Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
File:                     5D5B0F7C34CA11EDA301482BC4F9AE02.roa (raw, json)
Hash identifier:          vF0Xep5rMnkqhhbU8FmKPsAzCnUUJ1w3mXYEGGvLr3M=
Subject key identifier:   50:8F:2F:7E:23:F3:FD:5A:93:32:BA:16:E2:69:22:CF:AE:EA:87:52
Certificate issuer:       /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial:       02AB
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:53:56 +0000
ROA not before:           Thu 25 Dec 2025 01:21:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139863
IP address blocks:        103.146.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
                          rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
        Validity
            Not Before: Dec 25 01:21:47 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a436e3-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:38:e7:a6:a7:93:cd:93:c8:5d:20:ea:e8:
                    7e:9e:2e:fa:b9:ea:ea:b6:02:b9:1a:89:b5:e4:15:
                    ad:d3:83:d4:5d:f9:3c:cf:8b:97:f0:eb:1f:b5:0d:
                    bc:6d:53:6c:04:6d:24:5e:87:2c:5a:f7:37:bd:14:
                    e7:5d:2f:8b:22:7e:62:25:cf:01:12:2e:98:d3:b1:
                    19:52:26:e7:3f:17:8b:9d:45:93:cc:52:dd:9f:ee:
                    b4:d4:a4:02:7a:f7:6d:57:b6:92:84:cd:86:51:fd:
                    7e:c6:b0:62:82:c0:9b:82:33:f5:b6:43:03:94:e3:
                    cd:fa:7c:a1:f9:c0:26:01:14:cd:38:3e:bc:2d:15:
                    82:e1:81:dc:62:29:95:41:cb:33:5f:70:8d:da:7a:
                    80:1a:e5:4c:e3:b3:9c:09:ee:f1:9e:1c:97:4d:ac:
                    9e:49:7d:cf:cb:a9:43:40:b4:89:50:33:30:9e:3e:
                    59:a7:8c:6a:25:c1:28:e2:54:f9:4d:ff:0a:f2:af:
                    fb:ec:51:8f:5d:24:85:6d:13:f4:cb:a4:7f:7f:40:
                    77:0b:6d:b4:70:97:6e:b4:81:61:5b:e5:79:0c:1e:
                    ab:ee:ea:0d:18:98:62:e2:59:ac:dd:4f:a4:89:e1:
                    c6:f0:30:60:9c:ec:1d:ad:49:36:6c:b3:04:77:43:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8F:2F:7E:23:F3:FD:5A:93:32:BA:16:E2:69:22:CF:AE:EA:87:52
            X509v3 Authority Key Identifier:
                keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:2c:fc:c8:6a:83:ce:a3:39:22:ab:09:55:f5:52:e3:73:81:
         89:13:5c:71:fc:9a:82:9e:61:f6:23:98:5d:6c:72:2d:8b:bf:
         5a:c3:1b:52:42:f8:11:74:31:cc:c1:6b:5c:0b:95:d1:bd:12:
         b5:5e:63:9b:06:a8:f0:fa:9a:67:45:13:13:ef:2d:96:6a:ec:
         e2:73:7f:95:b6:38:f9:1e:05:2f:b6:5e:c4:5d:76:6c:bf:b1:
         d0:e1:a3:b8:85:ff:7e:27:29:a5:ae:d4:a0:bf:b3:c2:fe:11:
         e4:45:8c:f8:8e:06:a8:bb:bf:fb:e5:62:5f:87:ee:63:5f:a8:
         87:65:59:12:e9:b5:cd:38:d3:96:98:90:d4:72:2e:2d:b6:3e:
         72:bc:0b:59:d3:be:ca:be:8c:75:02:a2:13:c8:ab:81:d9:78:
         c3:1e:5e:89:73:11:1f:4f:42:2a:15:aa:3d:13:51:04:d1:61:
         39:d2:93:9e:37:2e:b4:13:44:90:0a:ac:cf:fe:1e:c6:32:de:
         a7:ac:43:3c:fc:f5:b5:ff:01:8e:de:65:7f:55:44:84:5f:1c:
         3a:6a:eb:8c:5b:88:b5:7b:a3:80:ea:3c:52:1b:f0:84:b1:dd:
         3e:92:4b:c9:8d:19:62:31:40:df:30:72:1f:3f:44:28:76:0f:
         62:80:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:14 2026 by rpki-client