Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa
File:                     6897409A73E811EA93705B7CC4F9AE02.roa (raw, json)
Hash identifier:          2QYkb5FVx71rENTmOt/nZuraN9UNA+Z+eXoz/Zp7XRg=
Subject key identifier:   68:81:C4:35:A8:AF:5B:85:10:1C:A9:44:CE:C4:17:7C:6A:0C:CF:3A
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0B20
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 19:39:41 +0000
ROA not before:           Thu 10 Sep 2026 19:39:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.142.172.0/23 maxlen: 23
                          103.142.172.0/24 maxlen: 24
                          103.142.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2848 (0xb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Sep 10 19:39:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa3077d-c455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:cb:32:cc:03:24:de:a0:77:56:62:16:da:
                    75:8e:f4:91:62:08:e3:93:f3:c4:75:4e:03:70:43:
                    84:c3:f1:df:f8:78:12:03:78:80:28:a3:ef:92:9f:
                    53:de:05:78:07:81:6b:8b:98:fc:35:bc:55:5d:e1:
                    da:e9:5b:09:bb:89:0f:34:ac:22:a3:ce:f6:6c:23:
                    82:08:7b:c6:83:6d:c7:22:8f:a2:7a:c9:f9:e3:2b:
                    16:b1:21:e1:f3:11:f6:79:5c:61:93:35:1c:8c:e8:
                    ae:1a:fb:a7:01:da:85:77:23:0a:de:5a:7d:34:73:
                    62:ee:8a:2f:ee:db:29:e7:14:3e:7a:4a:67:d7:8b:
                    30:a7:1a:5c:7c:b8:d5:5c:04:a2:8f:d2:3e:c9:c8:
                    07:d7:c5:2f:40:73:8c:07:9c:b5:d4:1f:f8:d7:81:
                    c3:df:b0:b2:6c:82:b1:b8:64:01:28:c8:48:c1:ea:
                    03:3c:0a:ca:9f:b9:89:cf:bd:d4:d0:05:c9:a2:3a:
                    0a:5a:06:3d:8a:47:f6:56:ca:3b:82:e9:9a:7e:b7:
                    b8:4a:15:5b:ed:e0:8c:8b:08:da:29:d8:21:66:a4:
                    97:83:06:b8:b9:1f:0c:91:5e:41:59:33:ed:17:08:
                    39:11:a4:60:c2:a3:99:1a:3d:b5:6a:8b:fd:ef:8a:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:C4:35:A8:AF:5B:85:10:1C:A9:44:CE:C4:17:7C:6A:0C:CF:3A
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:1b:d4:a2:27:09:cf:a2:10:7b:f6:0e:39:67:21:6a:92:
         f0:45:5f:a2:4f:cb:ce:12:ed:f0:1b:3e:a0:ac:61:19:d8:40:
         cb:97:65:9d:d9:67:af:10:be:bb:e4:04:e7:0a:65:38:04:09:
         64:f8:64:60:a4:6a:a1:f6:a0:35:81:5a:db:0a:6f:76:42:fc:
         13:96:1a:ed:d0:6f:94:f2:ed:da:d6:e6:b5:5a:0c:aa:6e:23:
         54:5a:08:40:10:7c:2f:58:33:c3:5e:23:b5:4b:22:fd:cc:35:
         74:20:54:0c:b3:b5:f3:ac:b5:aa:61:b7:39:ab:84:54:ce:b1:
         71:69:17:46:3f:7d:c7:1b:9f:3e:ee:1d:ae:d8:04:b9:a7:41:
         30:61:17:03:69:af:2e:e7:a9:33:d0:cc:d9:e6:e3:fd:5d:8e:
         df:a6:26:f2:96:09:19:76:8b:cc:c9:13:be:4b:31:62:d2:89:
         a5:d6:e4:d1:20:57:52:fa:c1:be:e0:01:24:ee:c4:60:af:6d:
         ba:af:07:f1:a8:ef:56:8c:28:39:27:5b:bb:98:64:59:ac:71:
         eb:1e:e9:b8:51:75:de:2b:9d:ef:e4:2b:76:f8:d9:f8:2a:6c:
         7b:3f:2b:53:a4:f0:50:36:a5:3d:f9:e9:b2:76:86:5d:61:aa:
         fb:fc:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:45:55 2026 by rpki-client