Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa
File:                     34BA37F6976E11EFAEB6A258C4F9AE02.roa (raw, json)
Hash identifier:          GuBhGybCWeyGqqI+tDy//PPqxlsEHSc9ReRR3T+GKIE=
Subject key identifier:   FA:EE:31:53:43:A4:D1:6F:BA:63:50:58:53:B7:5B:FD:7A:1F:36:6B
Certificate issuer:       /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
Certificate serial:       0107
Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:02:56 +0000
ROA not before:           Tue 11 Nov 2025 03:51:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139265
IP address blocks:        103.140.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl
                          rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
        Validity
            Not Before: Nov 11 03:51:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58a80-0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:e2:61:c2:1e:73:57:29:17:cb:94:eb:31:
                    e2:c0:08:20:c5:0a:b1:e0:4b:fa:8f:e4:02:8b:dc:
                    79:26:c8:f1:80:09:71:36:89:8a:0d:23:cb:ad:39:
                    48:15:02:5e:14:c2:ab:30:50:5f:de:84:97:c6:66:
                    68:08:12:af:b8:c2:95:c2:64:ef:21:08:73:ff:81:
                    2c:ad:e1:b1:fe:36:0b:58:66:db:98:ff:41:fa:78:
                    6f:37:66:0e:fa:ba:c6:cd:c4:cd:16:d6:21:85:a9:
                    40:7d:ab:90:9a:fe:b9:d8:17:40:85:aa:5c:4b:8b:
                    c0:f6:c1:a6:5d:e6:e0:b5:1c:7b:6d:aa:66:95:b4:
                    f4:9b:ca:57:06:71:c7:d5:69:eb:ce:bf:7e:21:28:
                    2f:42:59:63:90:c7:c6:54:f2:65:1b:3a:43:8f:22:
                    a1:e1:6a:7a:4e:66:0d:74:9f:79:60:47:25:41:3a:
                    57:92:90:20:f7:0d:30:4e:00:1b:35:c8:12:37:d7:
                    b4:40:0c:1b:3c:1a:bb:48:bf:ae:12:68:47:c4:b1:
                    37:2e:e2:86:0d:7c:c2:9c:7f:06:3d:e9:3a:e3:dd:
                    d2:7d:48:e1:81:db:15:c9:32:41:e9:7b:c3:0d:18:
                    ad:fa:7d:1f:c8:25:ea:4f:b1:23:35:22:f1:c0:5f:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EE:31:53:43:A4:D1:6F:BA:63:50:58:53:B7:5B:FD:7A:1F:36:6B
            X509v3 Authority Key Identifier:
                keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:09:2a:ad:6d:51:fa:5e:09:e4:10:72:f2:35:e1:bd:4a:79:
         43:5d:ba:ef:88:e2:12:4f:72:2f:b5:f7:e0:a8:7b:1d:58:08:
         73:de:2c:19:5f:89:e6:16:d8:f1:7c:b7:46:e9:00:c1:ce:47:
         19:28:91:a5:d5:ac:a6:7e:d6:32:85:08:a0:28:87:bf:a7:9e:
         28:c0:a9:42:08:82:72:d1:7c:d2:d9:1c:0d:69:39:72:e2:f9:
         0e:bc:30:c0:c2:12:71:9a:ac:60:49:54:b4:e0:94:19:ff:83:
         93:f0:1f:df:aa:0a:75:e7:2a:be:da:87:06:4d:61:59:9c:dd:
         32:e7:b1:c9:b3:e2:de:8e:07:23:84:10:eb:e5:f3:13:ab:b1:
         91:d3:28:78:22:f5:09:6c:3d:2d:eb:19:7b:ce:46:4c:3c:c3:
         71:5e:93:f4:f4:fa:59:73:d4:f3:c1:37:09:70:02:8d:67:09:
         1d:b7:57:e9:1e:58:36:cf:41:6f:c1:a2:0b:8f:f4:2e:50:79:
         c7:6b:fc:53:46:0d:7d:ee:9a:8f:81:b1:43:42:8c:86:25:69:
         09:a4:4d:ad:64:bc:0f:5e:22:c4:13:a0:c4:44:26:65:4a:8e:
         50:27:ce:3d:33:f5:a5:95:04:92:07:ef:68:4f:88:92:6f:e9:
         39:1e:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:41 2026 by rpki-client