Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa
File:                     F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (raw, json)
Hash identifier:          gkuXL8yT7fP8UeDUjTY9zb94PE0+asidk2/nHeB3xgM=
Subject key identifier:   89:DB:9A:46:7E:A8:23:42:14:B2:B8:AD:1E:FE:3C:7D:60:85:EA:9F
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       022F
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:57 +0000
ROA not before:           Tue 03 Jun 2025 03:21:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150731
IP address blocks:        103.130.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Jun  3 03:21:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a41bf1-1946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:59:0a:4b:8f:f6:b9:a8:8a:0f:d0:03:19:
                    5f:4c:f9:a6:15:71:2b:d3:05:74:5b:fd:6a:61:1a:
                    27:d9:49:c0:9f:52:93:1a:0d:0a:9d:e5:e3:7b:85:
                    46:ea:58:22:f9:ff:19:21:c7:d4:fd:db:56:28:05:
                    9b:7f:15:ba:07:f7:bc:4a:79:fb:3c:5c:1c:ab:c8:
                    4a:85:8a:67:e5:99:0f:b2:40:6c:59:a4:c0:7b:4d:
                    48:30:c4:a2:ca:fe:8f:18:a4:03:62:6f:b7:e3:c7:
                    4c:2b:91:c2:2e:e6:d8:62:4e:0b:88:fc:5d:81:09:
                    0f:72:8e:ac:b1:b7:b4:4d:57:61:7f:74:9f:1f:47:
                    bd:9a:a4:73:ce:e1:ef:50:27:5d:aa:08:4b:61:fb:
                    46:4e:4a:e4:32:d4:04:e2:d2:04:be:c6:ea:14:08:
                    5c:b0:00:c1:ef:bf:39:d0:87:89:62:96:38:ed:ad:
                    2b:4f:4a:14:04:33:77:2b:6b:29:85:34:cf:e7:5f:
                    5c:bc:ec:8f:f6:bc:60:2f:f7:3a:83:66:9b:ce:18:
                    31:3b:d0:72:02:24:83:6e:a4:7b:f8:e7:02:1c:b8:
                    0b:d2:6d:a5:3a:64:bd:e6:c0:a7:c3:bd:e8:e7:2d:
                    20:a2:30:33:1a:81:e8:e3:9b:c8:93:18:e2:79:ee:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:9A:46:7E:A8:23:42:14:B2:B8:AD:1E:FE:3C:7D:60:85:EA:9F
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/F26B14C4EE8B11ED95BCBB13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:99:34:d4:17:00:51:0b:2e:f8:9a:92:24:54:77:cf:65:
         6b:b5:41:12:37:d4:3d:66:99:ae:f1:b6:92:22:15:7a:41:86:
         34:83:8a:ef:66:85:04:74:70:a8:2a:4c:cd:94:22:81:27:d0:
         ad:08:7a:8a:db:d2:24:2f:44:b3:8f:46:26:a1:fc:c5:99:4a:
         fa:c0:53:fb:64:c6:23:8c:82:c7:38:b6:90:ea:83:a2:87:0e:
         e9:44:a7:a9:15:49:9f:e0:1a:65:6e:b9:a8:6d:6b:d5:59:9c:
         0c:17:67:55:f4:6a:ac:83:a7:48:24:26:44:10:d6:7d:0b:24:
         47:27:7a:09:f5:a9:1d:99:07:1e:af:d1:f3:4c:80:99:30:a5:
         32:2d:f4:6a:2b:3e:93:5a:5b:4f:94:3e:8f:63:c3:97:33:57:
         a3:82:3f:8c:7b:7e:61:f0:cc:c4:c6:07:da:a7:d3:c1:2a:31:
         a6:9f:a0:a5:81:07:8b:33:a2:f5:57:40:f3:61:71:0d:2a:5d:
         16:3a:fd:f4:16:b6:5d:f8:dd:e3:3e:ba:59:7b:da:f6:fc:ba:
         be:a3:1d:1c:20:af:8c:f4:fb:a7:46:0d:1d:8e:50:7a:2f:5b:
         a1:85:4f:78:eb:10:36:32:7a:b6:44:08:d5:e4:41:fa:9a:8e:
         d1:13:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:43 2026 by rpki-client