Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
File:                     A915A3543FEC11EE99AC0F43C4F9AE02.roa (raw, json)
Hash identifier:          kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=
Subject key identifier:   A3:7B:DE:7F:9D:A4:E6:08:BC:4B:11:22:99:C1:D6:59:1B:32:C4:92
Certificate issuer:       /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial:       01E3
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:37:11 +0000
ROA not before:           Sat 23 Aug 2025 04:09:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151646
IP address blocks:        103.248.140.0/23 maxlen: 23
                          103.248.140.0/24 maxlen: 24
                          103.248.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
        Validity
            Not Before: Aug 23 04:09:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3eca7-2aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:88:88:8e:ae:0b:19:a3:c7:f4:26:f2:47:
                    03:29:8e:71:15:b4:b5:b7:df:06:e7:1a:7b:eb:eb:
                    f3:1a:e5:61:27:ca:ea:82:a1:38:24:9e:88:fe:db:
                    b5:8b:79:5a:ef:42:85:0c:db:6a:de:0f:fe:ef:6e:
                    91:29:a9:6b:32:07:fc:81:74:ae:8c:97:74:2a:95:
                    97:99:ea:52:4c:c3:5d:ba:f8:92:0f:dd:48:a6:13:
                    f6:a3:94:50:b8:30:34:31:dd:41:34:2b:bc:44:2f:
                    fb:81:a0:96:a2:4d:3f:b3:4c:55:04:87:b4:45:9a:
                    4a:a1:72:75:6e:d1:89:4c:2c:f6:a4:5c:38:92:99:
                    c0:97:e3:75:26:60:30:6a:5a:46:71:fe:1d:d3:8a:
                    2b:1f:7c:de:d8:26:3b:2f:34:d8:2c:06:89:d4:ac:
                    24:c9:a1:5e:7a:82:20:ad:46:02:b1:96:5c:ba:b4:
                    74:e8:92:53:6c:5a:33:6d:fb:49:a6:b4:33:80:9f:
                    ff:00:12:d7:54:f0:28:c1:cc:21:ba:10:ea:7e:e7:
                    be:86:62:92:cb:18:de:4a:30:d4:1a:8b:05:b5:b3:
                    71:0b:d4:9b:9f:bd:69:cd:4d:8e:18:68:94:7b:5c:
                    83:71:2c:23:27:20:0f:9b:ac:96:0f:d6:c7:06:36:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:DE:7F:9D:A4:E6:08:BC:4B:11:22:99:C1:D6:59:1B:32:C4:92
            X509v3 Authority Key Identifier:
                keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:90:3a:07:40:92:74:7d:96:ca:37:26:d5:b0:04:5d:8e:cc:
         d4:ae:f7:7c:a8:99:a3:29:d4:0d:88:d4:3c:3b:8c:18:20:70:
         80:87:5d:a8:4f:5b:90:41:5c:af:6b:c7:b0:6d:75:f4:95:86:
         e1:be:36:6d:7f:cc:0f:f7:dc:d1:e7:7a:c9:be:ff:79:4c:37:
         4e:d3:a8:54:1e:cb:f0:ff:bb:65:10:65:4b:23:9c:a7:be:b8:
         18:30:62:13:33:26:14:d3:b8:da:85:6b:b3:15:8a:89:0c:48:
         10:4c:68:9a:56:33:7d:cb:65:d2:b3:5e:06:65:8e:d5:e2:45:
         44:5e:5e:ba:57:d9:e0:91:e0:b9:42:b0:e3:2e:02:76:8b:c1:
         5e:d9:ed:45:f4:53:34:0f:3b:cd:27:2c:fe:61:1c:26:94:85:
         75:f4:7b:e1:e9:17:1c:38:19:cd:55:e9:c0:8d:da:f6:2f:01:
         f5:0d:5b:3d:24:de:2a:9c:6e:10:22:d7:cf:46:7d:74:d5:e1:
         6b:57:2f:e5:6f:19:20:c6:fb:d9:30:3b:bb:3a:30:91:f5:3d:
         e7:34:6f:1c:d3:0b:dc:2f:12:d6:94:4c:d4:63:9b:a5:72:34:
         27:c5:13:cc:0b:b0:23:97:0e:b7:8c:9f:42:24:2c:fb:b0:b9:
         d1:8c:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:53 2026 by rpki-client