Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa
File:                     F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (raw, json)
Hash identifier:          rcdSLdQwLYJ2Vz+RACiGDvkwIFouXEi+FG0VRiUjp4o=
Subject key identifier:   22:07:8E:C1:56:4D:66:2D:0E:66:9A:0E:83:5B:B9:08:67:79:1B:56
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       133E
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:46:04 +0000
ROA not before:           Fri 22 Aug 2025 17:25:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58715
IP address blocks:        103.113.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4926 (0x133e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Aug 22 17:25:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4431c-09d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:5a:cb:4c:b0:e4:cb:d6:3c:d6:a7:14:14:
                    fd:6b:c8:4f:7f:01:41:0b:12:4d:2d:dc:c7:db:1f:
                    7d:a7:5e:8e:6b:ab:37:40:89:73:f3:b4:80:4d:51:
                    50:6d:cf:cc:63:d6:b7:66:37:55:8d:72:ee:9d:06:
                    60:9c:04:a5:ca:08:07:4b:ca:7c:d8:da:be:6c:6a:
                    b1:c1:08:0a:38:dc:e3:8d:43:a3:c9:cb:02:ad:5a:
                    cb:81:b4:6d:b3:2d:2e:79:3a:86:90:ca:0f:8b:ae:
                    6c:c9:d9:58:d1:85:f5:f4:9d:b1:02:1f:63:6b:b7:
                    f7:f5:f9:d1:18:ad:0f:eb:80:46:b0:61:c8:d8:b8:
                    2b:c0:60:ab:8a:3f:1b:ae:b4:66:f3:27:70:05:03:
                    67:62:90:da:27:ae:a8:f7:c0:0b:46:68:e4:41:37:
                    95:14:4e:f3:c3:25:53:61:3a:75:ae:03:c4:29:aa:
                    69:1e:89:37:ed:78:58:6c:a3:38:05:bd:a8:01:c5:
                    62:8f:b6:a8:ef:93:f3:b0:9d:17:13:7e:da:8a:b9:
                    19:7d:d9:04:51:95:6f:b7:3b:f8:34:74:55:16:7e:
                    62:4f:67:da:66:3a:51:bb:21:e7:c3:ca:ce:ea:d1:
                    c6:1d:00:c3:e5:89:8f:19:6f:b4:38:0e:cb:62:0d:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:8E:C1:56:4D:66:2D:0E:66:9A:0E:83:5B:B9:08:67:79:1B:56
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:d9:d3:89:c9:b9:6d:ff:96:3d:03:4f:e8:20:94:a5:31:
         ad:07:c0:c5:96:3a:d6:3c:5b:85:16:6a:ab:7d:fc:24:77:90:
         66:3e:71:40:fa:7e:ce:18:f3:09:94:00:2a:63:cf:dc:41:f1:
         8e:43:9e:f7:fd:fa:48:ec:0c:59:b5:e6:84:c9:d8:e9:4d:bb:
         08:66:41:5f:7c:0e:f0:1d:0d:9a:04:1a:4b:6a:2f:93:3c:6a:
         a5:b4:52:ac:3e:67:a5:24:27:21:ec:f1:8a:4f:cc:a1:95:77:
         69:42:2c:b5:d3:16:fd:30:a9:b1:36:60:36:06:38:86:88:e6:
         47:34:f4:bf:16:fa:4b:40:2c:fb:09:1a:88:0e:53:0a:2e:08:
         ca:1c:38:29:ec:b5:6f:73:84:b3:2d:f6:02:72:b4:a3:86:c8:
         dd:c1:a6:93:e4:dd:d4:8b:d8:be:a6:b7:c4:c9:8d:f4:1a:29:
         51:85:6e:94:e9:fb:07:7d:d0:78:f3:e3:83:e3:33:3a:04:95:
         fc:42:cf:5b:da:20:ad:fb:a4:1e:fb:8d:14:fd:30:d2:1e:17:
         c8:41:cf:6d:e0:fd:22:11:9c:49:8d:47:18:7e:9b:a7:75:88:
         e3:80:2c:c2:ae:8f:0a:3a:c7:c2:e3:0f:80:6e:66:1a:dd:07:
         cb:8e:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:10 2026 by rpki-client