Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa
File:                     D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (raw, json)
Hash identifier:          tFJq8prm/jm01/luS9MVt882V4/WGQN42LpWhd1UgG4=
Subject key identifier:   BA:05:B0:F6:F5:B7:C6:78:25:B8:23:DB:CB:3D:B0:C3:9D:D5:F3:70
Certificate issuer:       /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial:       0B7D
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa
Signing time:             Sat 14 Mar 2026 19:24:58 +0000
ROA not before:           Sat 14 Mar 2026 19:24:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140087
IP address blocks:        103.148.82.0/23 maxlen: 24
                          2001:df2:c580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
        Validity
            Not Before: Mar 14 19:24:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b5b60a-cb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:bb:f5:14:3e:2d:02:43:3e:b6:13:f2:4c:
                    0e:07:a2:63:2c:40:1b:6c:e0:39:7e:be:ae:3a:e0:
                    24:19:15:44:e5:88:af:8e:07:17:ef:7c:e8:f6:b7:
                    7d:f6:9d:66:d5:5e:55:02:d8:97:14:fd:f8:37:43:
                    d3:dd:4f:7d:d7:13:b2:a1:4a:be:e1:5a:96:69:a0:
                    bf:43:c9:00:e6:6c:4d:6b:37:b0:d4:52:6f:c7:c8:
                    9b:f8:35:86:29:a3:5c:52:7d:1d:25:b6:9f:cb:f1:
                    06:ce:f8:a4:6f:6e:5f:86:c4:e3:7b:e4:e6:67:36:
                    4c:2d:7c:8a:22:0c:f6:2a:ad:f7:85:82:9b:38:91:
                    24:86:4c:d5:fb:d3:a3:5f:7a:ca:84:d1:d0:7d:ad:
                    c4:98:6a:07:3d:73:c0:4c:e4:94:19:fc:cf:86:92:
                    b1:f9:55:43:76:3a:05:e0:78:3f:ab:33:8c:3b:f8:
                    fa:f9:9f:f2:ed:12:9d:ac:e9:36:b1:2a:9d:cf:6c:
                    93:77:f8:6e:a8:c9:ce:e5:90:2b:23:8b:57:a3:ec:
                    07:e1:24:ea:03:c6:e5:6d:ad:e8:7f:b0:62:c8:54:
                    c3:73:4d:b7:38:65:45:79:6b:9b:01:0f:b0:26:d9:
                    ed:e6:17:ea:c0:7f:0d:8a:ac:5b:a4:14:bf:81:3f:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:B0:F6:F5:B7:C6:78:25:B8:23:DB:CB:3D:B0:C3:9D:D5:F3:70
            X509v3 Authority Key Identifier:
                keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.82.0/23
                IPv6:
                  2001:df2:c580::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:d5:64:7c:e8:c7:a1:1d:02:30:f9:45:db:ac:57:fa:60:
         7d:b6:20:2e:19:60:c3:90:e3:99:91:14:01:57:d0:47:01:6c:
         c5:64:df:57:20:cd:93:5d:98:12:0c:d1:bc:25:a8:cc:37:b2:
         21:18:9d:09:27:7a:fc:f4:69:2c:2e:2d:8a:93:5f:45:9e:62:
         dc:9b:09:71:fa:5b:f7:44:c4:4a:06:c2:74:8f:34:46:fb:9a:
         c1:37:1c:d0:59:5c:ec:d7:e9:48:8f:34:04:71:86:b2:6c:79:
         74:45:03:cd:88:a9:e8:e3:13:5a:fc:66:d1:ca:26:52:57:63:
         b6:57:d9:55:fc:93:23:64:a8:4f:b6:5d:74:09:15:ec:0f:b7:
         00:cf:b2:cf:4c:3b:33:cb:2a:ee:73:4b:28:8d:c1:14:16:52:
         50:d0:68:2f:21:ed:3e:69:b2:42:6e:3a:98:1a:02:1a:fc:0c:
         e6:eb:8c:dd:ef:93:82:f6:bd:21:52:60:c5:e5:17:73:e4:bd:
         04:9e:07:86:1e:41:59:3c:09:e2:ab:6b:ee:e3:01:14:f3:31:
         3a:2f:5c:e5:c1:3e:e2:cf:c3:f9:51:21:db:1c:f3:ab:4d:7e:
         c5:73:c5:6e:d3:21:76:b5:2a:0d:52:9f:ad:9f:39:5b:e2:c4:
         18:9c:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:26 2026 by rpki-client