Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa
File:                     48B3316EFFC411EEB2369013C4F9AE02.roa (raw, json)
Hash identifier:          Pvc5GDrJlGSuNYbRyBpLm6q2hwwEqbNDXIDKhGgHHek=
Subject key identifier:   E0:A4:99:46:CD:23:68:5C:AB:9A:4F:94:22:F3:ED:5A:05:C9:BC:23
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0D42
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:40:00 +0000
ROA not before:           Thu 31 Jul 2025 18:57:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134599
IP address blocks:        103.140.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Jul 31 18:57:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a44fc0-0c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:12:39:64:0a:2e:d8:98:16:76:36:2b:cd:
                    ad:6e:0b:0b:d7:3d:45:df:8e:e0:60:1c:1a:65:16:
                    24:d8:42:cb:3f:64:e5:f2:fa:88:1d:5b:b7:d6:91:
                    bc:0d:3d:b1:03:e0:79:f3:95:53:76:62:5e:89:19:
                    44:4f:ed:db:5d:0f:1d:09:19:19:14:9c:c3:89:74:
                    8b:ee:f1:22:61:55:81:b2:61:7c:c7:02:29:07:5c:
                    d5:0b:8d:c1:a9:ba:7c:93:12:86:49:24:db:86:78:
                    a9:0c:18:88:2d:fa:17:3c:6c:87:66:af:48:ff:e4:
                    47:9a:55:cf:ac:a2:00:49:7c:cb:e7:a5:1b:d1:a2:
                    6b:7a:df:59:ee:b8:72:a1:ad:b0:72:18:c8:96:5d:
                    03:26:c0:18:9f:aa:9c:30:4f:2f:87:22:81:86:8e:
                    9e:35:1a:ea:80:50:7a:db:a3:cc:56:8f:10:79:b5:
                    c7:94:12:48:c9:4b:77:8c:b4:99:f0:07:2a:b8:a4:
                    7e:55:bb:ad:d2:54:38:ea:0e:d9:bf:c6:0a:13:b7:
                    80:ab:43:00:ab:a9:7a:c7:e1:26:7d:c6:51:01:8f:
                    c4:c9:9d:52:c8:5c:c8:70:53:7a:0f:78:bc:15:4e:
                    d3:2a:74:33:2e:c8:7e:fa:96:8d:02:cc:d9:fe:38:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:99:46:CD:23:68:5C:AB:9A:4F:94:22:F3:ED:5A:05:C9:BC:23
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:c7:44:84:d9:6f:c1:27:4c:11:a8:70:c3:0a:76:67:32:
         0c:c3:1f:cc:46:81:97:9f:89:24:d3:89:88:00:e6:35:78:47:
         f5:b1:4a:53:29:75:12:23:98:b3:b1:a7:3e:03:8d:c9:0e:51:
         85:5d:c0:c9:e3:c0:57:b5:bd:e1:e0:64:be:14:cd:95:7d:30:
         bd:31:27:2f:b6:e3:95:92:ea:0b:49:53:ac:74:96:10:8a:20:
         ab:f1:cd:cb:0a:6b:9e:ba:6f:60:14:a8:f9:2b:97:88:eb:3a:
         f8:8f:b8:be:a5:b2:46:8c:d5:42:87:99:b2:4d:8a:0a:57:bf:
         5b:89:16:dd:5f:af:a7:2c:84:6a:40:9d:c4:9e:31:04:09:6d:
         67:ec:e0:3e:02:ea:fc:c8:99:48:4a:3a:91:29:6e:92:03:99:
         75:7b:fe:dc:8f:cb:1a:8c:0d:60:3e:13:b9:c9:be:bd:57:3b:
         19:5b:fc:8b:b1:95:fe:8a:60:fc:e5:b4:92:f2:75:df:1c:ec:
         26:55:3a:26:9e:cc:f2:7e:1a:91:3b:4c:19:6b:d4:21:f5:ed:
         45:6f:ec:59:21:c6:21:90:d0:e4:18:97:06:07:6f:5a:0f:1e:
         c3:d2:a4:77:ea:c5:af:58:ff:a6:71:f7:28:81:5a:db:c8:98:
         0c:13:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:42 2026 by rpki-client