Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C095928345C11F0A2D20F41C4F9AE02.roa
File:                     5C095928345C11F0A2D20F41C4F9AE02.roa (raw, json)
Hash identifier:          zG8p/Qfujto7PYydOiErR19gC8A6Jv19EIK7086I5Kg=
Subject key identifier:   E4:D8:88:EB:5A:B1:F0:3C:C4:BE:08:33:4B:B3:EB:3C:E7:EA:82:9A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E28
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C095928345C11F0A2D20F41C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:17:00 +0000
ROA not before:           Thu 28 Aug 2025 14:54:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140817
IP address blocks:        103.20.102.0/23 maxlen: 23
                          2400:6f60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24104 (0x5e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c5c-ca27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:1a:09:b8:98:ef:20:10:1e:05:3f:14:a5:
                    2c:55:97:55:29:59:e6:e9:49:7d:ec:ca:b4:e3:9d:
                    70:d5:30:a9:ed:33:db:97:96:b9:b9:1a:16:01:f7:
                    d0:1f:5b:78:cc:c8:71:38:86:15:7c:a4:f0:e3:e5:
                    4b:a0:65:9b:50:ae:1a:16:78:00:a9:fc:a5:eb:97:
                    86:20:ad:59:ed:aa:89:de:d4:e1:5c:08:b1:64:ba:
                    26:dc:f9:43:cd:bd:37:88:b1:c6:d2:fd:8f:20:0b:
                    37:e3:e0:91:70:68:0e:28:da:87:cb:bb:22:5d:8b:
                    23:bc:72:e7:4c:fd:76:dd:0a:99:33:ed:bb:c6:4a:
                    4d:8f:a8:ed:94:9d:c4:2b:cd:6d:86:03:b1:f1:23:
                    3a:87:a7:08:c1:e5:84:43:39:47:74:b6:f5:b6:e8:
                    8d:98:cf:9d:ee:54:fd:45:a4:2a:0e:55:26:c8:11:
                    ce:7c:0b:ed:d0:bf:2c:32:0e:76:25:b3:e8:b8:3a:
                    d2:45:a9:df:d8:33:da:2d:22:a2:ef:cd:b6:ae:38:
                    84:f5:73:d9:60:c7:df:96:f2:ef:ff:90:fb:62:13:
                    c3:fa:60:ef:92:62:c9:2a:20:b2:35:1b:6b:c6:61:
                    30:da:1c:0d:26:89:38:d9:5a:f3:af:90:45:b2:4b:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D8:88:EB:5A:B1:F0:3C:C4:BE:08:33:4B:B3:EB:3C:E7:EA:82:9A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C095928345C11F0A2D20F41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.102.0/23
                IPv6:
                  2400:6f60::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:b7:23:c3:5e:1e:cd:90:5f:81:cd:2d:3f:7d:3c:b0:a6:
         b8:b3:9d:d2:7d:47:38:f6:68:60:f7:e1:6d:b4:63:36:bc:34:
         85:e8:39:56:28:0c:a3:41:8f:69:53:ac:7f:92:97:8a:91:49:
         b3:af:7b:8a:73:ed:f6:f3:5a:49:fb:96:f9:a3:d6:99:5f:9c:
         f9:fe:7c:57:38:88:64:24:d2:44:d0:16:b8:93:5c:81:eb:cf:
         d6:21:c6:98:9b:0a:e1:52:ad:ef:07:cf:a2:03:c1:ed:78:8d:
         59:8e:11:d2:5a:d4:8b:ff:88:c9:54:a0:e7:9e:78:ef:17:3e:
         15:5f:d3:d9:25:14:9b:89:66:86:6c:19:f1:c9:38:49:b7:cf:
         f7:81:5f:a6:9c:5d:5a:49:83:4d:d6:dd:5d:2d:07:5c:42:4f:
         04:d4:d6:29:2c:7e:b5:6a:05:44:a0:58:fd:85:b5:3e:58:0d:
         68:2e:21:bf:c0:54:50:c8:60:4a:20:2b:09:f9:31:a8:18:33:
         f9:fe:79:cc:95:c6:b4:87:c1:a1:a3:dd:20:ee:3d:b2:02:71:
         fe:af:ca:95:df:f0:1c:55:df:ce:12:37:85:90:52:d1:be:e4:
         fb:14:12:be:b3:a7:13:f1:0f:1e:c1:3a:52:a1:20:65:c5:1e:
         9c:4d:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:21 2026 by rpki-client