Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/64554290C9F611ED9853C583C4F9AE02.roa
File:                     64554290C9F611ED9853C583C4F9AE02.roa (raw, json)
Hash identifier:          agpfPSJGjVQ5csFAXUqTBwmD9lbAU8gkO4ush2slIeA=
Subject key identifier:   93:ED:9C:3B:6A:67:E8:04:77:6C:67:06:D1:61:B2:2C:6D:A3:C6:C5
Certificate issuer:       /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial:       0F75
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/64554290C9F611ED9853C583C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:35:54 +0000
ROA not before:           Fri 06 Jun 2025 18:21:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134739
IP address blocks:        103.138.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3957 (0xf75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
        Validity
            Not Before: Jun  6 18:21:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4249a-948f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:c2:8e:1b:d9:21:52:4a:34:9f:57:e8:cd:
                    c0:fe:a6:75:20:d8:a1:d9:a2:65:4c:a0:a2:1f:6c:
                    40:5e:30:a6:1f:5c:74:51:d3:2b:d8:5a:e9:11:77:
                    4b:5b:7c:54:29:f0:b3:b0:99:0b:ac:38:1e:f1:a2:
                    5d:f6:00:9a:dd:b1:16:b0:cb:48:ba:3b:94:20:49:
                    d2:fc:fe:6d:49:cc:f4:43:dd:dd:ec:4e:8a:8f:55:
                    d4:08:dc:7c:8f:5f:9e:73:60:d3:43:c3:49:9e:dd:
                    64:d5:ae:c6:19:fb:89:96:5d:fc:23:51:6b:01:6e:
                    c8:08:6f:3b:4c:ce:b8:8d:54:04:04:be:2a:69:b3:
                    76:5b:6a:b6:ce:48:42:23:63:ed:e0:8e:d2:4f:c0:
                    95:33:ac:01:12:6e:a7:09:e1:36:c7:a5:c0:a0:08:
                    bb:ab:57:bb:b2:64:96:16:ce:69:bd:d3:73:dc:87:
                    da:52:89:37:73:bb:25:46:cb:d4:cf:f4:2b:8f:51:
                    72:b9:93:34:85:99:45:f9:2a:b4:22:75:35:52:5b:
                    29:f7:4b:8f:57:4c:43:7a:80:46:13:78:3b:30:3f:
                    65:a9:7a:28:c9:69:a6:93:90:f3:81:1f:d0:67:4c:
                    57:69:26:e6:20:40:b7:d3:d9:4f:74:52:ef:5f:54:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:9C:3B:6A:67:E8:04:77:6C:67:06:D1:61:B2:2C:6D:A3:C6:C5
            X509v3 Authority Key Identifier:
                keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/64554290C9F611ED9853C583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:ff:d6:e4:fc:55:41:ec:9e:7b:5f:49:3a:e8:b9:bf:59:
         68:44:e6:80:89:1a:71:a4:00:df:03:e7:8f:0a:37:02:c9:1b:
         56:ef:31:f3:58:12:81:e3:02:1a:f7:41:35:64:01:fd:8a:30:
         39:dc:f7:ad:d9:e3:b0:d5:dd:ed:09:a1:06:38:93:4e:70:fd:
         6d:07:c9:b8:fc:7f:c9:cc:1e:24:8b:5f:1f:87:8d:77:34:10:
         ef:f5:7f:02:36:95:71:1a:21:9b:9e:b6:43:b0:bb:f1:2d:8d:
         d8:85:e9:fa:90:fa:13:05:bd:ce:a9:b8:70:ab:1d:bd:a0:3b:
         d5:fd:aa:8e:38:ed:f5:3c:7f:c8:8f:ba:9c:62:ad:82:4b:3b:
         07:77:18:ab:2f:b6:bb:7f:59:2e:fa:1e:9a:e7:78:2a:1b:41:
         38:86:32:17:d2:db:52:f2:5f:d5:bb:36:c2:c4:bf:61:e7:0a:
         ac:8c:97:50:45:5f:4f:81:69:53:11:20:9f:db:e0:f0:62:3a:
         ca:b0:5a:63:e6:a2:ec:64:89:a3:59:25:8f:7e:be:5c:37:fb:
         c2:89:b2:d7:ed:40:0d:f9:3a:99:46:7d:b8:61:bd:0b:42:8d:
         35:63:c0:f4:6a:6a:15:a7:d6:d5:83:00:e5:64:9e:1f:53:0e:
         2a:ff:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:32:49 2026 by rpki-client