Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa
File:                     DEA2CCF8050511EEB4D8141FC4F9AE02.roa (raw, json)
Hash identifier:          n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=
Subject key identifier:   24:B6:2E:DF:77:70:D4:4D:F8:3B:94:F0:14:2B:99:5D:50:29:87:20
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       05D4
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:39:26 +0000
ROA not before:           Sun 03 Aug 2025 00:06:07 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140525
IP address blocks:        103.141.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Aug  3 00:06:07 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4337e-5021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:cc:78:16:e5:95:27:ee:42:01:4c:df:a4:
                    52:b4:40:74:57:16:68:80:88:cb:f9:d3:30:0f:3f:
                    51:a0:78:30:e4:65:0a:f3:09:09:eb:e7:a2:6d:5a:
                    03:57:12:b5:cc:b6:1c:2a:8f:b0:b1:0f:ec:e5:fb:
                    13:38:ab:4e:7e:fd:cd:ce:4e:3e:96:00:eb:31:5d:
                    66:a1:d8:0b:1d:e9:f6:48:a0:71:c8:9f:7c:64:63:
                    44:9a:8f:c7:f6:ab:7e:83:a3:e8:1f:be:d9:b6:0e:
                    f0:cc:8c:fd:fd:c4:70:da:85:6d:53:c5:60:2d:f5:
                    bd:f5:f4:ac:91:62:ae:b0:a0:9d:ad:6f:aa:13:c1:
                    29:e3:dc:58:c3:63:a8:13:d7:65:d7:9b:5d:76:b2:
                    bc:b4:77:7a:b9:60:12:58:a0:66:8e:8e:14:39:46:
                    2b:d7:d9:c2:c7:82:64:d2:73:5f:e9:dc:79:3a:97:
                    f0:89:78:97:27:36:cf:02:34:46:77:e2:20:0e:f7:
                    ea:f0:c1:9c:e0:88:e3:70:36:a5:b5:77:c2:df:e8:
                    9b:45:b2:0e:c7:54:b7:c6:5a:0d:9e:1e:d0:a4:0c:
                    1d:27:fd:24:16:ce:04:21:0a:60:46:ff:7d:11:9f:
                    de:ff:1d:ef:74:b3:e6:8d:c9:87:07:84:1d:f2:e3:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B6:2E:DF:77:70:D4:4D:F8:3B:94:F0:14:2B:99:5D:50:29:87:20
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:ef:7b:d6:67:15:78:f3:a4:e6:c3:b5:4b:93:d6:14:5a:
         50:d1:5c:8b:b7:3a:db:09:fa:3e:47:c4:9d:ab:01:7b:7b:4e:
         eb:3e:32:47:96:ac:cc:33:aa:a4:ad:f9:cb:8a:86:8f:3d:a5:
         c9:6a:c7:a8:51:c3:47:ed:a7:8f:e3:d3:ee:bb:0b:68:25:1c:
         51:c5:17:70:72:0a:99:85:87:14:df:ee:86:7d:91:f4:23:a4:
         40:3d:a2:ec:c2:31:ce:21:1b:c8:5d:df:ec:38:5e:e1:14:e3:
         5b:4d:cc:e0:d2:4b:81:af:3a:e0:b2:56:ca:ae:5f:c6:4f:ac:
         91:5e:24:69:dd:7a:96:ca:e4:b6:fe:3a:44:e5:41:98:a6:d4:
         28:ad:01:53:96:b3:a8:a3:97:89:d6:62:ed:02:71:f2:4f:6b:
         89:e1:b9:37:76:e9:ff:02:85:58:05:90:42:9d:c8:cb:db:44:
         72:bd:20:3a:9b:ec:36:ce:76:b9:44:e7:ba:04:2d:97:e2:d7:
         c7:62:99:3d:4c:53:7f:91:51:93:99:bb:2e:d4:43:94:ad:09:
         0e:e4:01:34:51:60:db:97:de:b7:6d:eb:aa:93:ec:18:3b:38:
         28:47:70:51:30:91:96:6a:d2:c7:6a:c3:d7:da:2f:dc:3c:c0:
         8f:c0:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:48 2026 by rpki-client