Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/F3BEC03CE13B11F090F650ED6F6F56BC.roa
File:                     F3BEC03CE13B11F090F650ED6F6F56BC.roa (raw, json)
Hash identifier:          73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=
Subject key identifier:   32:6C:95:95:10:18:93:EF:1C:E8:B5:F4:EA:DB:E7:16:85:67:54:92
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       07C2
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/F3BEC03CE13B11F090F650ED6F6F56BC.roa
Signing time:             Sat 07 Mar 2026 13:44:19 +0000
ROA not before:           Sat 07 Mar 2026 13:44:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138643
IP address blocks:        103.158.160.0/24 maxlen: 24
                          103.158.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Mar  7 13:44:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69ac2bb3-1c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:87:bb:9a:25:2b:89:17:3a:a7:d1:5c:e4:
                    79:69:07:31:f7:bd:c3:09:35:21:8e:5f:dc:47:b8:
                    d8:83:f4:d0:d7:85:b2:98:b9:c5:6d:97:78:af:7a:
                    03:19:88:df:2b:81:7e:67:38:78:f5:3c:49:5c:2d:
                    cf:85:0f:dd:ef:e5:b7:f3:7b:8c:0d:0e:56:e1:90:
                    99:b0:a9:e7:13:28:7d:b7:3e:c1:c5:e6:a6:3d:37:
                    ea:70:e4:a3:d0:dd:dd:97:56:01:51:a8:8b:f1:0b:
                    f5:4b:1d:23:9e:89:50:e1:99:82:8a:d7:5d:18:ea:
                    dd:a2:5b:2d:c1:3f:4d:6c:78:a9:8a:bf:b5:08:69:
                    62:40:81:1c:97:10:05:1c:25:de:11:2c:f4:0c:9a:
                    64:fc:97:03:9c:2b:52:32:45:74:b6:90:9b:d9:d5:
                    fa:b8:20:d5:b4:9b:96:a4:58:82:e2:65:0e:23:50:
                    ae:51:d6:37:f5:a4:b2:1c:33:78:e9:28:21:8b:37:
                    1e:be:43:ec:e5:98:5e:ce:bf:22:6a:66:85:79:b1:
                    e4:e7:b5:ec:8b:3d:d0:e4:c1:7f:12:0b:01:f0:56:
                    3d:ca:13:44:93:09:a8:bc:35:f8:9d:80:55:3c:57:
                    11:da:5f:a6:c6:d6:7d:e6:2f:3f:24:2b:36:a6:a9:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:95:95:10:18:93:EF:1C:E8:B5:F4:EA:DB:E7:16:85:67:54:92
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/F3BEC03CE13B11F090F650ED6F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:b0:08:65:d6:f8:00:c0:13:1f:90:08:21:0c:4a:78:35:d2:
         f6:05:e2:57:d0:64:48:e9:7f:b6:50:c1:92:8d:78:2d:9f:22:
         b5:30:34:55:2f:a8:8a:3e:fa:4b:19:f5:57:22:89:d8:9b:c2:
         3e:25:0d:63:34:af:7a:05:04:ee:e1:a3:12:99:6a:5a:fc:2e:
         6a:e7:34:3f:8a:e6:a5:b1:ff:04:a5:40:22:ae:c1:b1:56:ed:
         89:f4:f7:b2:6d:03:b2:56:9f:e0:04:fc:d8:ad:0b:6c:c8:d6:
         1e:5e:a0:84:96:0a:bb:7e:3f:8f:6d:cb:1e:a7:78:d9:ac:c9:
         d7:9c:db:f1:a1:00:f6:c6:1d:4b:9a:fa:4c:9c:da:e2:65:e1:
         41:6e:68:ba:ee:ac:54:93:2c:82:f8:4f:96:cd:fa:72:ef:f2:
         ea:8b:3f:bb:56:ce:c1:e5:ba:98:1e:f8:f4:e5:c1:b6:55:eb:
         a9:c7:7e:2b:62:16:d8:b3:93:93:ba:ff:dd:77:93:3f:36:f5:
         b7:6f:89:39:ff:80:97:1e:31:98:e3:33:63:9f:b4:d5:e7:cd:
         ff:61:18:00:21:61:36:f2:96:f9:db:8a:1a:35:19:2e:64:67:
         42:09:c5:13:77:6c:57:94:29:1e:ee:4f:8e:10:64:63:20:d6:
         cd:c8:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:43 2026 by rpki-client