Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa
File:                     8F467E0082DD11EABD325010C4F9AE02.roa (raw, json)
Hash identifier:          q4cXehVjnW5Frytnddrazb4hlR7ZeGkY8+gUIhDzgls=
Subject key identifier:   FE:B2:A3:37:3E:63:65:DC:F4:90:1B:D2:65:F8:67:47:2F:41:E0:F7
Certificate issuer:       /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial:       0A6A
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 20:25:06 +0000
ROA not before:           Tue 31 Mar 2026 20:25:06 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     4657
IP address blocks:        103.149.23.0/24 maxlen: 24
                          2001:df3:a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
                          rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
        Validity
            Not Before: Mar 31 20:25:06 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cc2da2-da48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:4a:af:fa:7e:b2:40:e4:2b:1c:2e:6b:3c:
                    37:f5:fc:e0:82:ea:0e:3d:b0:bd:f4:42:7b:10:d5:
                    ca:36:9a:dd:28:2d:90:94:dc:15:13:a4:60:ec:58:
                    54:16:4e:ce:89:b7:f9:12:8f:b7:49:cb:11:dd:87:
                    b9:38:c1:be:a5:5f:fe:24:26:88:98:b7:76:c7:8e:
                    bd:b9:94:1c:35:3a:d2:df:b6:43:21:9f:d8:43:cb:
                    75:33:1e:d3:8f:f2:b3:67:23:12:b1:55:f2:b8:7c:
                    92:51:ae:44:4d:cb:e2:24:d8:d3:06:a1:e3:4c:53:
                    7f:58:9c:8c:a8:d5:3d:e5:49:67:8a:43:e3:35:f5:
                    c8:ab:3c:da:79:e7:8c:b5:70:d2:79:b7:f9:04:30:
                    00:1e:8e:1f:9a:bb:d3:fa:d7:e1:59:4d:2d:02:70:
                    4f:78:f6:dd:52:34:fb:ba:86:65:98:19:58:d0:03:
                    99:b6:0b:5b:15:7a:6d:5a:ce:39:82:39:cb:8d:ca:
                    14:f1:82:e8:82:0e:cb:38:41:93:a6:12:45:ea:3d:
                    66:07:77:75:d1:25:10:aa:ce:3d:8a:1d:34:4a:38:
                    f0:14:d6:77:37:f1:4f:be:c1:65:04:6f:71:9a:62:
                    44:0a:6f:47:28:e7:e8:56:11:4e:0b:45:28:2b:f2:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B2:A3:37:3E:63:65:DC:F4:90:1B:D2:65:F8:67:47:2F:41:E0:F7
            X509v3 Authority Key Identifier:
                keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.23.0/24
                IPv6:
                  2001:df3:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:f0:e0:1b:5e:ae:39:09:85:ca:87:32:19:16:b8:ca:f9:
         07:ed:a2:f5:f9:0f:7a:71:b6:11:c2:31:59:05:10:94:98:ba:
         2a:94:0f:07:9d:64:f6:01:b9:b2:6e:75:cd:67:63:a1:76:6e:
         76:90:87:27:0d:3c:b4:4a:75:07:b9:6b:fa:94:7c:28:b6:13:
         06:7c:1c:f5:1e:42:83:7c:66:d5:15:80:31:ef:9b:08:9d:c6:
         e6:33:90:0f:1f:ba:7a:b6:a1:0e:c0:cb:6b:81:a0:15:7c:29:
         d5:4d:ae:ff:cd:d3:f3:92:ef:c3:2e:72:04:3d:91:ea:b0:b1:
         fb:0b:14:ef:60:f0:00:22:4f:c4:46:aa:2c:bd:6e:67:2d:ac:
         59:43:8d:28:ba:22:4f:1e:5c:3c:b5:50:27:ad:f0:a8:01:35:
         2f:4e:45:ea:bf:36:7b:00:66:7d:a4:74:6c:98:2f:70:08:2e:
         99:ad:ec:8f:02:f5:d6:95:52:c9:28:33:31:ea:84:73:47:e0:
         a7:97:e3:9d:8c:cb:0c:38:00:32:cc:88:15:28:a3:6e:5c:e7:
         c6:07:aa:9c:21:d9:c1:f4:c3:7a:b0:cf:60:59:96:86:48:68:
         89:83:03:a2:d3:c1:99:d0:20:3e:47:1d:3a:e4:ce:fc:de:0f:
         73:0a:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:07:13 2026 by rpki-client