Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/48543F6A8E5111EC9893FC68C4F9AE02.roa
File:                     48543F6A8E5111EC9893FC68C4F9AE02.roa (raw, json)
Hash identifier:          ddqMyV3vSMQ4Pk5yaaceweZmrtBEQb48vHwfMJewG00=
Subject key identifier:   01:FF:12:A0:3C:D7:67:F5:D3:29:E6:9C:22:87:7C:BF:78:C7:32:A2
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F01
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/48543F6A8E5111EC9893FC68C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:20:38 +0000
ROA not before:           Thu 28 Aug 2025 14:57:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55309
IP address blocks:        103.235.208.0/22 maxlen: 24
                          112.109.88.0/21 maxlen: 24
                          182.237.20.0/22 maxlen: 24
                          2405:cb00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24321 (0x5f01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d36-bc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:2c:10:0b:ee:aa:4c:24:48:27:a4:8f:32:
                    f5:31:9b:e4:25:db:c7:89:a4:a8:5a:77:de:27:c8:
                    f4:38:81:a7:82:c0:90:ad:a0:d4:5f:eb:bc:c6:79:
                    d3:08:04:cd:f5:d8:24:3d:c3:e9:ab:da:a4:ef:8f:
                    4c:4c:5c:7c:ab:b8:58:08:a9:dc:1b:a0:70:13:39:
                    88:ca:ed:78:12:c2:ee:a2:1a:ac:32:a8:fc:55:bd:
                    43:a0:b9:3d:a7:1f:d4:c9:a7:ec:47:a2:1c:2b:21:
                    35:59:25:4c:71:b1:88:aa:9f:59:38:16:d6:8d:3f:
                    1e:ef:b7:67:0a:d7:a4:7a:e6:79:10:26:c5:31:5a:
                    31:1e:f1:e7:4a:7e:7f:14:e7:58:30:52:0d:92:bf:
                    df:dc:35:ca:53:fe:29:14:35:c9:24:72:a4:52:e9:
                    8e:0a:15:f2:d8:90:8b:51:41:c9:cf:31:bf:11:08:
                    8f:94:1e:3b:0e:7b:96:87:90:ed:dd:89:27:3c:26:
                    79:39:47:b2:13:d0:21:fc:dc:e2:a2:79:43:8f:a7:
                    0d:20:23:f5:67:d8:f3:0f:64:0f:fb:84:6f:75:43:
                    68:e7:1e:96:58:cf:00:29:2c:09:76:41:7e:0d:27:
                    32:af:a6:72:0e:95:41:b4:99:da:9f:41:80:f0:68:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:12:A0:3C:D7:67:F5:D3:29:E6:9C:22:87:7C:BF:78:C7:32:A2
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/48543F6A8E5111EC9893FC68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.208.0/22
                  112.109.88.0/21
                  182.237.20.0/22
                IPv6:
                  2405:cb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:e6:fd:45:6b:86:94:6c:7d:24:3c:88:66:70:84:0a:ce:
         6b:ad:5e:ea:05:93:49:f3:28:d2:69:30:74:9d:4f:86:23:3a:
         a1:98:e0:8d:9f:2b:f9:e0:b3:89:6f:70:c8:6a:aa:04:37:4f:
         60:d3:6d:6a:64:28:57:f0:4e:97:ba:db:46:11:b3:2d:89:d7:
         82:93:41:25:cb:ff:8f:3a:78:88:86:e9:32:0a:86:4e:a1:77:
         65:f2:f7:f0:5b:a1:53:8b:03:54:05:59:68:d8:a8:fa:57:d0:
         36:5b:0a:81:46:26:47:24:93:a1:13:d6:2f:d2:60:90:68:04:
         44:8b:a2:72:cc:23:0a:7b:35:1d:38:a8:d6:75:7b:50:7a:fe:
         56:05:68:37:35:e9:45:df:52:aa:71:9d:2b:fd:2c:d1:76:4c:
         27:ed:3d:51:65:f9:de:63:9b:6e:41:7e:68:d5:de:2d:9c:ed:
         56:97:eb:db:10:06:06:49:81:05:f0:47:c5:63:2d:20:00:74:
         ff:83:d1:f3:c3:9b:06:c9:ed:49:c7:e8:b3:77:16:fe:5b:c3:
         d3:e8:dc:e6:d9:d4:e8:7b:4e:c4:d0:3b:63:7a:03:dc:8b:64:
         56:ac:4e:41:62:ed:53:5d:5a:ce:2d:92:85:00:33:dc:eb:b3:
         bf:30:68:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:19 2026 by rpki-client