Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
File:                     7D20FF46F3E511EBB8BBF720C4F9AE02.roa (raw, json)
Hash identifier:          xyL9vaBiGiRh4WvFs0MIb3j4FJIXwUneeWSkmubICJw=
Subject key identifier:   82:49:46:07:08:2B:19:84:7D:1F:21:3C:9C:F7:C5:4D:05:CB:40:90
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       05D3
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:50:16 +0000
ROA not before:           Sun 04 May 2025 23:34:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136500
IP address blocks:        103.90.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: May  4 23:34:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fdc8-9ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:cb:c3:25:f8:ef:76:21:3b:34:45:98:4f:
                    e4:b5:a0:57:e6:8e:9e:16:14:78:74:f8:9e:97:8a:
                    d1:7d:c4:91:6b:00:e1:75:eb:aa:97:bc:af:cf:3c:
                    d5:d1:a0:7a:bf:4c:f2:20:48:a2:34:12:1d:4d:54:
                    4f:43:06:6d:bd:d6:55:67:33:39:0c:19:e2:b9:7f:
                    fc:f1:e7:2b:2f:3f:07:f5:0c:61:98:ef:bf:23:42:
                    4c:33:50:f6:2f:a3:e1:71:64:22:96:3d:e6:22:80:
                    68:9b:14:4c:6d:35:cf:68:b1:ca:9e:27:66:d8:19:
                    85:89:a4:79:68:db:22:c3:80:0a:33:80:3d:c6:63:
                    7d:9c:84:32:67:2c:a5:e9:39:ec:d1:e6:a8:ca:16:
                    8c:21:b5:7b:e8:20:55:ab:00:27:5d:f2:2e:a8:cc:
                    9c:b7:f2:ce:70:da:f9:98:76:c2:8e:66:60:b0:9f:
                    37:6d:23:b5:f5:16:14:43:70:56:a9:a9:ef:d8:26:
                    0a:a9:37:2f:4f:2e:c3:1d:40:1d:46:1b:96:df:ad:
                    bb:36:e2:75:68:2c:b2:4e:7f:a4:11:c7:0d:9a:b5:
                    f7:99:4f:b8:8b:0b:55:a9:c6:3a:7a:bf:1a:18:c5:
                    78:de:10:0a:5e:58:0f:0d:3b:77:29:53:cc:a0:b3:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:46:07:08:2B:19:84:7D:1F:21:3C:9C:F7:C5:4D:05:CB:40:90
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:45:09:20:13:4f:ab:13:4d:97:aa:da:ff:1d:a0:50:e7:ee:
         2b:84:11:42:e0:4f:1f:75:5b:a1:e0:c7:21:9d:00:6b:94:1a:
         0c:28:1e:1a:0f:57:a8:50:38:16:84:37:4a:70:d3:ea:34:b8:
         6a:68:ac:26:eb:9f:2e:54:44:8a:55:d9:d5:89:e1:93:05:9b:
         ac:ef:c0:98:2f:ea:22:83:b2:db:43:28:0f:3a:aa:aa:3e:22:
         00:22:54:d1:cd:c0:c7:53:e1:e1:00:0d:48:2f:25:be:43:50:
         32:a4:1f:cc:da:59:25:6d:dd:d5:2e:52:c0:a7:ac:c2:42:13:
         f8:36:43:04:79:07:df:bb:67:43:6f:c8:0b:45:0c:18:13:ea:
         6d:11:92:54:3e:1b:bb:f1:25:3d:e2:1b:13:82:1a:0b:47:d1:
         94:5a:2a:88:bd:50:6d:d3:14:7f:e7:03:1f:28:ad:82:2b:08:
         18:b7:82:d7:c3:28:f6:a4:49:8d:85:13:3c:ee:8a:b6:f4:ee:
         ec:6c:b7:63:d1:ba:b5:2d:67:69:53:ff:46:b9:ef:74:26:7c:
         d3:36:48:bf:e0:ad:39:94:e8:17:a4:ff:0d:5a:d1:2b:33:07:
         a3:60:e6:12:9d:45:b2:ff:8d:f4:77:86:aa:26:e7:bb:ec:dc:
         30:a5:88:ee
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC
MDY4MzQ0NjAwHhcNMjUwNTA0MjMzNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmRjOC05ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3kLLwyX473YhOzRFmE/ktaBX5o6eFhR4dPiel4rRfcSRawDhdeuql7yvzzzV
0aB6v0zyIEiiNBIdTVRPQwZtvdZVZzM5DBniuX/88ecrLz8H9QxhmO+/I0JMM1D2
L6PhcWQilj3mIoBomxRMbTXPaLHKnidm2BmFiaR5aNsiw4AKM4A9xmN9nIQyZyyl
6Tns0eaoyhaMIbV76CBVqwAnXfIuqMyct/LOcNr5mHbCjmZgsJ83bSO19RYUQ3BW
qanv2CYKqTcvTy7DHUAdRhuW3627NuJ1aCyyTn+kEccNmrX3mU+4iwtVqcY6er8a
GMV43hAKXlgPDTt3KVPMoLPdIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIJJRgcI
KxmEfR8hPJz3xU0Fy0CQMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz
RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTFFNTQvQUZEMTdBMzZGM0UyMTFFQkFBQ0VBNzFEQzRGOUFFMDIvN0QyMEZGNDZG
M0U1MTFFQkI4QkJGNzIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ1quMA0GCSqGSIb3DQEBCwUAA4IBAQDBRQkgE0+rE02Xqtr/HaBQ
5+4rhBFC4E8fdVuh4MchnQBrlBoMKB4aD1eoUDgWhDdKcNPqNLhqaKwm658uVESK
VdnVieGTBZus78CYL+oig7LbQygPOqqqPiIAIlTRzcDHU+HhAA1ILyW+Q1AypB/M
2lklbd3VLlLAp6zCQhP4NkMEeQffu2dDb8gLRQwYE+ptEZJUPhu78SU94hsTghoL
R9GUWiqIvVBt0xR/5wMfKK2CKwgYt4LXwyj2pEmNhRM87oq29O7sbLdj0bq1LWdp
U/9Gue90JnzTNki/4K05lOgXpP8NWtErMwejYOYSnUWy/430d4aqJue77NwwpYju
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:26 2026 by rpki-client