Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa
File:                     BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa (raw, json)
Hash identifier:          YEQDwAMfhgROrpDc2HE6BT9yLpasOXl1uyvch2ffuhw=
Subject key identifier:   E1:FE:DF:F9:7D:8E:A6:BC:1B:BC:BB:9D:2C:17:3D:97:7A:3E:62:3D
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A10
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:26 +0000
ROA not before:           Wed 27 Aug 2025 01:05:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134682
IP address blocks:        203.146.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576 (0xa10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58845-8338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:30:22:8f:e9:2a:98:75:e0:cd:f0:46:04:
                    bb:1e:c9:9b:cd:20:97:4c:fa:4f:53:49:e7:56:e7:
                    a2:40:fc:61:e7:9b:80:14:2a:de:c6:52:b1:9d:90:
                    1f:58:0e:49:1b:a3:a3:3e:01:ea:ef:37:34:df:4a:
                    9c:03:21:4e:d5:b8:96:20:35:e2:39:10:62:45:21:
                    68:e6:37:4d:6a:c8:f7:e3:1f:10:31:c0:b8:e7:75:
                    c6:07:e9:3e:1a:58:05:e3:c6:2b:b4:1c:88:0a:1d:
                    9b:78:7a:df:31:f5:29:db:cd:b1:e5:ff:64:38:5f:
                    af:44:e6:60:a5:0e:e2:90:30:df:2d:e7:76:4e:be:
                    6a:8e:23:e0:ba:a8:20:10:3a:59:00:be:94:ba:9e:
                    5c:0a:b2:ef:e2:8e:68:9f:42:12:40:fc:9c:3a:d2:
                    ef:46:d1:75:84:d2:67:c0:1e:2c:8e:60:2f:38:8c:
                    5f:2d:35:10:36:15:64:3d:88:5f:d4:a0:9e:2c:08:
                    68:5c:7f:cd:50:42:3f:40:82:31:da:87:e0:f4:20:
                    17:9d:2b:16:08:d0:05:1f:3c:6d:ff:0e:32:ff:da:
                    d6:56:ed:95:8a:e1:f2:f7:40:86:85:fa:b3:72:30:
                    ef:1f:25:f8:70:43:27:a6:29:8d:ac:09:1f:be:a7:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:DF:F9:7D:8E:A6:BC:1B:BC:BB:9D:2C:17:3D:97:7A:3E:62:3D
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:2e:04:a2:ef:56:6d:4f:b1:24:5c:81:40:87:08:5e:2b:
         95:dc:50:80:ac:56:0f:b6:2a:dc:35:55:bb:17:ab:e8:54:03:
         be:ba:47:b8:a0:23:8b:0c:0c:c8:c8:63:fe:57:49:57:d3:c1:
         05:ef:fd:83:65:0e:08:78:b6:ce:44:e5:56:c2:ec:3c:35:0b:
         34:a7:d1:4e:65:d3:30:30:7e:48:e2:d2:65:da:ab:22:b4:f6:
         eb:f9:42:c3:97:23:6c:17:ac:7a:8f:92:6e:81:f8:51:a9:03:
         a3:b2:0f:8b:f3:91:0c:af:9b:0c:5d:a9:84:62:63:95:ab:8d:
         fe:5e:ee:85:d9:9d:9a:d2:d7:5f:5b:e7:1a:31:0d:18:30:bb:
         7b:86:ce:2d:c5:b6:59:a4:73:81:e3:e7:26:7e:e4:b6:e1:ff:
         0b:eb:9d:2a:ae:cb:97:a0:6c:7d:ed:36:d1:04:0c:d2:71:5f:
         d7:47:aa:14:99:5c:d9:00:d7:9e:6a:40:66:9b:d4:46:81:4e:
         e0:8a:b5:1f:2c:d5:b9:f8:5d:2c:4b:ba:d8:59:fc:78:71:09:
         71:53:47:67:5a:20:81:89:fa:92:91:ba:27:17:97:80:59:3b:
         24:99:59:42:6d:14:78:a0:eb:53:5d:3e:33:59:e9:6b:f2:89:
         a0:41:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:23:20 2026 by rpki-client