Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa
File:                     25E96E4C2F6511F0A4430347C4F9AE02.roa (raw, json)
Hash identifier:          VGC3s72kCEqeNjrQgkhJsVpMANzKAnqf/Eot+fUvV1c=
Subject key identifier:   D8:FD:DC:32:2D:9C:65:CC:FB:F3:A9:DC:12:6A:95:32:EC:77:F6:D7
Certificate issuer:       /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Certificate serial:       9A
Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:31:19 +0000
ROA not before:           Tue 15 Jul 2025 08:14:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139225
IP address blocks:        103.140.3.0/24 maxlen: 24
                          2001:df0:a280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
                          rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
        Validity
            Not Before: Jul 15 08:14:55 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59127-15f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:97:0c:74:1b:9f:76:d3:e2:59:fe:7a:ff:
                    4c:73:33:8c:a0:c5:18:77:bf:32:2c:41:99:da:b2:
                    a0:08:28:ce:7e:f5:10:29:c5:09:10:c1:37:6f:37:
                    14:f6:80:8b:10:e1:6f:a7:90:7c:e7:e2:71:fe:07:
                    70:15:ed:18:bb:eb:2d:39:36:e2:4d:69:7d:48:a8:
                    7b:e3:d9:d5:23:08:fd:e8:82:ff:11:13:57:d8:3d:
                    57:76:f6:dd:f4:a7:ee:cf:51:19:0d:c5:4f:10:98:
                    3b:13:9f:68:be:ee:1f:f4:fa:d0:1c:a1:e6:3b:65:
                    d0:fa:fd:2d:77:ed:c2:ba:ae:98:0d:e7:ec:9d:12:
                    03:ea:c4:3f:a9:15:9d:e7:9f:3e:d5:f1:54:62:4c:
                    d4:40:cc:7d:07:0f:f8:c9:89:0b:1c:13:39:97:0c:
                    7b:b0:88:7a:a2:5e:9a:b2:f5:70:17:69:57:3e:a7:
                    90:a3:be:c7:cf:d1:f0:9a:16:59:87:dd:ab:33:a7:
                    a1:66:de:43:17:f6:0b:ff:e3:04:60:46:c4:61:f9:
                    7b:4f:ce:96:44:a7:67:71:20:1c:b7:11:71:65:7d:
                    97:15:7b:30:a2:9e:e9:d2:ac:83:ea:66:eb:55:4f:
                    0c:6f:4b:48:b7:1d:6c:36:de:b8:58:32:f2:79:00:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:DC:32:2D:9C:65:CC:FB:F3:A9:DC:12:6A:95:32:EC:77:F6:D7
            X509v3 Authority Key Identifier:
                keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.3.0/24
                IPv6:
                  2001:df0:a280::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:44:67:54:ac:d1:68:66:c4:28:86:d4:f2:d8:f3:ab:b8:b0:
         4a:fe:cc:3f:42:3f:d2:ed:33:01:3a:67:c1:ad:1a:f8:24:5f:
         34:97:dc:ca:74:29:90:37:a5:2c:cb:51:cb:45:6c:9e:4f:ea:
         2f:23:28:6a:a5:4d:8b:5f:7e:52:de:d4:12:ba:cf:6d:e2:ae:
         3c:41:b4:5b:fa:b1:83:d0:c1:75:56:ac:c8:d1:b9:22:4c:51:
         dd:5d:cb:59:ad:8f:f0:97:ae:f7:bb:b2:fa:92:c8:b7:43:93:
         8f:66:65:ee:04:a6:c1:17:bb:0c:9e:f4:22:8f:ed:ea:58:ff:
         05:fe:1f:3e:07:ce:fd:69:68:17:fb:02:a0:53:43:14:e8:55:
         e0:1a:ab:0b:70:31:ec:d9:49:f4:eb:fb:70:8a:7f:7c:91:ba:
         ec:ea:d2:3a:2d:d5:37:1e:b0:41:fb:9e:52:ed:f3:cf:04:91:
         81:a4:94:6b:25:2c:a6:73:b5:3f:cb:a1:26:93:41:3d:14:57:
         bf:7a:43:78:db:e4:d0:1d:42:4b:59:65:ed:3b:ab:aa:6f:f0:
         27:aa:1c:a4:b2:4e:5c:27:02:0e:5b:ee:a0:78:17:a9:10:01:
         fa:b1:61:1f:70:e0:99:6b:69:a3:d4:f7:51:23:88:d7:2d:83:
         c7:27:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:46 2026 by rpki-client