Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa
File:                     4EED8CBE029911EF96760924C4F9AE02.roa (raw, json)
Hash identifier:          HD165QlFCv1elFOh9Ifxh8lRJ5m8p87EcQJEZyPTWpo=
Subject key identifier:   62:72:F4:EE:42:B6:9C:5F:1F:9B:3E:28:D3:0A:E8:A0:F4:3D:53:86
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       150F
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:19 +0000
ROA not before:           Wed 16 Apr 2025 16:55:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136557
IP address blocks:        103.108.228.0/24 maxlen: 24
                          103.108.231.0/24 maxlen: 24
                          2402:7340:1::/48 maxlen: 48
                          2402:7340:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5391 (0x150f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Apr 16 16:55:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a442ef-6b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:2e:02:14:1c:c3:81:35:7e:a5:86:e8:1a:
                    1f:97:2d:7a:a5:95:cc:40:78:8a:39:43:4f:3e:5c:
                    cf:a4:45:cc:31:c7:af:0d:e2:ca:0d:fd:5d:69:25:
                    56:60:96:a7:ed:18:77:d0:71:3d:af:45:ce:33:0f:
                    9c:b9:01:ea:03:63:ac:30:24:a3:07:be:30:d3:65:
                    e5:e6:7a:c1:83:0c:2b:1d:b5:3a:86:f0:d1:ce:44:
                    4f:59:36:32:6e:54:67:87:d8:56:b6:74:45:32:71:
                    c8:19:9e:36:bf:66:e3:9c:67:85:a2:7e:75:e3:da:
                    69:05:54:63:44:17:5b:72:28:3b:91:73:db:24:16:
                    8b:cf:3f:9d:a3:9d:7b:b5:7d:35:f8:0a:18:04:c6:
                    ac:6e:b9:bc:c4:93:59:c1:63:65:11:2d:ee:87:ce:
                    25:53:90:c5:b7:16:b3:12:7c:51:24:8a:f2:4d:d6:
                    68:31:e8:36:94:61:88:87:2b:e1:5f:0d:3c:cd:ad:
                    bf:95:f1:c8:07:59:db:33:d8:8b:cf:7f:a2:70:5f:
                    da:48:56:2d:49:64:5c:52:44:17:b0:13:9b:b0:9e:
                    30:3c:9a:83:82:5c:9b:ff:04:e8:92:14:63:c3:ae:
                    05:5a:2c:01:66:41:92:4e:40:e5:55:da:74:40:5c:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:F4:EE:42:B6:9C:5F:1F:9B:3E:28:D3:0A:E8:A0:F4:3D:53:86
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.228.0/24
                  103.108.231.0/24
                IPv6:
                  2402:7340:1::/48
                  2402:7340:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:72:9c:8c:b4:9e:e4:64:3a:6b:ed:65:c0:d1:71:27:7f:25:
         31:4b:fb:4b:ab:0e:a0:d1:f8:d7:95:ce:a1:cd:02:5e:3c:0f:
         ed:d6:13:42:b8:10:43:af:8b:5e:09:04:fe:d7:f6:19:3f:9c:
         3a:66:7b:4e:6b:3b:14:3b:ea:78:45:db:7f:b3:1e:82:0f:1d:
         38:2b:2e:a1:aa:e4:ca:b3:63:25:d1:9f:e4:51:b3:68:51:83:
         da:af:b4:e0:47:03:1d:fb:64:d9:8e:08:31:8d:0a:d6:e3:eb:
         1c:d9:ed:53:7d:da:bd:62:97:bc:03:f9:6b:88:cd:e4:4f:13:
         14:d9:3e:94:58:2c:dc:2c:16:e3:f1:08:ef:93:b8:71:01:b1:
         a2:f5:f4:ca:04:b8:14:56:58:e8:4c:59:a6:c4:d4:c4:36:60:
         cf:fc:90:16:4c:21:51:2c:5a:37:82:21:a4:85:ab:7a:ff:d2:
         d3:27:2b:db:2d:c5:62:22:91:e5:7e:02:a3:80:3f:26:37:b6:
         3e:85:f7:91:00:23:96:f7:59:fe:c9:81:fb:40:23:9c:c6:bd:
         74:17:b6:8d:18:7e:ba:38:de:14:af:0c:75:32:1f:10:b3:c6:
         04:18:bd:ef:ba:d1:d1:ab:eb:ba:cf:33:c7:33:59:b5:4a:ec:
         e8:3c:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:32:16 2026 by rpki-client