Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa
File:                     EB00A028B61011EC98F3F920C4F9AE02.roa (raw, json)
Hash identifier:          dXCo0lNiziYhWi8xs6ceIFSUHHtjbD9ePJoyvWija/o=
Subject key identifier:   15:B5:EF:82:47:62:9C:81:28:56:BB:40:73:4C:EB:A8:D1:0A:6E:BC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DA4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:14:49 +0000
ROA not before:           Thu 28 Aug 2025 14:52:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131351
IP address blocks:        103.28.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23972 (0x5da4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60bd9-839d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:a9:fb:27:8e:ce:ed:ff:d8:74:10:57:3c:
                    25:22:3e:ed:f4:b4:d3:44:6a:a3:f0:0f:10:8e:5e:
                    06:8e:aa:a3:49:4f:74:66:c8:88:8b:27:4f:56:4b:
                    cf:86:8c:9b:dd:40:ef:b7:31:aa:d7:59:07:84:47:
                    85:28:80:e0:27:d5:db:6a:24:d1:21:33:21:2a:8d:
                    54:f8:ae:4f:43:b1:cc:1f:04:e3:ac:e2:14:be:e2:
                    f7:80:9a:57:05:41:1e:22:de:fd:41:8e:21:6c:c3:
                    f1:7b:43:2a:33:ae:54:ca:15:2a:c1:7e:c3:9b:d3:
                    db:1b:d2:6a:3d:12:e5:36:36:96:d5:aa:10:ca:26:
                    da:65:05:d3:95:a0:9f:82:1e:84:8b:28:3b:f1:f5:
                    39:ca:b8:a8:1c:48:42:0e:e1:b5:6c:69:00:18:db:
                    a6:67:f3:34:63:30:c0:ee:7f:c7:94:f0:78:f4:d9:
                    7e:c0:ee:4b:51:43:8b:fa:f7:25:a2:de:00:bb:90:
                    a7:c9:2a:3b:24:25:f8:e1:fd:07:35:15:b8:ad:48:
                    3d:af:39:13:91:02:47:5d:6c:2a:3e:b2:ff:9e:30:
                    42:e1:ec:bf:49:aa:4e:f6:9d:b5:7a:f6:53:a7:ff:
                    51:36:54:33:ca:34:1f:70:2f:90:cc:16:67:8a:33:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:EF:82:47:62:9C:81:28:56:BB:40:73:4C:EB:A8:D1:0A:6E:BC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:03:75:b7:2a:b8:fe:41:db:7a:20:7e:2b:a7:1b:cd:70:
         c2:57:02:7f:f6:97:cb:81:8f:2b:07:b2:e3:6e:67:c2:bf:64:
         e8:63:76:f6:35:40:fa:1b:d4:c9:42:cd:b4:3b:d1:19:cf:42:
         ce:96:da:48:20:67:fc:be:f9:f4:2e:74:56:b7:ec:e2:e8:71:
         11:5d:05:a6:25:6c:97:a1:84:db:78:c9:a0:4c:30:0f:fc:7b:
         9f:e8:af:9c:ba:ff:67:8e:d0:4e:04:04:7b:93:71:f3:94:7b:
         c3:4c:97:fe:5c:3a:e1:93:9f:e0:5a:04:28:06:53:7f:e6:57:
         93:53:21:f1:35:67:e7:5a:aa:e4:53:22:5f:0e:3d:f6:13:a8:
         8b:33:8d:4a:68:a6:32:36:82:9f:35:74:73:c2:92:cb:42:47:
         2d:bf:49:8d:b8:6d:80:3b:ad:f5:10:75:ad:8f:4b:cb:80:9d:
         a4:bb:de:2f:a5:3a:ee:ab:e1:87:01:4f:40:1c:68:52:cb:78:
         73:46:9c:b4:2e:eb:c0:3c:54:84:26:00:e6:ed:0c:d6:0e:f6:
         a8:a7:1d:a3:f1:09:18:0f:e3:c2:ab:ef:92:d1:68:7c:45:48:
         5e:c3:9f:38:53:8d:89:05:e4:80:43:bb:0d:e6:4e:64:71:cf:
         a7:61:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:28 2026 by rpki-client