Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa
File:                     091F81047A5411EB9AC2283DC4F9AE02.roa (raw, json)
Hash identifier:          ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=
Subject key identifier:   E8:C4:CC:7C:DC:DA:6E:02:69:53:82:6E:20:CC:1B:64:C6:79:41:CC
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0CE9
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:40:18 +0000
ROA not before:           Wed 31 Dec 2025 18:16:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132825
IP address blocks:        103.145.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Dec 31 18:16:09 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47a02-34e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:96:ff:be:34:b0:7b:c9:ff:e5:35:b3:0c:
                    c2:c6:3b:dd:d0:f9:37:3c:fc:29:f5:b3:2e:a8:67:
                    1f:fa:93:7a:4c:c1:0a:96:76:af:11:89:38:c9:1b:
                    f4:07:07:f8:2d:ae:3d:77:ed:e4:77:b6:d7:35:ec:
                    e1:a2:b3:dc:87:05:08:08:de:48:66:20:e0:36:7a:
                    a6:85:be:c7:49:ab:3c:ad:af:4f:20:30:4f:b0:39:
                    c1:5c:fa:cd:5d:3f:5f:19:85:4c:4b:bf:14:f7:c2:
                    fd:55:70:04:f9:4b:60:ff:cf:e1:07:97:aa:a2:4a:
                    f9:fa:eb:86:94:07:bb:e0:78:1b:04:a5:24:37:9a:
                    04:af:80:d1:23:e7:6d:f3:78:d9:94:3c:ae:3f:eb:
                    24:a6:47:b6:5c:8c:ae:5c:5e:05:54:84:93:3b:2f:
                    7e:3b:aa:e3:e9:fd:95:f5:22:aa:fb:77:27:ba:4d:
                    5b:a3:59:88:42:78:ff:e0:78:0c:65:27:ca:aa:61:
                    4f:92:02:1a:14:20:76:64:b9:9f:8a:79:71:87:18:
                    db:69:be:24:b9:7b:fc:ca:c4:3a:43:ea:a0:d3:ba:
                    9e:b3:3b:87:34:21:a8:bb:c6:5f:70:3a:f8:12:05:
                    a2:f3:c6:bb:ac:fc:cb:f2:96:5d:fc:00:06:63:7d:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:CC:7C:DC:DA:6E:02:69:53:82:6E:20:CC:1B:64:C6:79:41:CC
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:2e:71:15:2d:32:84:7e:ac:ca:69:75:0e:3a:e6:aa:98:
         21:7b:05:2a:39:85:c9:3f:48:96:10:a1:16:35:a8:55:8a:1c:
         10:ab:68:6c:6c:8b:61:21:3f:ed:b5:87:29:0f:36:d1:9f:1f:
         85:a4:ee:7e:72:b4:40:81:7c:2e:02:11:3a:07:fc:a6:45:b6:
         a3:e5:87:12:0d:3c:47:50:17:89:af:92:33:00:b9:93:36:b3:
         57:09:ba:1b:dd:25:92:1a:08:06:ab:1b:43:8e:c1:84:9b:9e:
         c7:91:07:80:b4:9a:6f:13:6f:f0:97:e1:c5:2f:fe:e6:f9:1a:
         7b:26:61:5e:ca:aa:6e:9d:2c:a4:4c:1f:50:93:65:c0:d1:a9:
         d5:83:60:9a:c1:66:23:4f:4f:20:28:56:05:68:c5:70:a7:d3:
         ea:17:0c:5f:9c:bf:88:30:3f:6b:df:22:bb:25:30:a3:07:e5:
         d9:f7:72:10:69:44:2e:38:01:b4:e1:a8:e5:0d:1c:fc:76:c2:
         b1:13:30:c8:57:ba:d9:f8:68:07:8d:8d:06:c5:d7:27:71:49:
         8f:e7:c2:0f:57:35:83:61:7e:fb:80:61:93:56:65:0c:e3:d2:
         94:ca:69:79:ec:4e:2a:c7:a6:23:f4:7e:ea:9e:21:cb:54:cb:
         fe:7a:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:20 2026 by rpki-client