Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
File:                     2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (raw, json)
Hash identifier:          VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=
Subject key identifier:   BF:F0:6E:1C:EB:AD:E8:B0:12:CA:73:04:E9:9B:F4:40:92:C0:C0:D0
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       11E6
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:16:51 +0000
ROA not before:           Wed 20 Aug 2025 17:57:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.140.8.0/23 maxlen: 23
                          103.149.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4582 (0x11e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 20 17:57:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48293-67a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:d7:b1:be:5d:96:be:4f:94:29:f2:c4:85:
                    99:51:7a:62:8f:7d:d1:d0:14:68:bd:ad:94:61:8b:
                    e3:46:fa:42:2b:1b:b1:15:10:dd:f5:ac:2f:c7:d5:
                    ce:c9:51:d0:cb:7c:f1:e6:bb:43:bf:fb:27:08:64:
                    f8:ec:6b:f2:55:5f:aa:da:dc:33:f1:84:4b:e2:a3:
                    2c:60:79:11:3c:93:e8:8e:aa:1a:9f:d3:e2:f9:a9:
                    5a:7b:6a:dd:f8:5d:1e:bc:78:2e:29:83:e4:a1:e6:
                    cf:ee:e3:ec:cf:d6:0f:0c:5a:0f:bd:09:2b:38:95:
                    17:fa:ac:76:ab:71:32:22:c5:e8:6d:56:48:f8:72:
                    2e:bc:fa:64:d5:a5:f1:41:e0:58:cd:2e:4f:08:2b:
                    c8:66:23:47:b2:69:ca:64:de:e4:d5:2b:62:92:09:
                    4d:b8:85:62:5d:90:5b:3e:9b:48:29:d2:c1:61:6c:
                    5f:0a:40:f3:e2:10:f7:41:08:63:53:aa:bf:f9:b0:
                    a3:f5:6c:d2:4c:1d:0b:2a:9b:82:50:da:77:d0:18:
                    e2:43:2a:2e:a1:c0:9e:e9:2f:9a:6c:43:9b:01:97:
                    c6:ce:1a:d3:eb:35:a6:88:6a:04:8d:6c:90:6b:2a:
                    69:34:05:a4:82:28:a3:d2:94:b0:96:58:79:06:dd:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:6E:1C:EB:AD:E8:B0:12:CA:73:04:E9:9B:F4:40:92:C0:C0:D0
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.8.0/23
                  103.149.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:13:1e:5f:da:93:fc:d7:a5:32:f0:38:54:97:37:f3:f6:5e:
         36:82:8e:de:9a:70:d8:07:b7:3f:7d:2a:d0:94:09:e8:17:1a:
         a8:48:9c:be:9e:c0:33:00:08:6a:54:a6:77:2e:5a:20:87:18:
         73:c0:36:1f:12:af:c7:c5:86:2b:0c:dc:fa:d8:a5:8c:a7:84:
         57:57:7c:f7:ac:a9:7e:ba:bb:af:98:73:86:c3:1a:da:98:86:
         c4:b6:19:b4:78:fd:b2:14:81:3b:3d:07:b4:ab:ba:6b:c2:82:
         23:2d:ad:e3:70:f4:21:d6:9a:95:1b:02:d8:f6:0a:a1:bb:41:
         d0:e8:a6:fe:3d:77:dc:80:f3:ff:f6:d0:2d:67:3f:64:e0:fd:
         13:92:71:a3:c8:b4:01:ac:a1:8b:6e:25:b4:0b:1a:97:3f:53:
         1c:42:3d:24:02:05:61:65:df:a6:d7:12:fc:33:3c:81:4e:33:
         3f:af:ce:4d:86:64:60:9b:87:8b:36:ee:7c:e9:8b:c8:c8:72:
         44:3f:8e:29:5a:8c:89:d4:4e:18:11:54:3a:65:82:ae:b7:da:
         89:54:be:a3:9a:46:11:85:d1:2d:a5:0e:b9:02:0e:ae:e2:1a:
         c6:58:a8:44:27:8b:7d:e8:e2:2b:79:b2:68:9a:e0:02:a7:d4:
         e7:49:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:17 2026 by rpki-client