Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
File:                     8304B142B34711EC90A6DA67C4F9AE02.roa (raw, json)
Hash identifier:          E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=
Subject key identifier:   00:E7:06:14:88:06:06:2B:26:D1:21:58:25:E7:8F:15:6B:5E:8E:AD
Certificate issuer:       /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial:       03F0
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:27 +0000
ROA not before:           Fri 14 Nov 2025 23:16:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139726
IP address blocks:        103.144.52.0/23 maxlen: 23
                          103.144.52.0/24 maxlen: 24
                          103.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
                          rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
        Validity
            Not Before: Nov 14 23:16:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a42a5b-27b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:3e:8f:9c:64:4c:49:61:78:10:ad:eb:27:
                    ae:c9:bc:49:0c:c1:8a:47:4d:6c:4d:6d:cf:0e:c0:
                    19:cd:95:6a:0a:6d:78:8a:0c:fc:8c:13:cb:f6:4b:
                    6c:f6:01:c4:fb:62:99:be:1f:7f:5f:fc:4e:3e:84:
                    5e:99:41:d3:70:10:ae:b2:06:00:8e:8c:b1:83:83:
                    ea:90:13:91:6b:c8:35:9b:41:c4:4d:cd:a2:3e:c1:
                    91:81:b7:7f:3a:45:8c:ff:2d:5d:45:f7:fc:a2:77:
                    cd:ff:c3:44:a3:70:00:76:27:ac:11:66:3c:fb:ba:
                    b1:90:1b:15:0f:88:ce:82:78:10:be:e8:8c:76:b5:
                    df:e0:33:62:8a:54:41:09:ce:26:1e:92:97:e2:e2:
                    03:13:3d:1a:08:45:63:e0:9f:b4:5d:70:21:8d:f2:
                    f3:92:56:86:ee:3d:6d:b1:35:c2:62:42:20:4a:f0:
                    91:d3:ce:ac:cd:f7:46:61:02:7e:7c:09:7a:a0:ad:
                    64:47:1a:ec:4b:13:a1:6b:26:4f:56:43:8f:15:f6:
                    0d:a0:8d:87:c8:47:40:3f:fb:dd:67:76:28:11:0b:
                    77:21:d9:7e:ea:86:e2:5a:75:00:58:39:5e:06:db:
                    37:b2:ad:a4:62:fd:89:d7:a4:b9:f8:ba:ae:a4:da:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:06:14:88:06:06:2B:26:D1:21:58:25:E7:8F:15:6B:5E:8E:AD
            X509v3 Authority Key Identifier:
                keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:75:95:11:06:45:3c:60:0e:d3:ef:aa:81:1f:59:bd:16:5c:
         d6:85:04:a7:55:6e:6a:3e:d0:f6:d5:02:41:5b:1e:e9:b7:bb:
         1e:0f:fd:54:6a:9f:11:f6:64:c4:85:3d:bc:f4:01:66:1d:d3:
         d3:5c:b9:41:da:f0:3b:d1:26:47:ca:8b:d3:c6:19:87:b4:e2:
         12:7b:1c:18:77:21:8d:04:f1:c1:c2:3c:2f:44:35:39:6d:f3:
         29:e1:14:52:d2:25:91:82:8c:4b:57:90:45:b4:8f:35:9b:4a:
         7f:5f:a8:f2:c9:ac:42:89:97:ac:74:57:14:e0:10:10:fa:a8:
         51:2a:d7:6e:5b:f3:f5:5a:8e:c1:8c:cd:a3:9d:32:34:b4:fc:
         11:c0:c2:f8:4a:86:bf:b3:3c:e2:c5:e9:44:99:05:bd:2f:91:
         95:63:88:cb:84:8e:00:99:7d:7d:ff:71:dd:ce:a7:a4:1a:6b:
         ad:89:29:9a:87:0d:0c:59:9f:9a:36:5b:81:87:6c:9f:af:dc:
         24:fa:1e:8c:ac:3c:55:0b:7a:bc:54:06:eb:f1:28:3b:46:cf:
         ef:00:20:3f:40:45:35:48:99:84:b1:3b:60:86:8c:e0:af:62:
         f2:6b:74:11:c5:3f:32:9a:81:8d:c2:03:78:f8:9c:cb:b6:25:
         e7:33:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:35 2026 by rpki-client