Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
File:                     6445C13C2D1511F18C0F846BB3833773.roa (raw, json)
Hash identifier:          PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=
Subject key identifier:   07:35:50:C6:20:DC:45:9F:36:2A:A6:0D:A7:F7:29:F4:D0:F4:C0:A7
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       022B
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
Signing time:             Tue 05 May 2026 03:28:44 +0000
ROA not before:           Tue 05 May 2026 03:28:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132883
IP address blocks:        103.144.241.0/24 maxlen: 24
                          103.145.190.0/23 maxlen: 23
                          103.145.190.0/24 maxlen: 24
                          103.145.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: May  5 03:28:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f963ec-544c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:15:c4:68:e7:67:71:39:08:bd:69:9f:da:
                    c6:5b:e3:24:60:15:e4:d8:14:68:f3:a9:7b:10:eb:
                    c4:c1:59:d0:ba:bc:40:e9:f7:e0:43:d1:25:0e:d0:
                    58:2b:d3:bf:d1:12:ea:8d:fc:02:b2:34:f6:6c:95:
                    ea:be:53:dc:2a:b1:e4:22:85:a7:7a:5e:d2:34:a4:
                    0d:15:8f:16:3b:15:10:5b:33:96:8e:84:49:18:c1:
                    f2:7e:6c:7b:3e:e8:44:27:90:5f:b6:26:1a:23:62:
                    01:73:b9:73:37:8b:74:06:be:9a:c2:65:26:99:7b:
                    6b:d8:83:1b:e6:aa:90:dc:5e:53:37:07:05:2f:2c:
                    f7:04:12:c0:83:2f:11:e5:2e:2a:a9:f2:5a:cf:2e:
                    c7:84:56:d5:50:cb:a1:f1:5b:69:29:b7:73:83:ea:
                    34:58:4c:3b:a5:db:6d:d4:48:0b:cd:da:d6:f3:dc:
                    4d:1f:b9:eb:12:d4:da:c3:bd:da:80:50:05:e1:09:
                    bf:73:00:07:55:b0:e5:48:56:52:8d:04:ad:1e:b9:
                    d9:92:af:cb:6f:3a:fb:1d:a4:62:f0:21:3a:ea:af:
                    55:a3:de:ad:ed:d4:88:43:57:a1:cd:50:99:12:f2:
                    d4:21:bd:27:77:4d:1d:1f:0a:6c:61:9d:97:ee:9b:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:50:C6:20:DC:45:9F:36:2A:A6:0D:A7:F7:29:F4:D0:F4:C0:A7
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.241.0/24
                  103.145.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:ac:e5:13:15:e3:9d:2b:fd:ad:63:b1:75:43:33:82:5b:e2:
         25:42:d3:eb:eb:09:0f:b4:fa:65:8a:51:b4:cf:31:30:99:62:
         a4:21:ae:43:eb:a8:16:eb:62:97:59:6f:a5:06:27:f5:07:45:
         19:53:08:9e:c4:2f:9b:cd:99:88:88:c8:73:19:9c:62:da:35:
         e6:ed:e2:0f:d5:17:b2:60:43:1f:fd:6e:3a:45:49:2b:2f:3c:
         83:21:2f:17:dd:19:bc:84:e7:28:72:2d:89:46:cc:ac:32:01:
         57:ee:46:cc:b0:d4:84:f1:03:60:17:01:81:3a:59:4e:3f:10:
         1f:d5:b7:9c:da:b1:61:b6:3e:35:04:d7:f0:ce:6e:4a:62:86:
         f1:2a:ac:59:bb:1b:b2:2e:f4:51:0b:23:4f:c6:c5:e8:e2:98:
         d1:a9:7d:64:b5:80:20:5f:59:c8:37:e9:93:29:0a:14:f0:25:
         83:ac:51:7a:d9:8e:d3:27:67:b1:52:be:53:02:11:94:39:a0:
         07:0f:e9:08:e2:8f:c4:5f:25:1e:af:ef:a1:2c:42:84:e5:b2:
         e3:65:fb:60:93:74:2c:76:8a:2e:49:58:5e:f8:70:ff:bd:96:
         e0:ca:7a:f6:e4:c7:06:7f:ff:7b:e1:ec:8a:0f:74:e1:26:40:
         26:ff:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:58 2026 by rpki-client