Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/F7A56092245811F18BC4B892C3833773.roa
File:                     F7A56092245811F18BC4B892C3833773.roa (raw, json)
Hash identifier:          PxeJ1lf7ieLA1QEf1jfBSGyZlZWAy7sNjtqIkyVYwpE=
Subject key identifier:   B0:6C:CC:70:44:1E:DC:98:DB:FE:CE:50:60:E5:75:D6:AB:2F:9A:A4
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       192E
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/F7A56092245811F18BC4B892C3833773.roa
Signing time:             Fri 20 Mar 2026 12:33:16 +0000
ROA not before:           Fri 20 Mar 2026 12:33:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140687
IP address blocks:        103.71.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6446 (0x192e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Mar 20 12:33:16 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69bd3e8b-5a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:6b:e1:77:6c:f0:20:4a:6a:fd:80:d1:d9:
                    64:6d:ec:1c:4d:38:6f:b1:f4:a4:fe:87:79:fb:c0:
                    b4:8f:0c:50:a1:a1:30:7e:ea:6d:43:0d:49:61:3c:
                    5c:89:8b:3e:b9:69:0a:16:5e:49:c5:43:e6:f1:25:
                    05:7a:e6:4e:d3:d7:3b:67:70:7d:3a:5b:67:c3:16:
                    4b:79:8c:b5:1c:e3:9b:ee:62:de:f6:ef:e1:e1:40:
                    8c:05:a5:55:12:04:43:62:e5:d2:5e:57:90:0c:ed:
                    a6:3d:95:ad:3d:72:89:00:6d:3c:f1:89:25:a7:fb:
                    1c:ec:a3:eb:bd:f6:ad:cc:e5:1f:a1:67:b9:bf:26:
                    b3:df:92:e3:8e:c1:32:fb:de:eb:83:14:54:12:bf:
                    c2:83:75:85:b2:05:23:c0:73:85:56:fa:4c:2a:0d:
                    10:99:06:c1:ba:42:b3:f1:20:fc:b1:d7:c3:bc:54:
                    a6:a3:8c:c8:32:45:be:1c:8c:17:49:f4:5f:f3:ce:
                    50:0d:74:38:12:a0:6b:4b:c0:b7:67:63:ce:14:a6:
                    c2:fe:6c:25:65:ac:67:15:03:88:a9:a9:b5:ec:bd:
                    69:cd:84:94:db:a5:20:c4:50:9b:94:50:37:79:81:
                    e7:7d:fa:9e:29:ad:c9:cc:08:bc:b5:a7:4a:d0:10:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6C:CC:70:44:1E:DC:98:DB:FE:CE:50:60:E5:75:D6:AB:2F:9A:A4
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/F7A56092245811F18BC4B892C3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:68:7a:fe:ae:77:47:88:43:71:30:43:ad:bd:9b:36:ac:02:
         d2:31:64:df:2b:0c:64:8f:be:fe:c6:80:81:e6:b4:ff:b1:16:
         08:dd:61:4f:a1:00:d0:bc:f5:e2:ba:d2:46:c7:47:d8:81:78:
         51:86:0e:21:cb:bf:ec:17:f1:19:30:e4:02:c9:ae:6a:b5:ac:
         23:21:78:f3:d2:15:cb:12:de:78:11:26:32:df:a9:75:12:63:
         ac:27:7d:b7:43:c7:b5:39:76:e1:9c:28:81:71:ae:d6:fa:48:
         35:bd:eb:ac:36:ce:d5:61:5f:2d:5c:df:5b:08:13:d3:c7:a0:
         bb:f6:94:4e:ba:1e:39:1a:df:cb:02:42:a4:30:86:ba:e3:5f:
         d3:c8:20:0a:48:3b:f7:27:aa:f8:c8:1f:d2:3e:f3:be:e6:44:
         0b:17:06:9a:a2:ca:1e:4e:4b:84:4a:74:40:c5:8c:fa:98:84:
         12:b5:86:c0:9b:04:fd:a4:54:61:c6:2d:14:78:1b:8b:8a:a5:
         14:e9:a6:53:73:16:56:9b:b3:0f:14:2f:1e:fc:4d:5d:a8:27:
         b4:8d:74:35:31:3f:93:3a:5f:2c:e8:f1:1d:ea:c6:b3:be:4f:
         1a:67:36:ee:df:06:02:af:c3:8b:cb:b9:ff:a9:2f:b1:9a:5e:
         b0:ed:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:41 2026 by rpki-client