Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
File:                     159DA092E9B711EFB8454123C4F9AE02.roa (raw, json)
Hash identifier:          7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=
Subject key identifier:   71:1A:31:83:C0:31:8E:88:18:CD:84:14:A3:38:CD:6C:2A:24:CE:C5
Certificate issuer:       /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial:       04AA
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:48:44 +0000
ROA not before:           Sun 01 Mar 2026 01:21:31 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149433
IP address blocks:        103.179.128.0/23 maxlen: 23
                          103.179.128.0/24 maxlen: 24
                          103.179.129.0/24 maxlen: 24
                          2401:eee0::/32 maxlen: 32
                          2401:eee0::/34 maxlen: 34
                          2401:eee0:4000::/34 maxlen: 34
                          2401:eee0:8000::/34 maxlen: 34
                          2401:eee0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
        Validity
            Not Before: Mar  1 01:21:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a435ac-b143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:fc:87:42:d8:ec:90:45:e2:2c:66:76:38:
                    df:18:2f:97:af:aa:15:2d:30:e7:7e:87:fd:9e:b5:
                    8f:c0:c7:f2:0d:57:c0:1e:a0:b6:b2:2f:c1:b2:3d:
                    1f:00:1c:06:d5:9d:71:a3:1b:64:f1:67:15:3f:64:
                    ca:50:cf:4e:82:a2:70:a8:5d:4c:0a:01:f1:c0:94:
                    eb:73:45:eb:30:67:83:58:89:21:9e:61:55:7c:a4:
                    cc:7f:c3:d0:b5:96:9e:c1:9e:b8:de:43:92:fd:bf:
                    35:d3:1b:1f:bc:fc:1f:5d:a1:34:6e:b6:5d:6c:90:
                    a5:d3:79:88:fc:1c:95:ad:c3:20:9d:4e:1e:12:4d:
                    b9:90:ec:82:6d:27:d7:ad:99:3f:43:15:19:34:89:
                    41:7b:d5:96:0b:28:93:92:f6:c9:7d:c1:ba:b9:c2:
                    a5:b8:50:d0:29:fd:f5:57:bd:7d:d2:b5:a4:04:07:
                    02:5d:ed:f0:c9:ec:12:bf:24:75:9c:5c:22:b8:19:
                    81:b2:3a:55:42:2e:21:07:cc:10:a5:01:56:6f:9f:
                    59:c5:89:38:54:68:23:12:37:c9:0d:ff:4e:5a:41:
                    d9:eb:b3:54:50:e4:40:cc:ce:06:62:0e:b5:d4:87:
                    04:e6:94:d0:0c:66:85:4f:ec:38:aa:8b:a1:5f:8b:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:31:83:C0:31:8E:88:18:CD:84:14:A3:38:CD:6C:2A:24:CE:C5
            X509v3 Authority Key Identifier:
                keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.128.0/23
                IPv6:
                  2401:eee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:64:fa:1b:5c:63:23:46:aa:25:d6:a7:5a:eb:af:92:94:
         54:3f:66:d8:22:ab:42:1c:53:5e:40:bc:46:1e:d5:99:4d:58:
         07:5b:83:c3:a7:7f:22:5e:eb:e8:60:c2:b7:fe:df:ae:50:7a:
         7d:f5:f0:8d:8b:96:1f:2e:2d:9d:cf:bd:08:28:2b:7e:01:bf:
         b2:eb:39:3b:c8:d3:01:c2:62:52:60:6d:9c:af:43:45:98:f3:
         0d:cb:36:a7:89:80:a9:bd:65:4e:67:94:84:26:47:39:43:60:
         c9:c4:70:89:3c:f4:a4:79:49:52:70:89:f4:17:31:6b:2c:e5:
         6f:cf:d5:38:6f:f1:87:87:84:88:c7:a6:32:82:ef:62:73:6e:
         fd:dd:ef:3f:8e:08:86:43:a2:7f:96:01:c2:ad:3f:b0:8c:b3:
         6c:a6:0c:07:71:2f:19:69:9d:b3:cb:ab:89:05:5b:34:d1:75:
         4f:d7:a4:99:43:76:b3:09:a2:e4:1d:78:b8:17:f5:43:b6:26:
         c6:57:13:b9:0d:a5:f3:0d:a7:87:4a:bd:24:ca:48:a1:25:a4:
         c4:83:2e:fb:f5:7b:ee:76:58:66:62:4f:5d:59:17:17:05:34:
         f8:a1:78:23:60:c6:3c:dc:d1:65:60:50:42:40:ba:ad:8d:d4:
         0b:87:93:d4
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1
RjAwNDVENTgwHhcNMjYwMzAxMDEyMTMxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzVhYy1iMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApX38h0LY7JBF4ixmdjjfGC+Xr6oVLTDnfof9nrWPwMfyDVfAHqC2si/Bsj0f
ABwG1Z1xoxtk8WcVP2TKUM9OgqJwqF1MCgHxwJTrc0XrMGeDWIkhnmFVfKTMf8PQ
tZaewZ643kOS/b810xsfvPwfXaE0brZdbJCl03mI/ByVrcMgnU4eEk25kOyCbSfX
rZk/QxUZNIlBe9WWCyiTkvbJfcG6ucKluFDQKf31V7190rWkBAcCXe3wyewSvyR1
nFwiuBmBsjpVQi4hB8wQpQFWb59ZxYk4VGgjEjfJDf9OWkHZ67NUUORAzM4GYg61
1IcE5pTQDGaFT+w4qouhX4uqtQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHEaMYPA
MY6IGM2EFKM4zWwqJM7FMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0
NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUJBODEvQ0UxMzZCRDA3NDU3MTFFQ0IzOTg3NTE4QzRGOUFFMDIvMTU5REEwOTJF
OUI3MTFFRkI4NDU0MTIzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7OAMA0EAgACMAcDBQAkAe7gMA0GCSqGSIb3DQEBCwUAA4IBAQA/
y2T6G1xjI0aqJdanWuuvkpRUP2bYIqtCHFNeQLxGHtWZTVgHW4PDp38iXuvoYMK3
/t+uUHp99fCNi5YfLi2dz70IKCt+Ab+y6zk7yNMBwmJSYG2cr0NFmPMNyzaniYCp
vWVOZ5SEJkc5Q2DJxHCJPPSkeUlScIn0FzFrLOVvz9U4b/GHh4SIx6Yygu9ic279
3e8/jgiGQ6J/lgHCrT+wjLNspgwHcS8ZaZ2zy6uJBVs00XVP16SZQ3azCaLkHXi4
F/VDtibGVxO5DaXzDaeHSr0kykihJaTEgy779XvudlhmYk9dWRcXBTT4oXgjYMY8
3NFlYFBCQLqtjdQLh5PU
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:15 2026 by rpki-client