Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa
File:                     7FFB419E3CD711EEBE32D031C4F9AE02.roa (raw, json)
Hash identifier:          rwWbA7ATCbPv4rvh0V3mG4hL9osBZbTHMwHOxczHn9Q=
Subject key identifier:   10:46:24:2F:10:FE:88:11:1D:8E:4B:49:CA:BC:85:1D:42:B3:10:E3
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E6A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:06 +0000
ROA not before:           Thu 28 Aug 2025 14:55:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150847
IP address blocks:        103.209.188.0/23 maxlen: 23
                          2401:520::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24170 (0x5e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:16 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c9e-fedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:8d:2e:14:94:46:f6:40:0e:be:64:da:ae:
                    d6:73:5b:59:f8:13:b3:15:cd:b3:74:39:a5:14:f1:
                    23:11:f8:ec:d4:be:b0:9e:34:97:ce:27:f4:d2:9f:
                    ee:ba:f1:c9:04:e9:7d:eb:e3:4b:66:03:7b:20:80:
                    8b:2b:70:b2:85:a6:0b:92:e4:96:5d:e0:c6:29:7a:
                    ba:90:89:84:58:a2:86:28:92:0c:de:47:b6:e3:43:
                    9b:e7:de:32:8c:5a:e8:75:ae:52:ff:dd:29:89:f8:
                    d6:8f:9c:e9:75:05:a9:44:73:4e:03:ab:cb:c9:98:
                    1b:66:d8:a5:90:a5:06:a1:17:dd:98:75:e1:ce:d3:
                    d1:d5:5c:94:38:0d:ef:fb:01:76:ac:1f:86:d9:b8:
                    dd:9b:1a:a7:16:e9:16:5b:4c:16:8d:23:da:bf:86:
                    66:fc:9f:c2:7c:08:54:99:34:c8:09:51:85:f8:6f:
                    7b:12:a4:2a:ba:82:2c:0c:21:e1:87:25:4b:3c:7c:
                    d7:8b:ec:82:5d:ca:22:3a:1d:bb:5c:ea:d3:4d:68:
                    9e:83:64:c4:32:8e:c3:30:4e:f6:3b:d3:03:6e:79:
                    fe:8b:1e:77:af:08:33:70:4c:3b:fa:31:7b:96:b6:
                    ff:de:be:1a:4f:99:d2:61:46:aa:a1:3e:91:65:9f:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:46:24:2F:10:FE:88:11:1D:8E:4B:49:CA:BC:85:1D:42:B3:10:E3
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.188.0/23
                IPv6:
                  2401:520::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:99:a3:f9:2a:a3:73:ad:1f:84:3c:da:6b:9e:a4:4d:94:
         8d:be:7b:3b:b0:1d:66:38:dd:a6:38:a7:89:df:8b:e1:3a:5f:
         37:b5:c2:7e:17:67:30:14:39:39:96:f7:12:aa:3a:b4:d2:45:
         3e:0e:6d:2c:45:b7:65:d4:f1:96:42:97:01:e6:b0:5e:2f:d3:
         cb:f6:b5:ac:71:98:7b:1a:ce:50:28:95:5c:9f:46:2b:d3:68:
         6d:48:fd:40:ce:5b:f9:3e:f2:96:fa:5f:f4:b6:d4:f9:3d:78:
         89:7b:5a:53:4d:c5:e7:79:fc:08:27:60:6d:31:8c:1f:2b:19:
         a8:46:53:2c:11:cc:f4:24:31:7f:53:95:75:25:c6:03:e7:be:
         a1:47:7b:b9:ca:12:ce:98:7c:20:ce:81:2a:ed:b7:c5:c3:3b:
         96:b8:3d:c8:d3:aa:f6:27:b0:44:cf:75:7e:09:eb:1b:0b:9a:
         10:e4:e0:c1:7c:d1:18:31:8c:72:8c:d9:45:67:cf:5f:42:86:
         48:38:71:08:00:1d:6f:71:54:ab:a0:98:28:41:2f:9b:b8:ed:
         e2:24:2f:46:26:63:2b:af:50:18:a7:f9:aa:49:1a:a3:1b:a5:
         1a:18:02:fe:42:45:98:4d:6c:f8:ad:f3:29:28:22:65:44:d1:
         d3:50:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:25 2026 by rpki-client