Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File:                     42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          IVPv53p1dGN6jycgI+zSte+7/vaqhBn/R2wPn8kWpZY=
Subject key identifier:   E3:80:4B:C9:A6:2B:1B:BA:BF:3C:C7:5B:F3:D3:1C:74:01:C9:2F:08
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F50
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:21:57 +0000
ROA not before:           Thu 27 Nov 2025 06:18:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149105
IP address blocks:        103.145.2.0/23 maxlen: 24
                          103.188.80.0/23 maxlen: 24
                          220.158.134.0/23 maxlen: 24
                          2400:8160::/48 maxlen: 48
                          2405:73c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24400 (0x5f50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 27 06:18:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d85-7a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:58:02:e7:89:6e:d0:1a:38:79:cb:06:a8:
                    e9:5d:e7:e8:6e:fd:c6:ab:4a:80:1c:25:a5:25:e9:
                    ec:58:e4:51:77:94:5c:f8:79:e5:7f:ca:dd:00:de:
                    58:64:df:37:3a:bc:15:f3:48:fb:a6:4d:d2:11:90:
                    9e:ab:58:a2:e7:ab:bf:71:1e:f0:1b:0d:c7:4e:c9:
                    98:8b:9b:88:85:bc:43:72:32:e1:b2:43:70:ac:ed:
                    f9:87:e8:47:d3:6f:38:87:9d:d6:07:bb:be:9b:e5:
                    2a:21:75:dc:60:27:5d:1e:c8:83:a8:19:1f:6e:67:
                    64:ec:45:d5:71:0f:2d:00:3f:f8:e0:45:00:65:38:
                    ee:08:a3:8e:7f:99:41:b6:88:9c:91:50:a3:a2:43:
                    a5:3c:9c:00:6d:c1:7d:4d:21:f0:eb:0d:a4:aa:8c:
                    72:dd:f6:09:1f:e9:ec:34:07:7d:f0:4b:b1:0e:b3:
                    ab:ca:eb:d7:c2:23:c6:11:35:92:59:fa:b2:28:cd:
                    13:e8:d7:ac:54:dc:e5:53:96:6d:55:f1:ad:af:e8:
                    f2:98:14:6e:e8:fc:bc:ce:64:31:f9:e8:0a:9a:79:
                    ca:4c:c0:f6:cd:a5:9a:3e:95:bb:04:17:ae:11:84:
                    d9:0b:bf:de:4a:a5:d6:13:78:f2:11:17:65:d8:fd:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:4B:C9:A6:2B:1B:BA:BF:3C:C7:5B:F3:D3:1C:74:01:C9:2F:08
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.2.0/23
                  103.188.80.0/23
                  220.158.134.0/23
                IPv6:
                  2400:8160::/48
                  2405:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:17:c8:7f:fb:e5:20:a9:01:d5:71:e6:d7:37:e5:f4:5b:
         8f:fc:10:e8:76:a4:8e:b6:f6:ab:07:6f:3c:8f:e6:a8:cc:ab:
         ba:fc:dc:c4:cf:2d:56:0d:ae:fb:e0:80:9d:67:65:9c:0a:9a:
         f7:24:8d:a8:a8:0b:94:4c:35:aa:2c:bf:15:a0:4c:ba:a3:2c:
         ef:fe:b6:2f:47:be:ef:49:23:85:f8:c2:83:84:04:37:e4:f6:
         86:d7:e1:2c:d9:9c:02:4c:1d:8d:dc:8a:e4:f3:90:f3:aa:58:
         33:cf:38:9f:a2:fa:89:e6:f0:32:c5:20:c0:8a:2a:e2:89:d4:
         df:31:98:9d:73:6b:52:8b:91:72:6a:52:e7:4e:02:6c:fa:38:
         14:a3:02:4d:20:94:f7:96:3d:d6:88:28:94:90:af:49:96:d8:
         4a:89:88:72:74:4d:32:e1:70:4a:8c:2d:99:3e:3f:f3:1a:b3:
         c5:f0:5e:e7:29:94:b5:46:74:81:4f:32:ba:22:46:e0:41:5c:
         bd:96:fe:33:11:4b:91:77:39:11:26:51:e8:cb:a8:ac:5e:59:
         50:a1:91:a1:83:da:f4:22:77:94:50:75:59:cd:aa:37:3c:85:
         4a:da:81:d2:9e:d3:2c:1c:a2:1e:2e:b2:de:41:53:1e:c9:b6:
         28:a8:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:45 2026 by rpki-client