Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
File:                     45399802215111F0B94CA13FC4F9AE02.roa (raw, json)
Hash identifier:          dqhqgG1ahTq17N+e11+nZjz13+WNxO29JRyPa9rncV0=
Subject key identifier:   4C:D7:82:CB:94:62:E1:93:65:FF:2E:54:0A:33:EB:47:95:5B:1D:E5
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       0233
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:05:22 +0000
ROA not before:           Sat 17 May 2025 03:41:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151197
IP address blocks:        103.140.194.0/24 maxlen: 24
                          103.140.194.0/25 maxlen: 25
                          103.140.194.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: May 17 03:41:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a51a92-9e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:54:5c:a4:90:7a:48:dd:2c:c5:3f:4d:24:
                    45:ae:34:ba:f1:a9:89:68:e1:5a:99:c8:32:99:a3:
                    90:ae:fa:c1:15:9d:ab:0d:48:20:53:c2:c6:98:0c:
                    f0:e2:3c:8e:92:01:8d:46:59:3f:ed:5e:43:e7:59:
                    0f:cc:79:72:c1:98:54:42:ef:11:da:f0:00:9f:dc:
                    12:66:a9:4e:5f:c0:3c:b1:4e:bf:5f:ae:60:59:cd:
                    10:a5:cd:59:19:a8:da:cd:8a:45:4e:91:38:f5:dd:
                    57:3a:f5:8a:a4:70:03:d1:b6:be:5d:79:ea:49:fe:
                    49:85:9b:7e:fc:04:de:22:cb:39:0e:49:2a:14:fa:
                    0a:28:bf:2c:18:f7:c3:45:a1:d8:dc:60:dd:6a:1f:
                    5b:a7:fe:a7:49:17:1f:03:1d:87:fa:e4:9c:dc:b4:
                    50:44:89:19:91:33:81:7b:4c:ce:64:58:17:b1:61:
                    39:22:61:34:b7:cc:e2:0c:cd:98:af:e8:dc:fa:d4:
                    b5:6e:28:85:6f:ad:ac:cd:c8:fb:67:b9:ec:a9:fa:
                    af:20:d7:b6:85:9a:c6:af:e6:54:e4:1f:bf:9e:a5:
                    6f:b8:d5:52:98:e3:b9:bd:b7:46:91:b2:6f:12:13:
                    b3:c2:33:01:19:97:dd:53:e9:cb:95:98:c6:b6:40:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:82:CB:94:62:E1:93:65:FF:2E:54:0A:33:EB:47:95:5B:1D:E5
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:cf:9d:89:b0:e2:91:30:ea:a8:1d:de:78:36:f8:e6:06:21:
         ce:38:3f:fe:cd:1b:b7:50:a1:fb:4c:41:98:83:65:f4:5f:16:
         d4:c2:de:a9:83:fb:69:19:f4:63:a3:c4:9a:dc:72:32:f9:8b:
         de:72:b1:86:25:68:54:39:13:57:00:da:cd:f6:6a:8c:e8:4d:
         70:f1:47:30:1c:d1:88:d2:38:9c:76:8a:c2:96:0f:dc:9d:a6:
         a1:60:03:43:b3:2e:35:79:b8:46:de:c5:93:00:cd:f5:07:45:
         9d:0a:b1:77:ef:ee:f2:76:dd:a2:70:b2:d6:13:9f:18:33:f9:
         44:8c:5b:7b:68:bd:6e:58:3b:c3:a6:7b:ee:94:37:52:cd:90:
         5a:ad:72:f2:ad:74:40:54:c7:45:8e:76:0e:a7:ab:5f:97:d1:
         a6:2b:41:34:17:37:f3:e0:e8:da:c8:c9:90:27:82:7b:44:a0:
         32:51:20:db:64:36:ec:21:03:98:88:83:7a:25:e4:61:40:0f:
         c8:2a:4d:7c:a3:52:68:d7:fa:7d:41:36:82:88:3e:38:4e:03:
         4f:59:de:6b:bc:c0:79:62:23:9b:a6:09:b7:dc:ae:ba:9e:b9:
         cd:5c:c8:df:be:6b:7e:20:dd:93:88:10:00:a5:15:36:14:47:
         9b:81:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:48 2026 by rpki-client