Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa
File:                     E1FC5A5E303311EA8796D584C4F9AE02.roa (raw, json)
Hash identifier:          TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=
Subject key identifier:   98:9B:FD:FE:B1:1A:7D:7E:8B:FA:35:F3:1C:32:A1:23:AF:03:B1:A0
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0C0F
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa
Signing time:             Sat 14 Mar 2026 19:24:19 +0000
ROA not before:           Sat 14 Mar 2026 19:24:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.147.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3087 (0xc0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Mar 14 19:24:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b5b5e3-23cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:5a:1e:5d:01:04:f8:a0:d3:6b:91:10:23:
                    44:a4:ae:fe:5d:8d:5e:19:fb:7c:18:04:f9:97:d6:
                    f5:8e:5c:65:8d:a8:be:fe:8a:bc:1d:c3:f6:8d:b8:
                    f3:dc:4f:e2:73:9e:e9:6a:9c:53:7e:15:36:ab:c0:
                    fe:fe:96:62:c3:2a:30:33:c9:19:c2:1d:bc:9f:76:
                    ac:74:7d:c2:7d:71:7b:6e:33:ab:50:37:65:7d:b8:
                    3f:e8:ec:0c:e1:f3:59:ac:98:e4:dc:a7:b6:4c:e4:
                    94:c9:95:f3:60:96:3c:ed:da:5e:c3:96:d2:2c:74:
                    c5:a5:f9:d5:de:09:4f:85:42:8a:fa:c9:14:70:fa:
                    f0:0b:de:91:23:00:03:40:cd:ef:a1:0d:27:88:30:
                    19:5a:be:c0:d3:92:36:72:48:63:6f:59:f5:b0:3c:
                    8e:09:c0:86:39:d5:66:d5:2f:e6:3b:af:11:11:61:
                    13:f5:dd:bf:8c:03:ad:4f:8b:fc:f9:1e:73:5e:42:
                    23:d8:3a:41:c7:90:2c:a5:57:36:86:92:bd:5d:c0:
                    c8:42:03:5a:e5:54:88:23:1a:96:87:d8:a1:39:1f:
                    bc:6e:66:6e:1b:3b:d1:c1:9c:ec:be:dd:19:fc:02:
                    a8:74:1a:f3:ab:1d:3c:cc:d5:50:4f:00:84:02:80:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:FD:FE:B1:1A:7D:7E:8B:FA:35:F3:1C:32:A1:23:AF:03:B1:A0
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:b8:a2:e6:45:d1:d8:83:04:f4:be:34:f3:53:eb:f7:cf:
         c6:70:5c:ce:e1:7e:e1:61:16:e4:38:f9:97:ed:ca:95:6a:e7:
         4f:df:82:45:ed:17:07:fc:c8:12:6b:6b:b2:8d:e9:0d:d3:49:
         38:b9:36:f5:ba:98:d5:15:b0:fb:c6:06:39:19:93:4f:37:2d:
         c5:bb:68:f7:00:06:33:4c:ab:3c:25:4d:7d:22:f8:a2:ff:5a:
         2e:e3:a8:f7:18:a9:5b:e4:4e:26:d6:9c:c6:97:69:bb:0c:62:
         03:81:fe:0e:be:0f:cf:d4:42:1f:57:a3:92:77:61:33:f4:c5:
         aa:f3:78:3c:26:dd:53:f4:29:79:66:a1:4f:bd:66:30:43:38:
         74:87:46:72:d0:b6:66:4d:e2:6c:7b:93:b5:a1:87:0b:a6:0f:
         1c:16:f4:68:f7:fb:67:d5:6f:d8:5e:d6:17:86:61:77:bf:82:
         0e:39:ef:dd:9b:46:f8:64:fe:bd:e8:f2:d6:5e:79:13:bb:66:
         c7:b5:2b:e2:8c:a4:70:83:72:60:09:bb:12:52:fe:e2:b9:9b:
         f8:c4:bb:0c:77:8f:3c:21:06:c1:3e:45:e4:78:ee:c9:c6:60:
         59:28:d0:e9:7d:eb:9c:bd:f1:f3:18:cf:f0:b6:5c:69:8d:1a:
         d4:73:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:41 2026 by rpki-client