Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
File:                     C85D0F7E477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier:          LlTpQ+lB51NJTsADg9wIZbeo2X5klSC9ytPou8casL4=
Subject key identifier:   44:C5:93:6F:57:13:45:46:02:A2:C6:D3:67:D0:0D:A7:92:14:FA:5E
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C17
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 16:13:54 +0000
ROA not before:           Mon 02 Feb 2026 16:13:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        103.5.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7191 (0x1c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Feb  2 16:13:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6980cd42-ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:2c:64:ac:e0:ef:da:05:b4:37:ac:13:3d:
                    63:60:87:c8:50:18:1a:65:6d:6d:be:f4:9a:ad:3d:
                    94:fa:04:af:9e:49:0e:24:9e:5d:31:5e:6f:02:5b:
                    d6:73:88:17:70:06:3e:79:0b:6c:43:5e:72:05:ce:
                    54:de:f2:58:9d:b3:23:12:45:7b:cd:f2:57:bc:f1:
                    06:6d:0a:b5:b1:43:50:1b:eb:cf:b0:e7:9f:f5:fd:
                    a3:60:4b:e9:80:0f:f0:ca:c6:f6:6a:d5:42:97:82:
                    75:09:1d:a0:ab:c3:b1:d2:af:b1:6f:c0:87:9a:f7:
                    5c:51:a3:4f:4d:01:80:8e:eb:df:17:8a:03:df:cd:
                    0a:66:d3:15:22:5e:51:7f:c2:a4:13:31:46:77:1d:
                    db:7e:c6:8d:84:5f:db:fa:c2:1e:d6:ad:21:5e:54:
                    22:b6:93:c1:de:06:7b:ed:10:4b:d2:fc:b2:e3:d7:
                    40:ff:64:5e:13:ee:46:a2:ac:86:35:ca:38:66:7c:
                    d0:13:40:98:d7:bc:8e:8e:e7:62:3a:bb:fe:fa:f3:
                    f8:c0:84:aa:64:7b:93:ce:b0:31:e1:7f:21:59:4c:
                    85:83:cf:77:41:df:e6:cc:5b:fa:4a:f8:19:ee:37:
                    40:78:50:e6:cc:68:3a:ab:e5:3b:ce:88:f1:64:59:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C5:93:6F:57:13:45:46:02:A2:C6:D3:67:D0:0D:A7:92:14:FA:5E
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:8f:70:10:7c:dd:d0:ff:d9:fb:db:f9:de:33:18:48:2d:72:
         cf:6e:61:a8:1a:1a:86:51:d0:e0:59:7b:70:ae:76:b3:60:ff:
         a4:07:58:2e:d3:28:c9:34:90:c3:c6:c6:74:b8:9a:7d:e1:59:
         5f:f0:5b:a2:5f:af:64:0b:41:30:38:79:f7:2a:65:fd:0e:42:
         c4:99:b7:55:77:70:12:69:25:4e:75:34:b0:55:15:06:a8:39:
         17:8f:79:7d:5d:7c:e3:65:01:53:e0:ce:a1:d2:be:db:50:23:
         ed:8e:c3:0a:df:24:aa:5b:6d:24:7d:e9:83:92:14:19:e5:6f:
         c1:c5:6a:6d:05:fd:26:c0:77:ca:c4:a6:34:50:6a:7d:9f:44:
         e4:04:3d:c1:0d:ab:1f:d4:4f:06:fc:7d:df:81:a7:7b:f1:31:
         ac:a6:cf:02:0e:7d:17:d1:e1:ca:f2:54:4f:0c:d1:73:78:0a:
         dc:5a:a8:90:b7:ae:03:c2:ab:8b:fe:76:d4:15:48:17:8a:84:
         81:92:73:b4:fe:3b:0b:f3:14:54:a9:ee:1b:28:57:39:b0:73:
         39:ef:94:0c:3e:1f:89:e7:d4:f4:0d:ef:4a:8d:58:3a:f7:c2:
         0d:6a:e7:a6:0c:49:32:8b:d9:37:93:48:1b:84:9f:69:90:7c:
         f7:92:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:02 2026 by rpki-client