Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File:                     1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier:          1+jD0Tan+qw9lGGMHwgX8x7RXas01clsSnD+5FJCfx4=
Subject key identifier:   B8:DB:C0:39:5F:FB:12:E1:C3:B9:6A:66:BE:BF:3D:0F:31:0A:D1:9B
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0B80
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:07:24 +0000
ROA not before:           Sun 10 Aug 2025 19:29:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140866
IP address blocks:        103.141.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Aug 10 19:29:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51b0c-e355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:c2:1b:dd:9d:4b:5b:0e:51:ae:01:33:77:
                    8e:c5:63:c4:14:73:08:21:90:1a:eb:f3:76:f4:56:
                    9e:c7:46:39:ca:93:2b:f8:c4:21:18:b5:cc:5e:ec:
                    4e:a2:da:0c:a8:d2:d5:e4:f7:4b:ca:81:19:b3:5c:
                    7e:3a:54:e9:2f:de:e6:05:8d:c4:d3:7b:c8:e4:ff:
                    e3:b4:b9:68:9c:5d:45:2f:d3:37:b4:ef:36:f0:d1:
                    51:27:d4:fd:21:4d:c3:71:67:0e:67:f8:c6:be:6a:
                    85:51:e1:a3:ed:0e:e9:72:86:a6:96:c0:e8:c6:b1:
                    d3:62:05:69:f9:f6:ff:97:08:b1:53:c5:59:18:3b:
                    39:4d:c9:17:a5:5f:fc:4c:79:42:50:98:50:49:dd:
                    fb:d0:31:0b:44:63:35:11:13:ee:b1:eb:8e:38:62:
                    d1:46:bc:6d:0f:7c:1a:f3:b7:27:a9:9a:6a:ac:e3:
                    18:24:58:90:c4:24:be:03:82:a9:0c:ac:dd:18:39:
                    b6:88:6b:b4:e7:22:72:e6:43:a4:d8:a2:61:a9:7a:
                    70:4b:e2:92:93:19:f3:fb:f2:bf:40:4c:0b:90:cf:
                    46:14:3b:fc:40:af:24:26:16:28:b2:92:83:68:56:
                    be:7e:4b:dc:31:6d:a9:01:05:54:5b:03:09:af:c2:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:C0:39:5F:FB:12:E1:C3:B9:6A:66:BE:BF:3D:0F:31:0A:D1:9B
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:43:32:1b:ce:28:78:38:ee:39:8d:dd:53:fc:09:2d:d0:
         b5:ca:1b:d8:83:1c:f3:ed:c7:a7:56:a4:1a:7f:de:8b:ae:a6:
         08:0a:97:66:17:bd:26:1f:67:86:4f:e1:e9:1c:c5:c6:84:b1:
         18:31:a2:a4:83:5c:b5:37:b0:4c:b0:a5:3d:34:84:26:43:5b:
         e2:74:f9:2a:04:aa:9b:e7:15:40:10:11:86:73:f4:6e:28:f4:
         b4:d3:d1:5f:63:10:f4:57:45:36:2c:7e:32:0d:64:e7:67:28:
         86:f9:9e:68:12:6d:24:25:0f:64:d0:ee:f7:d4:14:33:c6:5a:
         18:cc:e0:48:b5:a3:ed:6d:8e:82:ab:17:c0:f8:e1:0f:49:20:
         c8:de:86:c6:ee:1a:6d:81:76:40:a7:75:e7:b5:03:f1:86:53:
         cd:7a:3e:13:08:59:ce:db:60:b4:75:a9:f9:21:8f:ed:0f:ef:
         30:3c:00:06:7c:23:d5:14:95:59:14:ff:2a:aa:b2:22:16:88:
         bd:87:9c:42:a5:68:fc:47:8a:c3:ac:27:6a:96:57:9f:09:51:
         b0:31:8c:80:6c:24:78:66:5c:4b:bd:95:b8:a2:dc:a5:b8:f4:
         cd:65:78:42:27:07:94:77:d3:69:60:93:d1:74:63:f5:ec:7a:
         ef:24:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:49 2026 by rpki-client