Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/4816D7F0327A11EEA132B74CC4F9AE02.roa
File:                     4816D7F0327A11EEA132B74CC4F9AE02.roa (raw, json)
Hash identifier:          Z3UgUYXH2NAmhW65oCscM9NBApqLDafkq58mzG7G4CQ=
Subject key identifier:   DD:C9:39:17:58:EA:7A:53:43:C6:62:AD:2B:50:02:67:54:8D:67:0B
Certificate issuer:       /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
Certificate serial:       06B0
Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/4816D7F0327A11EEA132B74CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:50:13 +0000
ROA not before:           Sat 08 Nov 2025 21:43:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139736
IP address blocks:        103.144.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl
                          rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
        Validity
            Not Before: Nov  8 21:43:17 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59595-4442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:33:15:c6:2f:40:33:bf:5d:2d:ab:20:a0:
                    7d:2e:b1:57:8a:20:4d:12:49:72:48:04:2f:b3:4a:
                    80:ee:ab:7e:dc:24:2d:82:e1:ae:62:b5:56:4e:b9:
                    da:5a:90:3c:6b:34:d9:30:74:53:a7:03:52:7d:d4:
                    05:bb:7b:ce:9a:b7:de:f2:16:b2:e0:23:27:ae:ae:
                    1b:86:e7:8e:9a:c2:9b:e7:0a:20:cd:58:87:dd:f5:
                    41:ef:3c:62:27:25:9a:f8:45:30:de:e1:7e:b3:94:
                    03:f4:e1:8c:6a:3e:fb:6d:32:70:06:63:44:db:d0:
                    31:37:00:dc:ee:db:26:a3:a1:12:3f:cd:48:9a:65:
                    00:3a:56:fe:4b:0d:13:82:ed:0f:23:6a:f1:60:dc:
                    23:8a:f0:70:1c:c8:85:cd:06:aa:65:fe:f5:2a:af:
                    5e:4c:bd:73:31:21:59:35:8c:b5:26:10:92:e9:40:
                    a3:41:87:45:ca:92:56:17:e3:8f:01:4b:ed:9c:ff:
                    1c:4d:4e:56:c7:79:70:08:9f:59:ca:d3:22:f8:03:
                    31:46:db:17:a5:45:fa:ce:37:fd:5f:a8:b7:7d:3e:
                    a9:2f:eb:3f:78:1a:da:6a:47:a4:f6:b9:d2:f9:35:
                    9f:1d:8c:70:e4:3c:bc:89:52:8e:0e:ff:99:f4:90:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:39:17:58:EA:7A:53:43:C6:62:AD:2B:50:02:67:54:8D:67:0B
            X509v3 Authority Key Identifier:
                keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/4816D7F0327A11EEA132B74CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:44:e0:ae:83:11:a7:3c:12:85:09:64:68:6b:c6:e6:65:17:
         97:36:7d:6b:7a:8c:08:b9:60:98:a2:4a:4f:54:a8:49:48:c1:
         24:7a:ef:0b:4d:4e:db:ce:2c:2c:a6:37:eb:94:f5:d2:00:35:
         37:0e:67:2e:ed:ba:dc:fd:d1:01:46:c5:8a:54:c3:4c:5e:ee:
         fb:3a:1a:1f:1c:7a:b1:ba:83:56:ff:ec:29:f4:bc:b6:7a:cc:
         07:5f:93:3a:39:87:90:ad:fc:43:0a:f2:11:65:99:6e:fc:46:
         7a:29:ac:51:bc:81:11:48:72:a2:82:cf:96:08:9c:2c:c6:2a:
         4b:42:b7:8e:89:bf:c6:fe:47:c6:ee:f2:ae:bb:56:dd:54:6a:
         ea:0c:c4:14:0a:35:d2:04:70:90:80:d2:cf:09:45:8b:76:88:
         b0:6d:75:70:dd:e5:7f:dd:e4:4e:62:2c:a2:b5:5e:01:14:2d:
         9d:ab:9c:41:5f:24:94:f5:54:9f:65:57:c8:41:7d:43:1d:68:
         7e:01:ca:4c:8e:fb:bc:1f:24:50:11:90:f0:02:da:5f:36:b7:
         99:05:0c:2f:bb:1a:10:ba:3c:47:73:32:48:c1:0f:d0:dd:14:
         79:fc:62:f7:7b:5d:0b:4e:da:0c:74:90:c5:d2:c3:5b:a6:2f:
         f6:87:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:12 2026 by rpki-client