Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa
File:                     146FD366653611EB99BE491DC4F9AE02.roa (raw, json)
Hash identifier:          cplABQjxlJ11YdC+WxCvMkXI5GKd9TK39yV5NN7/ezw=
Subject key identifier:   FC:69:71:D7:57:A7:E0:7E:9E:8F:44:2A:41:D5:D0:6E:9C:6D:88:11
Certificate issuer:       /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659
Certificate serial:       074B
Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa
Signing time:             Tue 10 Mar 2026 21:28:43 +0000
ROA not before:           Tue 10 Mar 2026 21:28:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137487
IP address blocks:        103.110.75.0/24 maxlen: 24
                          103.119.134.0/24 maxlen: 24
                          103.119.135.0/24 maxlen: 24
                          103.119.136.0/24 maxlen: 24
                          2001:df4:6300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659
        Validity
            Not Before: Mar 10 21:28:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b08d0b-dab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:55:83:af:ee:4f:20:40:49:85:47:bf:a4:
                    ba:25:45:1c:08:ca:43:a4:83:1c:3f:07:b3:56:da:
                    d3:28:73:96:0f:3b:b6:37:80:b3:4a:cd:0e:d5:47:
                    d7:0e:d1:b0:b6:01:08:60:6e:2f:2c:0b:b7:80:63:
                    e7:f7:1c:2f:3a:ee:90:9c:35:f7:50:fb:c4:1e:30:
                    83:b4:2b:1e:96:3d:c0:b1:a2:e6:ba:89:44:d2:96:
                    1a:3d:27:28:f4:78:1c:f9:b2:af:d0:17:77:df:68:
                    27:31:a4:37:9c:9c:02:6e:fe:3a:ef:4d:03:8a:59:
                    f0:a1:fc:22:a2:f8:b0:4c:80:86:25:05:53:00:08:
                    50:2d:c2:39:1f:35:0f:fd:43:02:06:85:54:b2:7e:
                    3c:ee:68:19:62:74:fe:d5:c1:d3:24:2b:28:4d:00:
                    cb:fb:e5:ce:09:39:7a:fa:64:a2:ce:22:a3:0f:00:
                    10:6b:62:df:93:38:4a:d7:13:4f:e5:97:a4:58:ce:
                    03:c1:99:7b:b1:da:91:e1:6b:01:1c:5e:1f:48:2d:
                    ea:87:6a:b9:76:37:31:78:9f:c6:f6:4b:cb:7c:0b:
                    3c:de:33:fd:95:7f:52:67:23:11:4c:74:9c:9f:80:
                    ba:f7:fb:32:3f:86:a2:41:2d:6f:fb:95:fc:3c:fd:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:71:D7:57:A7:E0:7E:9E:8F:44:2A:41:D5:D0:6E:9C:6D:88:11
            X509v3 Authority Key Identifier:
                keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.75.0/24
                  103.119.134.0-103.119.136.255
                IPv6:
                  2001:df4:6300::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:23:ae:eb:ac:94:42:43:c0:35:72:c3:c6:20:d4:56:e0:66:
         5f:ca:ef:ff:e8:c2:db:a7:07:0b:a7:d0:78:39:2d:c2:1d:66:
         65:3a:03:06:b7:56:55:7b:da:02:75:1a:5d:4b:e1:11:7e:4c:
         3b:03:34:9d:b6:4a:f7:fc:25:a7:aa:b8:f4:d1:c4:35:7a:bf:
         89:05:93:19:5d:2e:47:75:ea:d2:41:70:09:90:76:80:bb:86:
         34:fe:82:2b:5f:37:8f:9b:7b:82:9b:85:69:09:7b:ce:0d:37:
         cf:d8:f4:8c:62:2e:94:a6:c8:60:61:7e:89:6f:eb:f4:02:43:
         5e:c0:64:cb:24:c0:44:d3:69:10:18:d7:9e:25:55:2d:f4:55:
         44:9e:bd:b3:16:86:39:f0:be:89:c0:5a:d0:75:ff:8b:5d:c4:
         c0:6e:c9:40:4c:3c:45:fb:48:7a:fe:2d:33:8a:ac:eb:f2:a5:
         f2:44:53:c9:77:ca:07:d4:6a:6c:c4:ef:07:1a:8b:5c:7d:88:
         20:f4:b1:a6:3d:a2:7d:d8:5a:1d:42:d4:7e:ba:e9:c8:84:66:
         01:b0:f5:80:4e:82:3b:92:ad:01:0f:a6:48:50:a2:f3:c3:5a:
         a8:04:db:5b:3e:77:be:42:ee:49:7c:b2:bf:f2:42:6b:6f:17:
         66:36:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:08 2026 by rpki-client