Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa
File:                     66FC64186D0711F0AC1BE951C4F9AE02.roa (raw, json)
Hash identifier:          gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=
Subject key identifier:   A4:AF:F7:6F:E8:94:84:42:29:2C:86:6B:4D:A5:49:83:FC:CD:F5:7B
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       07F3
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:03:58 +0000
ROA not before:           Mon 06 Oct 2025 22:22:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153641
IP address blocks:        103.151.236.0/24 maxlen: 24
                          103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2035 (0x7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Oct  6 22:22:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47f8e-b78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:ed:48:de:cc:67:d9:02:df:ab:f7:df:02:
                    44:4d:00:c6:6d:35:34:8d:63:55:2d:a6:25:ee:5b:
                    a0:7d:7e:99:65:5a:b5:ba:33:bb:d2:f7:da:bb:a9:
                    37:d8:dc:af:4e:b8:ae:64:01:82:10:42:3a:a7:57:
                    ac:00:90:f2:9e:9f:3c:74:22:35:52:36:44:41:9a:
                    a1:7d:17:24:d9:be:99:a4:3e:18:cf:2a:31:8d:1b:
                    b6:83:45:b9:56:de:9f:f0:ef:84:09:8d:f0:29:b5:
                    f8:af:f9:20:aa:40:27:1c:40:54:8c:e0:b1:f4:5c:
                    99:72:d0:38:b2:70:e5:9f:7b:bb:98:14:ea:ee:e3:
                    b6:c8:b1:45:34:d4:a1:c6:dc:8a:39:0a:ee:07:cf:
                    47:23:70:28:6f:e7:5b:60:63:1c:5c:79:dd:98:57:
                    10:f1:03:e3:0f:50:8b:6b:68:fa:3e:c4:05:3e:b9:
                    f6:89:be:1b:4c:9e:9a:13:87:bc:38:61:26:80:b8:
                    75:d6:b9:3d:c3:91:9f:3f:8c:40:0f:d9:14:35:d6:
                    35:34:b7:19:73:e1:98:71:9d:35:6c:8c:96:da:5b:
                    52:26:f0:80:71:24:82:d0:48:86:d3:a0:4b:64:9e:
                    5a:c4:64:00:e0:28:43:c6:8a:93:0b:45:90:8b:1f:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:F7:6F:E8:94:84:42:29:2C:86:6B:4D:A5:49:83:FC:CD:F5:7B
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:29:b6:d3:0f:87:f2:71:18:7e:56:46:34:06:0b:aa:8d:a1:
         5d:fb:13:e3:19:50:81:c1:73:63:95:3f:af:4c:28:a2:ea:29:
         2a:24:e5:80:af:e0:ac:50:86:1b:3a:67:63:d1:1f:49:4f:6e:
         d1:c2:e9:d0:90:b3:fc:0f:a3:ef:12:ef:a2:d1:72:ad:1b:cb:
         5a:ca:25:ab:89:e5:6a:89:b5:1c:70:fc:b3:0f:00:c0:88:55:
         a1:dd:c5:e7:52:2d:50:9e:6a:1c:a4:3e:ec:56:b6:1a:63:69:
         12:d7:a7:30:78:d8:c8:71:4f:9f:55:42:f4:94:c8:fa:de:ae:
         67:e8:69:bb:72:32:c9:66:c4:d1:60:1e:44:11:79:d8:87:e0:
         a6:98:2d:06:09:61:69:5d:56:c7:21:b8:b4:e9:84:1b:33:36:
         7e:c5:24:dc:8c:f4:ff:bd:92:cd:06:b9:34:cd:aa:af:92:1a:
         ba:70:57:35:70:27:9c:ad:9d:61:ee:74:29:ea:a7:a5:3e:db:
         53:f9:10:55:7e:ce:45:08:9c:f3:d7:71:7f:2e:1b:bb:89:7e:
         09:42:c8:e6:a3:bc:13:ae:21:ce:d1:70:90:66:c6:cd:ec:e3:
         b3:18:28:ad:d0:61:b3:5d:c5:5c:3f:a5:62:91:d4:59:2e:3d:
         20:57:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:47:45 2026 by rpki-client