Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
File:                     73381ABCAB3611EF809A470EC4F9AE02.roa (raw, json)
Hash identifier:          6FEl/xTlrO6k23qkzsJZxZeQTOP267Pxj3B9BnAU7dI=
Subject key identifier:   73:95:44:5C:90:51:09:15:4F:37:C7:B9:87:F9:83:F6:59:5E:1E:01
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       0677
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:19:00 +0000
ROA not before:           Tue 13 May 2025 14:06:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152700
IP address blocks:        103.136.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 22:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: May 13 14:06:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51dc4-3549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:23:15:e9:28:5b:64:03:63:08:f8:05:d6:
                    34:b5:ce:69:c1:ab:4a:90:23:69:3d:d1:eb:4b:da:
                    ce:eb:fb:7c:90:ce:61:92:e6:fb:54:3e:6c:af:e2:
                    49:86:3a:17:fe:85:6d:9e:ea:e5:81:ce:c5:39:5e:
                    18:77:09:8a:e9:81:69:f5:01:34:77:d1:5b:37:95:
                    75:88:6b:b6:d0:a1:a3:43:2a:a1:46:a3:fd:46:94:
                    92:02:87:fc:00:24:dc:22:21:6e:81:6b:03:d4:28:
                    f9:ef:ca:bc:f7:be:2d:e4:20:b5:f3:a2:d4:02:84:
                    92:df:72:46:7e:d6:a8:08:cf:99:53:ed:ce:35:f2:
                    e4:47:3c:8e:9a:59:5d:49:8e:01:32:b7:9c:3a:47:
                    72:56:12:8b:81:3d:fa:46:46:f7:c0:47:f0:0c:58:
                    0d:f7:17:94:81:09:20:83:1e:4d:df:17:d9:fb:eb:
                    d0:de:4b:90:66:64:09:02:ea:da:36:2a:ae:8a:b5:
                    85:7e:b1:be:19:94:3a:62:ac:1d:3e:ba:93:e9:5a:
                    b7:a7:63:bd:0c:15:93:6c:28:c6:16:e8:2b:41:dc:
                    44:e8:cc:e2:41:dd:e1:6a:a5:85:cb:3d:65:7d:0c:
                    12:ee:bd:ba:63:30:d6:60:2d:3d:00:bb:d9:5d:0b:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:44:5C:90:51:09:15:4F:37:C7:B9:87:F9:83:F6:59:5E:1E:01
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:2e:95:11:73:f6:a7:5e:8c:b7:bb:b8:c3:92:7b:e3:78:
         05:2e:8e:d3:0c:59:8a:68:8b:96:a1:9d:04:02:86:c2:ea:9c:
         1c:32:3f:bd:0e:ed:d7:8e:9e:16:e5:a5:73:9b:74:41:12:a1:
         57:f0:3f:5e:93:ce:94:54:21:8c:37:9c:0c:40:ac:23:ac:ad:
         6a:a8:16:08:4a:80:61:bf:3a:ab:53:04:b4:65:df:49:cc:b1:
         47:a0:8c:f6:1c:de:8e:e7:4f:2a:c7:47:68:f6:a4:a4:7a:a7:
         4b:09:4b:3e:32:61:0a:f2:78:b3:d6:0e:cb:da:8a:a0:fe:79:
         60:53:83:2f:34:b8:b7:6d:7d:8d:58:b5:50:64:03:fc:f4:03:
         b7:27:dd:6d:73:6d:10:41:a3:60:5e:97:a4:84:6a:2f:38:ef:
         e6:d8:8a:26:05:2d:4f:9c:35:5a:54:2a:66:f4:22:46:98:32:
         eb:f0:bf:84:f6:a3:1d:3e:23:77:82:81:7a:6a:cb:fc:df:7d:
         91:d8:4e:0e:bf:ea:5b:a9:48:c0:10:db:c6:69:d7:88:b3:23:
         e9:38:fa:4d:88:da:44:60:6b:23:36:53:36:45:e9:e6:0b:34:
         04:13:90:0e:0d:0f:87:f1:6c:f8:48:40:1e:b1:0a:f7:44:40:
         fd:46:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 03:12:00 2026 by rpki-client