Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
File:                     8504C794D12411EBAD06CD48C4F9AE02.roa (raw, json)
Hash identifier:          ifDDbt4OWXksthD+1HJTY3slL7RKotj1p5C4LLQRkDQ=
Subject key identifier:   15:F6:41:82:5C:29:25:B6:32:A5:40:79:AC:8C:1A:60:BF:0D:9C:0A
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       061B
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 22:18:32 +0000
ROA not before:           Fri 16 Jan 2026 22:18:32 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138505
IP address blocks:        103.160.252.0/23 maxlen: 23
                          103.160.252.0/24 maxlen: 24
                          103.160.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Jan 16 22:18:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696ab937-37c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:aa:da:46:03:8f:78:62:40:1f:9a:05:83:
                    ab:5d:e5:c0:d5:44:90:62:de:39:5a:67:da:a7:72:
                    95:ed:47:92:5c:f1:3d:36:39:2c:30:40:45:32:73:
                    3e:f7:f0:9f:0c:b4:0b:58:56:02:8b:db:44:58:5f:
                    46:9f:11:82:3c:d3:3d:c9:bb:4a:63:4f:54:d1:15:
                    ba:01:ca:11:9d:11:56:67:85:b0:94:84:29:bd:a1:
                    5b:8e:50:85:b4:df:c1:03:6b:c7:30:9a:5a:b0:9b:
                    51:87:25:1d:27:e7:3e:3a:ee:91:a9:32:39:92:6c:
                    8e:11:17:13:02:1b:6b:8f:3b:c8:e5:f8:e1:23:f0:
                    fe:2b:c7:ea:56:76:58:99:06:ac:1f:6a:5e:75:bb:
                    08:d4:6a:df:13:1a:7c:d5:df:87:43:81:26:de:e8:
                    4f:51:5f:0a:ec:3f:ad:36:21:3e:a4:c0:8e:a7:7d:
                    a0:88:c4:c1:8b:14:ff:5e:61:52:de:b9:f8:c4:06:
                    9f:94:b1:21:f9:be:b2:a4:7e:ea:bd:67:47:a4:07:
                    f7:b4:92:cd:41:08:cf:5d:21:51:b1:3b:bb:b6:28:
                    4f:46:e0:e0:b0:c4:00:e6:44:b8:68:67:35:85:58:
                    1d:3d:ec:8e:e8:c9:99:10:32:47:ec:0c:95:01:c8:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F6:41:82:5C:29:25:B6:32:A5:40:79:AC:8C:1A:60:BF:0D:9C:0A
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:96:43:44:00:a1:fa:ff:80:8c:22:d3:eb:bc:14:18:49:
         0e:54:9d:b2:8e:f9:f8:f4:74:ab:68:74:e7:4a:97:0b:46:9e:
         eb:f1:05:64:de:ce:ab:c3:08:38:c1:75:e2:9a:b3:4c:52:73:
         c2:4d:9f:df:10:6c:d8:e3:48:bf:3f:47:53:84:a6:ec:bf:81:
         63:71:be:6f:2b:45:ca:a5:d9:29:85:53:53:7b:0c:22:6f:6a:
         cf:21:c3:ea:ee:e0:33:5b:62:df:38:a6:09:22:05:b1:63:ef:
         cc:3f:58:51:24:de:29:f3:5d:41:7e:33:3a:6c:56:8c:9d:fd:
         44:ab:0b:2f:12:19:28:1c:a7:3d:04:83:59:d3:29:39:bb:ad:
         be:2b:c8:ae:10:91:51:c6:7e:24:d8:3c:1b:93:52:f8:dc:28:
         68:d8:0b:3b:5f:ad:97:62:4d:ad:e7:97:cd:ce:4b:a7:4b:f8:
         12:9d:e0:bf:f3:fd:8f:5f:ee:1a:0c:c2:1f:1e:2b:b4:43:c5:
         1e:2d:ad:0d:98:40:19:15:d5:ec:1a:72:53:7e:47:83:36:9d:
         31:fd:ce:6a:f8:9e:59:28:0f:f3:cd:e3:1c:89:a8:24:ad:ba:
         63:ec:08:ad:6e:4c:45:d6:be:da:2d:e1:4b:ca:2c:65:19:8d:
         dd:75:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:05 2026 by rpki-client