Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/991E066C1DB711EB95324E17C4F9AE02.roa
File:                     991E066C1DB711EB95324E17C4F9AE02.roa (raw, json)
Hash identifier:          2sKE6RrgLoz17VmQp6jCP47m28DrJqumiJag4VCEYBQ=
Subject key identifier:   6D:47:A0:6C:E6:42:BC:5C:89:CA:7E:E8:86:73:AC:05:2B:5A:36:C3
Certificate issuer:       /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
Certificate serial:       1183
Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/991E066C1DB711EB95324E17C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:47:16 +0000
ROA not before:           Tue 14 Oct 2025 18:16:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138147
IP address blocks:        103.121.80.0/24 maxlen: 24
                          103.121.81.0/24 maxlen: 24
                          103.121.82.0/24 maxlen: 24
                          103.121.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl
                          rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4483 (0x1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
        Validity
            Not Before: Oct 14 18:16:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44364-86f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:28:06:bb:71:08:10:67:32:fc:39:20:d1:
                    d3:43:0d:c1:e5:f4:78:4e:05:26:5b:5d:3c:b6:04:
                    09:3d:b1:63:1a:8a:27:c1:e4:ee:e4:50:39:c4:f2:
                    a2:d6:71:d3:1d:a4:8e:a6:2f:40:a6:03:2d:04:15:
                    4f:cd:f3:1a:6c:2a:78:92:b3:2c:7f:6a:a7:dd:a4:
                    43:07:1f:33:8e:46:ca:e8:c5:07:68:fb:1d:bf:f8:
                    4e:2e:aa:aa:00:97:81:9d:1b:96:d0:e6:57:a0:82:
                    5d:92:e4:32:3b:be:82:69:34:a7:43:05:20:64:d9:
                    b2:34:b2:58:bd:55:33:d5:42:0e:c8:41:bd:d3:90:
                    92:b5:41:ec:29:89:e7:f9:27:4c:8d:73:c2:fb:49:
                    81:e3:89:ea:c6:bc:f8:a5:d6:a1:d9:df:54:f0:6f:
                    bb:6b:bb:1f:27:33:24:14:71:c6:7d:7d:a1:8b:c4:
                    c6:e7:b9:28:37:ee:ac:28:f5:99:b5:68:f8:4d:d3:
                    0c:51:c8:1c:d6:f1:46:2e:ce:19:26:01:93:3b:60:
                    ef:b8:c1:50:eb:d9:39:2a:f7:e6:09:ca:0a:1a:c2:
                    c7:9e:a2:e2:c3:e2:0b:1e:f1:89:be:25:e8:9c:d2:
                    bb:e1:8a:68:c2:54:47:9d:0f:68:8d:09:67:26:90:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:A0:6C:E6:42:BC:5C:89:CA:7E:E8:86:73:AC:05:2B:5A:36:C3
            X509v3 Authority Key Identifier:
                keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/991E066C1DB711EB95324E17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:91:b4:44:65:94:db:f6:70:55:40:99:89:5b:34:12:82:
         2c:6f:eb:3f:1a:ca:d2:6d:ad:ae:f7:25:69:6e:f8:86:57:05:
         a1:08:99:66:69:de:93:a8:58:4e:a6:59:6a:6b:5e:ff:94:7d:
         50:44:d3:a4:86:0e:ae:95:fd:bd:f8:5d:a3:6e:4f:67:ef:ca:
         3e:3e:f0:ed:b0:9d:e3:9c:7d:e8:be:cc:a8:0a:00:0c:7b:31:
         64:2e:ab:10:ca:ff:3f:69:c7:70:3f:71:de:46:79:ff:b0:58:
         ba:cf:03:2b:b6:98:94:04:9d:44:7b:ca:f1:f4:c1:46:0f:1a:
         07:d1:5c:90:1e:cf:05:df:8a:a2:a4:5c:57:f2:f4:f1:9e:b5:
         8f:59:42:d4:b1:a6:35:34:e1:0f:4b:62:47:0b:06:9b:96:0e:
         2c:72:8d:bd:d0:85:97:71:f1:b9:81:c1:74:59:36:b4:6b:f8:
         bb:57:23:b5:ba:ca:1c:18:57:c4:ed:28:d5:a6:a6:c5:5d:d9:
         66:c1:2d:49:f0:63:31:97:ab:d5:8b:f8:f8:48:bd:3a:34:a9:
         33:2c:58:50:12:32:cc:1d:58:e4:08:03:da:43:f8:5c:d8:58:
         86:76:5b:3d:b9:1f:41:27:75:9e:a7:fa:5f:ac:2e:26:a5:87:
         91:01:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:37 2026 by rpki-client