Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
File:                     5D5B0F7C34CA11EDA301482BC4F9AE02.roa (raw, json)
Hash identifier:          bGUurucCE7xNSzf7AWZvDtocoqxg3BVuYvZV6Ank38w=
Subject key identifier:   04:D8:6A:A3:C8:CF:B1:8D:A7:57:B9:AA:C4:AE:3C:7F:F6:95:8E:1C
Certificate issuer:       /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial:       0285
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
Signing time:             Thu 25 Dec 2025 01:21:47 +0000
ROA not before:           Thu 25 Dec 2025 01:21:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139863
IP address blocks:        103.146.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
                          rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
        Validity
            Not Before: Dec 25 01:21:47 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694c91ab-0a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:b6:1b:8a:9b:f3:2f:d0:46:c0:78:74:2b:
                    f7:ac:a6:e9:80:0d:1a:e2:54:7e:ef:00:a9:f6:ea:
                    00:9b:27:27:90:af:82:81:d1:18:c1:46:23:57:49:
                    0f:a5:b2:3a:58:99:d0:40:5b:af:f5:c6:88:4b:66:
                    ae:d5:f8:e2:15:26:07:f6:6a:ed:2d:1b:b6:c2:0f:
                    93:18:c9:9d:61:1e:33:d0:6b:04:e8:94:ce:45:fa:
                    a4:93:da:43:0b:3d:68:b2:33:23:c5:3e:db:ef:07:
                    70:cb:0d:e1:d9:67:ef:af:5a:5a:66:64:4d:86:dc:
                    c5:ad:c5:5b:e9:8c:c8:45:e0:6b:b8:c9:06:eb:b4:
                    c4:cf:0a:1c:52:e0:ff:3d:67:e2:13:d5:7d:e0:7b:
                    c8:9d:77:f6:81:ed:f7:0b:5b:9b:ca:ae:54:d7:49:
                    5e:5d:01:4d:cc:8f:0d:b3:57:c3:76:a7:1a:cf:11:
                    36:ac:ce:f6:36:ec:d9:13:c7:02:85:7c:8a:ca:73:
                    e0:96:1b:43:31:d4:e1:84:de:55:ae:5d:85:a6:cc:
                    04:4a:2f:ed:76:45:ab:33:97:c5:92:f2:0c:17:1e:
                    c2:a8:90:cd:6a:e0:31:14:90:16:f7:8d:1b:e8:ff:
                    b7:46:8d:31:1f:f6:ef:63:51:d3:44:99:46:44:48:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:6A:A3:C8:CF:B1:8D:A7:57:B9:AA:C4:AE:3C:7F:F6:95:8E:1C
            X509v3 Authority Key Identifier:
                keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:9b:f5:e9:5a:54:4a:ee:7c:02:46:82:f3:e1:ca:ec:02:
         72:47:f8:ff:13:43:64:9e:f4:f0:f4:c5:36:29:06:2d:5d:0d:
         92:d5:35:d6:0a:d4:85:ad:93:bf:3d:85:ec:d0:da:63:28:62:
         96:af:3e:60:31:81:96:e3:01:c4:d4:76:e5:97:af:36:11:81:
         d8:93:fa:8a:4a:76:20:67:ad:dd:c9:11:e6:3c:bc:01:0d:9e:
         b1:28:4f:30:19:91:de:37:ea:f5:f2:2b:91:25:75:c7:b9:7a:
         63:83:96:8c:04:78:d4:82:fd:e0:05:86:07:b6:d0:bf:42:f5:
         c9:c7:26:74:73:6f:ab:81:a7:ee:a2:27:8e:c1:50:73:68:f7:
         31:9d:d9:cf:55:94:33:8b:2c:0d:d5:28:78:df:8d:cd:fd:c6:
         48:45:f2:d2:66:22:61:14:6f:68:ac:f7:03:f3:48:08:22:18:
         31:ae:9d:a1:ee:a3:a6:e4:77:c8:01:b4:f2:e2:74:5c:3d:3a:
         1e:b4:fa:4d:6e:66:ce:73:3f:de:9c:6e:b6:c4:b5:73:88:2a:
         26:be:b2:d1:c3:f2:f5:f9:da:ca:ca:b5:4d:8b:e1:d1:a7:00:
         98:0c:e2:d4:a5:7f:de:7d:e2:36:8f:90:04:96:9f:ce:e1:e9:
         aa:d5:08:f5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz
NzEwMjEwRjAwHhcNMjUxMjI1MDEyMTQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRjOTFhYi0wYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGe2G4qb8y/QRsB4dCv3rKbpgA0a4lR+7wCp9uoAmycnkK+CgdEYwUYjV0kP
pbI6WJnQQFuv9caIS2au1fjiFSYH9mrtLRu2wg+TGMmdYR4z0GsE6JTORfqkk9pD
Cz1osjMjxT7b7wdwyw3h2Wfvr1paZmRNhtzFrcVb6YzIReBruMkG67TEzwocUuD/
PWfiE9V94HvInXf2ge33C1ubyq5U10leXQFNzI8Ns1fDdqcazxE2rM72NuzZE8cC
hXyKynPglhtDMdThhN5Vrl2FpswESi/tdkWrM5fFkvIMFx7CqJDNauAxFJAW940b
6P+3Ro0xH/bvY1HTRJlGREhwJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFATYaqPI
z7GNp1e5qsSuPH/2lY4cMB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0
MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF
UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc1RjYvMTNBNDIwQTgzNDIwMTFFRDg1RUNCRjMzQzRGOUFFMDIvNUQ1QjBGN0Mz
NENBMTFFREEzMDE0ODJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnklwwDQYJKoZIhvcNAQELBQADggEBAH23m/XpWlRK7nwC
RoLz4crsAnJH+P8TQ2Se9PD0xTYpBi1dDZLVNdYK1IWtk789hezQ2mMoYpavPmAx
gZbjAcTUduWXrzYRgdiT+opKdiBnrd3JEeY8vAENnrEoTzAZkd436vXyK5Eldce5
emODlowEeNSC/eAFhge20L9C9cnHJnRzb6uBp+6iJ47BUHNo9zGd2c9VlDOLLA3V
KHjfjc39xkhF8tJmImEUb2is9wPzSAgiGDGunaHuo6bkd8gBtPLidFw9Oh60+k1u
Zs5zP96cbrbEtXOIKia+stHD8vX52srKtU2L4dGnAJgM4tSlf9594jaPkASWn87h
6arVCPU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:45 2026 by rpki-client