Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa
File:                     147D51CA85B111ECB675B552C4F9AE02.roa (raw, json)
Hash identifier:          zcVXRjvf2CO/YkuLIL+HfN9HG5h1ZXj4rinIzSjA0Ng=
Subject key identifier:   DC:30:29:48:0D:C1:01:C0:9B:CB:08:7E:69:05:A2:1A:C1:79:AB:E3
Certificate issuer:       /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial:       046F
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:00:48 +0000
ROA not before:           Thu 27 Mar 2025 08:53:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138992
IP address blocks:        103.181.42.0/23 maxlen: 23
                          103.181.43.0/24 maxlen: 24
                          2001:df5:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
        Validity
            Not Before: Mar 27 08:53:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40e50-f17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:23:3e:a1:c7:08:d7:39:46:30:f0:e5:d3:
                    e4:f2:43:56:dc:c9:ef:30:ca:f2:44:6c:e0:b2:5b:
                    c7:02:af:9b:d4:29:d7:4a:f3:a5:c2:bb:6d:70:9f:
                    75:c0:9e:f3:83:3c:49:12:fe:62:d4:06:ca:9e:37:
                    dd:b3:df:4b:2d:a9:18:e5:51:ad:be:24:de:a8:3e:
                    95:6a:55:c4:57:d0:23:62:9f:97:1f:6a:1f:21:47:
                    30:92:52:04:53:55:16:df:ad:00:09:d2:f3:b7:84:
                    ac:ac:9c:c3:b3:ff:56:d8:39:3b:c7:25:73:df:bf:
                    34:0b:23:4f:42:8b:54:a5:7d:e1:92:ce:32:a9:87:
                    22:8a:7d:79:b8:3e:29:a5:95:45:40:b5:be:96:3a:
                    17:40:a9:40:2d:7f:38:dc:4c:92:45:28:43:89:69:
                    6c:67:82:2b:68:b5:93:7f:dd:b9:80:e5:b8:25:47:
                    46:04:c6:04:4a:ab:2f:42:e4:2c:6c:65:8d:ab:e1:
                    f5:f3:64:ab:bd:bc:ab:45:90:08:b7:c7:50:73:fb:
                    76:3e:3d:7f:58:a0:0d:aa:80:a7:e5:88:e6:ae:7a:
                    f6:fd:d6:35:c9:3f:64:74:58:36:55:6c:e5:e9:92:
                    3c:c5:29:70:7c:74:9a:ac:76:d1:85:8b:71:db:d3:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:29:48:0D:C1:01:C0:9B:CB:08:7E:69:05:A2:1A:C1:79:AB:E3
            X509v3 Authority Key Identifier:
                keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.42.0/23
                IPv6:
                  2001:df5:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:b7:ff:37:ad:07:4a:71:1c:af:ad:36:07:1f:13:ce:09:
         19:47:29:a6:e3:ba:22:46:07:25:4e:53:65:b7:e7:d2:80:0f:
         9f:d2:48:e0:98:d2:50:aa:55:92:4e:6f:8a:0a:11:79:d2:9b:
         c4:11:5b:10:13:af:ac:49:5c:8d:68:a5:d7:c9:e5:28:dc:26:
         a1:68:01:5d:92:26:cd:11:bb:ce:97:12:e7:bf:a1:6a:97:3d:
         11:30:81:d7:08:b9:a4:cf:a2:c1:ac:a9:90:22:57:9c:16:0f:
         7b:47:86:23:95:de:81:db:9c:2a:8c:b0:25:bf:32:66:74:ad:
         07:e5:92:47:7e:e9:84:06:a6:75:f8:ad:c8:4f:e6:3d:9c:8d:
         c1:2e:fd:b0:dc:63:be:1d:75:7c:21:99:c0:b0:c5:50:34:a4:
         03:43:ac:fb:0b:59:f1:cd:63:15:d4:09:ab:1d:91:8b:00:4d:
         67:f8:c5:64:47:b2:7d:3e:91:17:bd:f0:74:a9:4e:bc:cd:63:
         b9:b8:f6:5a:ed:26:ef:60:07:ba:fe:ba:34:6d:8d:96:41:9c:
         9c:3d:c8:35:33:b5:cf:2b:f6:12:f8:bc:0e:32:e4:1e:40:96:
         b9:2e:5e:ee:0d:78:05:ef:a8:74:67:9f:11:43:2e:44:89:fd:
         4a:04:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:01 2026 by rpki-client