8:2a:48:37:99:96:7f:
         08:04:bb:ae:0b:de:83:9d:59:9b:ca:3a:ec:4a:67:47:c1:fa:
         78:88:5e:c5:67:05:ea:41:e4:68:db:ee:6a:8b:69:6b:b2:c3:
         01:37:eb:a4:a3:6a:b1:43:b0:57:74:45:58:71:1b:0b:ed:c8:
         7d:2e:6b:a1:c1:76:44:73:dc:c2:a7:c2:1b:ad:8f:57:a1:54:
         bd:3c:37:a1:db:0b:47:b0:c7:6b:8f:45:56:69:f0:e9:6c:88:
         dc:0c:b3:de:1d:a7:7f:35:9c:da:97:41:d2:72:f4:38:e9:39:
         7f:4a:be:f0:57:9d:d5:54:6a:9b:23:1d:f4:5f:88:39:b5:86:
         f4:98:54:fe:ed:0e:f7:d1:1e:df:b5:60:6a:96:50:c4:c3:f3:
         f9:c8:87:4a:16:3d:96:a4:63:71:6d:31:95:0a:36:f2:f1:bb:
         1f:bc:a4:63:34:f0:70:fa:2a:17:97:c1:07:03:49:b5:fe:0d:
         dd:af:23:d0:33:cd:5b:b2:b8:81:6a:30:7f:81:8d:89:b4:1f:
         e1:87:46:6d:c9:5a:6a:c0:56:41:1a:c4:eb:de:26:fa:e2:12:
         05:b2:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:59 2026 by rpki-client