Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/69915526EA0711F0976467B16F6F56BC.roa
File:                     69915526EA0711F0976467B16F6F56BC.roa (raw, json)
Hash identifier:          SFd4usN35GeJVO8naPqajPmsGMgesiXpwAu3vfPbeK0=
Subject key identifier:   CC:E6:91:7A:DA:40:78:B5:83:40:B4:FF:68:7F:8C:CA:BA:26:37:0D
Certificate issuer:       /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial:       11F3
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/69915526EA0711F0976467B16F6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:35:53 +0000
ROA not before:           Mon 05 Jan 2026 07:25:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        103.86.194.0/24 maxlen: 24
                          220.152.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
                          rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4595 (0x11f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
        Validity
            Not Before: Jan  5 07:25:27 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48709-a16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:b8:fc:75:ef:86:cd:85:be:ac:50:9c:b1:
                    b7:4f:d7:4e:81:ce:f8:97:bf:35:98:31:45:9d:1c:
                    62:31:d8:03:02:f0:43:42:32:e4:ed:8b:a1:ea:b0:
                    5f:a6:8e:5b:61:41:0d:16:b3:6f:00:90:bc:02:e0:
                    14:59:58:02:cf:33:06:36:d7:b0:54:37:b4:5e:d1:
                    6e:d5:0b:e4:0c:59:4b:9a:01:9f:41:25:c9:ae:df:
                    f7:65:a0:72:bc:da:16:25:dc:89:df:9b:73:bc:6a:
                    98:60:44:e5:1d:51:f3:be:67:14:cd:f0:45:40:53:
                    8d:85:01:c4:d0:b4:c5:68:c8:f4:11:45:05:86:ad:
                    e8:b2:e0:8d:d8:8c:8b:3c:5d:58:35:83:ca:c2:35:
                    56:37:b1:a5:44:35:06:81:ad:22:08:5f:a4:8a:4f:
                    8a:a4:b1:12:4e:00:0b:31:43:db:ea:73:32:81:d2:
                    fc:ea:50:18:8f:78:e4:14:d3:03:84:6a:85:24:5c:
                    23:9a:51:f1:bb:c0:8d:2a:a4:f2:63:94:f2:13:49:
                    5f:58:c5:31:62:4b:95:47:dd:64:c3:15:8a:cc:b1:
                    f6:c6:e3:97:ea:ab:86:cd:c3:b9:a0:be:88:a6:99:
                    20:c5:68:f2:33:97:8f:d0:64:ef:3a:38:87:f2:16:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:91:7A:DA:40:78:B5:83:40:B4:FF:68:7F:8C:CA:BA:26:37:0D
            X509v3 Authority Key Identifier:
                keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/69915526EA0711F0976467B16F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.194.0/24
                  220.152.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a8:22:02:3e:40:3c:86:79:70:40:9b:ee:bc:82:48:d8:63:
         e2:11:2c:4e:f6:3a:5d:2c:d0:a9:f3:97:70:4f:52:c5:7b:23:
         46:19:99:35:89:b0:1f:11:5d:c5:38:0c:c1:61:6f:90:88:2c:
         dd:6a:ac:e3:96:e5:70:5b:5b:cf:95:7c:01:4a:11:d2:84:27:
         21:4f:7c:a3:e4:b3:aa:a1:b5:02:bc:41:62:a7:5a:a2:67:8f:
         76:8b:0d:e9:16:b6:8e:5a:60:92:84:b7:cc:5b:2e:33:1f:8e:
         1d:f9:06:3a:26:8a:d6:49:af:9a:8e:69:5c:96:6d:86:25:c6:
         4a:36:d0:17:8e:29:07:3a:01:30:29:55:18:37:cf:d5:e7:83:
         00:46:86:dc:49:a7:cd:2f:95:1d:09:ec:68:00:83:22:0c:fe:
         75:7a:f2:2f:f0:49:97:7c:e3:f9:3a:d2:3c:e8:66:7a:15:73:
         25:03:32:ae:f3:48:b6:47:e3:dc:21:ff:98:40:15:6c:e6:ba:
         20:04:5c:f9:23:62:40:1b:e0:0e:0a:01:1f:19:16:31:29:27:
         9b:71:8d:f7:b6:4c:18:48:e9:be:16:6c:cf:00:42:df:33:13:
         97:be:59:12:80:dc:0a:d8:a8:21:1f:b8:84:31:60:3c:68:49:
         4e:18:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:54 2026 by rpki-client