Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa
File:                     DD0A5C28242B11EDB3156081C4F9AE02.roa (raw, json)
Hash identifier:          jCHyUE8m6ayLuD6+22RwnWtOxYSYB1QDYMlT5mALRtU=
Subject key identifier:   8E:92:B5:24:46:D7:27:AD:C1:56:B9:7C:6A:D6:8A:9D:85:C2:A8:42
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E46
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:17:30 +0000
ROA not before:           Thu 28 Aug 2025 14:54:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149124
IP address blocks:        103.149.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24134 (0x5e46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c7a-4f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:c1:9d:34:97:dc:78:a2:6e:ee:c0:1b:aa:
                    49:28:7b:47:6f:5f:61:06:33:8a:e7:de:d6:d7:7e:
                    a4:c1:08:83:ac:55:ef:4d:b1:a1:f2:01:0d:08:e5:
                    3f:45:63:35:ab:fd:14:97:17:5f:9c:dc:24:0f:f5:
                    f7:e6:02:9f:f5:d1:7c:65:46:52:40:28:d2:6b:61:
                    6d:1b:54:98:e2:ae:f7:17:09:ee:56:38:ea:2c:c1:
                    06:78:90:22:cd:bf:27:35:2f:bc:5e:34:99:6e:37:
                    ea:29:ac:fe:d8:37:4f:b2:be:df:35:eb:94:06:33:
                    a8:e3:dd:c1:80:84:3e:5b:ff:fe:10:54:d4:71:97:
                    63:42:0c:21:9f:91:21:3f:a4:25:23:53:a0:e1:72:
                    70:b0:8c:c9:b0:15:be:de:cd:85:fd:a3:c4:8d:c5:
                    37:5c:ee:ae:79:35:00:aa:40:2b:07:da:d2:40:62:
                    01:ca:44:ab:ff:cf:bb:27:22:7f:28:02:7f:b3:04:
                    6c:4e:ff:ef:fc:95:e1:19:eb:07:cc:43:4e:10:1c:
                    26:c2:3f:0c:60:b3:81:d8:b7:90:a0:a1:92:49:11:
                    9d:31:b4:db:9d:e0:73:33:8b:1b:68:c1:d0:0a:ca:
                    0f:6f:cd:14:19:06:34:ca:d3:8e:0f:e9:28:a5:c3:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:B5:24:46:D7:27:AD:C1:56:B9:7C:6A:D6:8A:9D:85:C2:A8:42
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:8d:eb:be:b8:fd:8f:50:ff:16:ae:ea:6e:f5:6a:76:b1:
         0b:79:1c:ef:66:df:70:15:df:70:7d:8e:f8:79:b5:de:fb:88:
         ae:ee:53:b6:12:f5:23:95:2f:2f:1e:d9:f7:d4:94:d6:dc:38:
         82:34:e2:eb:13:c8:0f:f2:4e:f2:af:ce:aa:0b:a9:c6:ac:19:
         d1:ca:61:2d:d2:96:c1:4b:55:57:91:c3:4e:4d:00:4c:7b:b8:
         f8:cb:86:6b:88:7a:08:76:34:28:97:c9:9a:fe:02:42:9f:a6:
         f8:c1:ae:16:70:a2:28:01:57:e3:08:7c:63:91:46:b3:16:88:
         39:8b:e1:12:96:ae:30:ef:e6:39:6b:0a:3d:74:08:44:cb:8a:
         97:01:49:38:3c:12:2c:6f:db:63:2a:b8:37:0c:cc:1b:24:c4:
         1a:7e:5b:fd:ba:94:1a:f5:d5:8b:2d:df:e7:13:36:c5:70:90:
         0c:f4:7a:80:c9:fe:4d:5f:23:ea:54:ca:28:03:97:a3:17:88:
         19:e2:46:fd:e0:23:57:7e:61:ce:18:46:63:99:78:e3:23:e0:
         f7:d2:fc:d7:4f:7c:63:a8:e8:36:9e:cf:97:72:1e:ff:ee:06:
         e1:8b:0e:6c:03:34:35:98:90:41:c3:34:5b:4d:c6:e3:d7:9c:
         e7:9c:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:12 2026 by rpki-client