Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A546D454773A11ECA988F037C4F9AE02.roa
File:                     A546D454773A11ECA988F037C4F9AE02.roa (raw, json)
Hash identifier:          qQ5/XlWzQNOKgYR6Z+OXGd9e/PKuDZ+o1pnBaJUx+GM=
Subject key identifier:   7B:2A:7C:AB:9F:17:19:37:86:58:AE:5F:4B:FE:9C:F5:43:FC:1B:49
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DE6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A546D454773A11ECA988F037C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:15:55 +0000
ROA not before:           Thu 28 Aug 2025 14:53:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135927
IP address blocks:        103.101.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24038 (0x5de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c1a-a921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:0f:13:63:a4:43:db:61:e1:13:94:ac:1e:
                    b8:2a:8c:b1:5a:12:85:db:fc:58:a6:fb:a6:04:50:
                    92:89:bc:a7:0b:02:c8:d3:96:ee:6b:5f:d3:8a:b1:
                    7e:8f:51:69:f9:72:eb:ac:d8:c0:75:a3:b7:15:42:
                    b6:54:e8:b9:94:b8:e9:4f:45:97:09:82:e1:f7:b8:
                    2a:33:42:cd:3d:e2:a7:b1:2c:21:7d:ad:53:18:82:
                    a1:17:41:35:60:59:0d:b8:f6:7e:0c:b5:f6:14:02:
                    a9:e0:7a:0a:f8:42:c5:3e:b8:8b:03:20:0f:3e:5e:
                    38:1d:79:66:1c:b0:90:d1:1c:73:3b:80:d7:2f:31:
                    93:a1:0c:f8:93:72:13:81:04:2a:bb:ab:b2:fb:d4:
                    39:c9:77:ce:d1:06:21:6a:22:92:73:f4:a9:74:09:
                    63:dd:e9:24:91:9e:2a:92:cc:15:6c:35:01:e0:aa:
                    56:3e:9b:90:5e:72:d0:d5:c8:69:4f:26:25:c6:44:
                    a5:d6:3b:4d:7d:e4:94:02:0b:62:76:1e:34:a5:64:
                    35:42:0a:9b:d9:09:27:04:cf:9d:da:bb:55:99:6f:
                    0b:b4:ca:07:e0:7c:9c:6c:a5:d7:e3:59:6f:41:86:
                    0a:3b:64:3b:18:39:cb:f7:b1:4c:bb:f0:f3:39:e7:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:7C:AB:9F:17:19:37:86:58:AE:5F:4B:FE:9C:F5:43:FC:1B:49
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A546D454773A11ECA988F037C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:1a:b8:30:bb:97:62:ba:2c:cc:04:a9:f8:1a:68:58:2e:
         b7:36:d4:20:92:c3:e8:84:5c:80:3e:db:06:64:ce:ea:1e:96:
         17:71:ea:1c:fa:5a:81:ab:6e:8c:2a:e6:1f:c2:47:7b:e2:63:
         80:bb:a9:7d:f9:49:18:cc:69:cc:d8:f6:83:71:9e:ea:65:84:
         ef:92:15:f9:03:bf:71:e6:b5:62:c6:b1:d0:57:89:22:6d:20:
         fe:22:32:61:80:33:46:75:9e:3d:0b:92:98:1f:bd:a1:17:a7:
         92:14:b0:30:6c:2b:67:97:c9:a5:e3:ff:48:a4:de:95:72:68:
         d8:6e:46:b1:d8:bc:e6:a6:46:76:61:5a:10:8a:28:12:74:cf:
         a6:48:d6:1a:03:c0:ed:eb:50:7c:70:04:79:9c:32:b5:67:86:
         4d:48:f1:a4:65:b7:00:a9:c1:98:80:43:1c:c3:05:f6:c5:14:
         33:e9:23:82:ac:6b:58:f0:0a:ca:c3:2a:72:7d:ac:c8:5e:59:
         36:b6:b4:11:32:db:bf:68:5a:fb:93:b6:9e:c6:1a:ca:42:e8:
         d5:e8:e9:8c:98:cb:3e:4f:f0:3c:6f:98:f2:7a:35:a6:08:e3:
         89:4b:d6:a6:47:99:b5:ed:de:2a:fd:82:50:07:da:48:c9:35:
         e9:98:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:05 2026 by rpki-client