Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7E11B25E632A11EEA4BAF91FC4F9AE02.roa
File:                     7E11B25E632A11EEA4BAF91FC4F9AE02.roa (raw, json)
Hash identifier:          UKLpGhXiwCvflU/JIo9s5JXcYpAGjEULFWmk3jFbGHM=
Subject key identifier:   D7:C3:53:72:7E:46:8E:75:A6:60:24:6F:D3:F5:B6:F4:1E:3C:92:D4
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0756
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7E11B25E632A11EEA4BAF91FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:28:55 +0000
ROA not before:           Mon 02 Mar 2026 22:28:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar  2 22:28:54 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a60f26-e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:e3:87:0b:97:61:d5:2e:5b:dd:b8:d4:f7:
                    87:94:be:c9:15:db:de:c3:d0:57:e1:97:fc:79:81:
                    c0:67:5d:50:f5:bb:30:98:d1:03:f6:4d:c1:eb:81:
                    b0:da:35:c5:5a:02:2f:a4:28:17:59:b6:26:a9:bd:
                    d5:7d:46:58:c1:e6:4d:55:94:5f:42:57:28:40:ca:
                    78:7e:bd:ea:42:81:72:fe:ea:8a:d4:a9:77:a3:c0:
                    c1:5d:fc:42:3d:50:b6:44:f4:30:29:67:c2:24:51:
                    b8:00:9d:9c:31:45:28:c9:90:97:19:ad:5b:b3:09:
                    58:d2:c6:85:5c:09:af:02:88:9b:2d:25:d9:88:a0:
                    8c:a7:82:dd:fe:c6:c8:60:5c:76:a5:eb:dd:0c:09:
                    3e:fe:7f:24:fb:13:04:50:0f:a6:1e:8d:59:cc:db:
                    a6:ac:b7:c8:14:fc:06:ee:be:af:41:c2:ee:67:dd:
                    42:3c:68:8a:9a:28:4d:0b:d0:e9:48:a5:d7:5b:97:
                    52:0d:59:5a:15:26:80:80:88:3b:3b:e8:97:5d:8d:
                    db:63:fb:38:62:41:3b:10:6c:97:18:6c:55:04:aa:
                    af:f1:0f:48:8d:7c:b4:95:c3:20:80:8b:d3:ff:9d:
                    64:24:f0:a7:16:dd:eb:ec:66:da:68:db:e2:a5:37:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C3:53:72:7E:46:8E:75:A6:60:24:6F:D3:F5:B6:F4:1E:3C:92:D4
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7E11B25E632A11EEA4BAF91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:74:bd:e8:b9:11:e2:01:e2:b2:17:9a:56:6c:dc:68:ed:
         14:7b:42:98:1e:7c:16:97:c5:dc:cf:33:7f:c6:a8:51:67:84:
         10:a3:0c:74:74:b1:68:75:f7:51:57:45:b8:b2:59:8d:d2:00:
         54:c1:c3:a3:b0:da:05:5e:87:51:78:b2:e5:ce:2f:fc:3f:61:
         29:b1:9b:b5:c6:98:6e:90:9e:57:9b:88:75:9b:bd:dc:00:b0:
         90:e7:67:74:e1:0a:db:32:2f:f5:c2:88:d4:b2:06:12:6f:6a:
         f2:08:a8:05:5b:d1:ec:bf:8d:04:75:a6:12:2f:0c:2d:35:24:
         c5:86:4c:fc:0e:57:c9:05:e5:6e:cc:fa:db:d1:80:72:a6:a2:
         70:8b:f6:52:90:18:f5:61:15:56:3b:6d:a0:78:52:80:0e:6c:
         90:e7:c8:39:62:1b:60:f2:7f:78:9c:f4:61:e3:15:2e:44:20:
         2d:70:ae:86:8c:eb:60:42:be:64:20:a5:51:2a:95:08:7c:43:
         e3:7f:5b:4a:3a:89:4f:db:7d:77:18:4a:9d:98:60:0d:43:02:
         b3:4e:ce:b5:c2:40:4e:10:5a:43:32:34:6f:ad:dd:3e:43:2c:
         a6:e8:d9:69:7d:dc:ce:03:82:c1:17:71:21:b2:b7:16:fb:2a:
         40:47:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:33 2026 by rpki-client