Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa
File:                     F71189FC0C3211EF98143258C4F9AE02.roa (raw, json)
Hash identifier:          jBwHsT2S1X/NsQ8ZVOoh15AYRCQCmxO3Q5CcJen4IUs=
Subject key identifier:   DC:49:CE:51:7A:30:1D:07:C4:BF:0F:BD:B2:E1:3D:9D:16:BF:7F:54
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       01A3
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:39:19 +0000
ROA not before:           Fri 21 Nov 2025 03:20:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55649
IP address blocks:        103.215.40.0/22 maxlen: 24
                          144.48.216.0/22 maxlen: 24
                          223.255.240.0/22 maxlen: 24
                          2001:df0:a300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov 21 03:20:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59307-c8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:c5:fc:33:4f:d9:0e:8a:57:26:f1:0b:4b:
                    dc:74:e6:4f:97:40:bc:96:cf:b3:f6:b4:59:f0:1e:
                    e2:c9:6b:f0:1c:b4:dc:7a:fc:45:82:5f:a0:39:ac:
                    1e:23:32:a4:5c:20:b8:ea:a0:8a:b6:4d:87:4d:24:
                    8b:0c:77:8b:cb:75:3b:39:e0:af:a4:c2:5f:1b:c0:
                    bd:5d:c4:b5:bf:1d:cb:ab:95:38:70:78:75:df:2a:
                    d1:ac:78:95:34:cf:32:14:ca:9d:4c:db:24:12:9f:
                    76:af:12:34:91:3b:14:7d:24:db:65:13:03:ff:b2:
                    13:5e:98:fb:c3:11:c7:10:12:fe:b8:58:60:49:51:
                    0d:1f:fd:28:c2:31:a7:5a:27:ec:c7:e5:99:3a:b4:
                    99:fc:bf:5d:d3:fb:e7:0e:f7:a5:ee:3b:99:8a:af:
                    b3:58:82:c1:32:2c:25:51:3f:8e:17:ef:fc:5e:d7:
                    d5:f0:b6:81:3b:61:ee:57:68:ec:2c:02:28:2d:07:
                    0d:3c:e2:56:8a:d0:e0:55:6b:89:d7:7c:41:20:0f:
                    33:95:73:3a:20:43:a2:26:e9:f4:4d:4b:cb:7c:e6:
                    76:17:fe:1f:8b:89:ea:54:d9:91:84:73:70:fd:92:
                    8e:f8:ac:02:d1:9a:34:f1:59:3a:10:94:b8:e8:a6:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:CE:51:7A:30:1D:07:C4:BF:0F:BD:B2:E1:3D:9D:16:BF:7F:54
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.40.0/22
                  144.48.216.0/22
                  223.255.240.0/22
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:e3:d3:9a:fb:68:48:b8:6d:26:f0:62:73:3a:cc:dc:f6:
         78:85:b5:59:59:f8:18:12:d9:dc:75:36:d4:25:c6:33:e3:22:
         a1:7c:30:4a:ec:73:3c:01:6a:9f:dc:d6:b5:23:03:54:3a:8c:
         3c:81:99:49:c3:dd:c6:21:97:cc:31:f4:c2:ee:8a:5b:e7:a5:
         e4:b3:89:9c:dc:e6:02:5a:08:47:5b:f8:5d:83:bc:0a:d5:80:
         c9:ab:ea:7a:0b:36:4a:82:46:1f:2d:d6:86:05:aa:ff:7b:a2:
         28:27:65:8e:b3:aa:ad:04:e8:89:22:9b:8c:5b:4e:f4:4e:9e:
         d1:fa:55:70:fb:ff:96:14:d4:b8:ea:4a:a3:17:3c:41:0a:8a:
         a9:39:27:7f:3a:51:e4:ca:cf:7a:99:10:c1:b0:7a:cc:08:d8:
         28:bc:f9:be:59:6c:fc:c4:05:88:00:83:39:c3:b6:9d:ff:ea:
         01:51:2b:37:ba:1e:44:31:29:b3:15:61:cd:aa:fb:33:3f:ff:
         9c:35:e1:a7:53:a4:2b:87:14:c6:48:cb:3a:3e:1b:cd:3f:9f:
         32:cf:ef:bb:78:2c:c6:4f:4e:3b:17:eb:69:7c:88:57:07:7c:
         6f:23:cf:43:35:80:7d:7d:99:a9:80:f0:6b:42:b7:ff:13:78:
         5f:24:b2:c6
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ2RjYxMTAvBgNVBAUTKDhERTgyRUZGNjIzNEQ3OUI3QTY1RkE2MEEwNTMwMDdE
QTgyODFGQ0MwHhcNMjUxMTIxMDMyMDUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTMwNy1jOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxn7F/DNP2Q6KVybxC0vcdOZPl0C8ls+z9rRZ8B7iyWvwHLTcevxFgl+gOawe
IzKkXCC46qCKtk2HTSSLDHeLy3U7OeCvpMJfG8C9XcS1vx3Lq5U4cHh13yrRrHiV
NM8yFMqdTNskEp92rxI0kTsUfSTbZRMD/7ITXpj7wxHHEBL+uFhgSVENH/0owjGn
Wifsx+WZOrSZ/L9d0/vnDvel7juZiq+zWILBMiwlUT+OF+/8XtfV8LaBO2HuV2js
LAIoLQcNPOJWitDgVWuJ13xBIA8zlXM6IEOiJun0TUvLfOZ2F/4fi4nqVNmRhHNw
/ZKO+KwC0Zo08Vk6EJS46KYWJwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFNxJzlF6
MB0HxL8PvbLhPZ0Wv39UMB8GA1UdIwQYMBaAFI3oLv9iNNebemX6YKBTAH2oKB/M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDZGNi9GNEExQjJEODBD
MTgxMUVGOUZGNzAxNDFDNEY5QUUwMi9qZWd1XzJJMDE1dDZaZnBnb0ZNQWZhZ29I
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2plZ3VfMkkwMTV0NlpmcGdvRk1BZmFnb0g4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ2RjYvRjRBMUIyRDgwQzE4MTFFRjlGRjcwMTQxQzRGOUFFMDIvRjcxMTg5RkMw
QzMyMTFFRjk4MTQzMjU4QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY
BAIAATASAwQCZ9coAwQCkDDYAwQC3//wMA8EAgACMAkDBwAgAQ3wowAwDQYJKoZI
hvcNAQELBQADggEBAKF449Oa+2hIuG0m8GJzOszc9niFtVlZ+BgS2dx1NtQlxjPj
IqF8MErsczwBap/c1rUjA1Q6jDyBmUnD3cYhl8wx9MLuilvnpeSziZzc5gJaCEdb
+F2DvArVgMmr6noLNkqCRh8t1oYFqv97oignZY6zqq0E6Ikim4xbTvROntH6VXD7
/5YU1LjqSqMXPEEKiqk5J386UeTKz3qZEMGweswI2Ci8+b5ZbPzEBYgAgznDtp3/
6gFRKze6HkQxKbMVYc2q+zM//5w14adTpCuHFMZIyzo+G80/nzLP77t4LMZPTjsX
62l8iFcHfG8jz0M1gH19mamA8GtCt/8TeF8kssY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:16 2026 by rpki-client