Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
File:                     51644C34EFCC11EDA71A846BC4F9AE02.roa (raw, json)
Hash identifier:          MNL2xgNU4pI5bSb2AV/T7CY9NhGoy5m9LPK6N3TgpJo=
Subject key identifier:   B0:A9:E4:94:BD:FD:82:D7:57:FA:BB:0A:02:33:B7:69:C1:50:48:6F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E67
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:03 +0000
ROA not before:           Thu 28 Aug 2025 14:55:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150841
IP address blocks:        103.161.36.0/23 maxlen: 24
                          2001:df2:4d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24167 (0x5e67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c9b-c30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:31:4b:51:c7:35:84:6e:cb:5f:80:e5:66:
                    1b:cf:71:bd:f5:0e:77:6d:8e:7d:d0:3e:ac:65:ef:
                    dc:81:47:f2:d2:a0:34:46:22:9a:dd:31:15:c2:73:
                    35:07:8d:ed:8a:0e:5f:97:d3:1c:8a:9c:f6:ba:b7:
                    a2:c3:9e:a4:d1:db:04:b0:ab:3d:f4:67:d2:bb:7a:
                    f8:0c:51:1a:3c:c9:c9:d1:a5:96:49:0c:99:95:c2:
                    4a:bb:ff:94:2a:53:74:1c:3d:9f:6b:18:34:1c:07:
                    54:ac:a4:ed:7f:6b:a6:24:10:69:98:af:62:41:7c:
                    0c:24:59:09:58:ad:60:40:cc:ab:4d:94:4a:d5:42:
                    f5:37:df:d4:c6:d0:4c:17:6b:59:cc:ca:69:52:8d:
                    a8:c6:cd:ed:da:f5:f1:34:80:f9:a5:bb:53:40:4f:
                    c7:5a:b0:15:e5:39:7c:ac:34:da:48:37:56:50:52:
                    ca:b5:6f:fe:99:8c:dc:72:bb:e8:fc:c0:ff:92:c0:
                    e9:cf:17:8a:35:28:03:55:19:5f:c7:c2:7c:31:91:
                    22:62:76:2d:65:1d:2b:fc:f3:01:74:c6:64:4f:3d:
                    7b:56:21:5a:85:bf:42:9a:09:6a:83:99:93:e2:d1:
                    1f:d5:66:61:72:03:5d:71:d9:88:12:de:a5:2c:a9:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:E4:94:BD:FD:82:D7:57:FA:BB:0A:02:33:B7:69:C1:50:48:6F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.36.0/23
                IPv6:
                  2001:df2:4d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:94:d6:22:57:91:d4:67:fc:f1:ba:02:67:00:31:b3:9b:81:
         ed:aa:d6:b0:ae:e0:f9:d4:f4:52:31:8d:07:21:5b:ca:10:3d:
         71:67:d4:af:fb:fa:d6:a9:8e:a1:77:07:51:87:89:7e:7d:23:
         e5:38:fe:da:42:5b:0e:34:6a:b3:39:c5:39:4a:e2:cc:22:81:
         36:88:32:5a:a2:6f:6c:a6:8d:ca:64:b6:f1:37:3f:58:0a:a1:
         fb:62:d6:6d:76:69:c0:89:97:b4:df:1d:42:43:01:a9:7d:90:
         f9:37:ac:07:aa:ec:3c:75:45:06:ec:5d:7c:63:fb:f6:61:79:
         78:bf:36:0d:b8:25:05:b2:8a:85:95:6d:6e:fe:cf:1b:70:fd:
         1d:29:a4:89:9a:8c:f5:0b:40:af:e5:bf:54:6a:ad:5f:2c:86:
         c0:60:0f:33:24:0c:9a:7f:5f:13:4b:47:69:1e:8d:11:88:2f:
         a2:6d:1d:45:28:fb:d2:18:73:02:c2:ce:2d:9d:f5:68:1a:e3:
         8e:1f:81:fe:ca:22:f4:40:d8:e6:56:7b:8b:66:43:18:90:6f:
         71:88:90:8c:19:72:df:b0:04:cc:a3:4b:d4:d2:43:b0:53:0e:
         50:ba:34:aa:17:84:5c:0a:96:48:5d:7d:9f:7d:ed:a0:e1:ae:
         97:65:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:08 2026 by rpki-client