Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
File:                     14AD3D427E9D11EC914D4A6DC4F9AE02.roa (raw, json)
Hash identifier:          g/TSgG0U96ZJPqDbuo5w5vyUROdYzsoqxLi6Qg1Hf5A=
Subject key identifier:   69:0E:AA:A4:90:58:51:F1:2E:91:C7:8E:E3:B8:B5:BE:C3:4F:37:33
Certificate issuer:       /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial:       049A
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:38:38 +0000
ROA not before:           Thu 03 Jul 2025 01:04:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137956
IP address blocks:        103.118.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
        Validity
            Not Before: Jul  3 01:04:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5144e-ab47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:d9:e5:ae:ff:8f:84:59:f4:d2:7d:1e:78:
                    33:63:96:5a:e5:6e:de:ee:f0:b7:83:95:84:f3:63:
                    67:72:34:73:c5:2d:48:37:79:fb:09:bb:43:52:9f:
                    08:7c:c0:34:46:b3:8c:45:b0:90:4a:c8:2b:bf:70:
                    66:3c:b3:28:7a:4d:bb:d0:be:e1:0b:f8:7d:bf:ec:
                    b6:6c:13:35:25:d1:3f:1e:01:c9:2e:07:b6:f9:62:
                    d7:62:81:36:7b:da:09:67:77:d2:cb:80:f8:90:9d:
                    83:b2:30:ac:a1:64:38:1d:aa:b3:c8:07:33:79:94:
                    24:61:f0:27:f7:83:a7:e5:4c:d6:ba:57:69:eb:04:
                    dc:f1:a5:c6:a0:e0:2a:4f:2f:58:1c:a9:2f:7a:7a:
                    a5:7e:a8:73:97:a7:9f:de:42:ba:d7:e0:bf:a9:8b:
                    89:dc:69:1c:f4:97:c5:b8:68:96:c1:2b:81:bb:87:
                    c7:e4:8d:34:86:14:e3:32:8b:30:52:79:59:1e:b6:
                    2f:25:39:64:3b:3e:6f:1e:de:32:37:ef:14:73:19:
                    c4:cb:f7:b1:fc:db:94:5f:be:1d:94:51:be:80:63:
                    5b:fa:07:12:37:2e:e9:86:46:e5:d2:c4:4d:89:8f:
                    ea:32:43:34:60:e6:97:c5:f1:33:8c:a7:90:78:c0:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:AA:A4:90:58:51:F1:2E:91:C7:8E:E3:B8:B5:BE:C3:4F:37:33
            X509v3 Authority Key Identifier:
                keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:7c:e8:47:6f:ff:9c:3f:54:19:9f:8c:8a:ec:88:27:e3:
         66:8c:f3:47:de:3a:cd:f9:7b:1d:38:aa:84:f5:c1:d4:e4:1b:
         ff:b2:c6:8d:f3:73:76:31:a4:75:5b:43:aa:0c:ff:a5:21:63:
         68:09:30:56:69:b0:4d:c9:fd:32:02:72:3c:de:fd:a2:7a:49:
         8d:d8:a8:2f:42:91:d3:48:80:f4:e3:69:cb:2e:92:42:8f:a5:
         09:66:51:be:93:82:98:34:ff:5c:06:a6:90:ca:cf:d1:9c:78:
         53:08:d7:d5:75:40:41:01:d5:2e:e4:9a:88:a3:4c:75:a5:d6:
         e1:7a:6d:ba:5c:10:80:16:bf:28:26:a9:b5:b7:28:1f:29:fc:
         17:f0:29:76:3b:57:1a:bd:3e:a6:ee:85:1a:75:26:f0:3e:ca:
         38:93:48:20:24:5d:9f:69:73:94:62:ea:3b:1d:fc:d5:28:33:
         5f:6a:31:25:04:7b:22:62:7c:a5:7f:35:39:b6:43:21:2d:ac:
         ef:81:de:55:3a:36:3e:80:02:a2:bd:31:cb:b4:e9:f1:20:fd:
         d7:0a:6f:ea:8e:16:2b:70:00:1d:09:94:83:42:8d:45:9d:d6:
         13:3d:d8:58:da:0a:d3:13:ae:a2:b2:91:e9:81:12:84:90:16:
         de:92:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:21 2026 by rpki-client