Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5949990EB20C11F0A33EA322C4F9AE02.roa
File:                     5949990EB20C11F0A33EA322C4F9AE02.roa (raw, json)
Hash identifier:          +bh/imJGqbqMAMH/zX3QiUpGQuU2U5NE96JD5fVlq6E=
Subject key identifier:   18:C7:FD:C9:D3:E4:32:98:5F:4D:6F:8D:6D:C4:5B:E2:0B:DD:ED:36
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BCE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5949990EB20C11F0A33EA322C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:30:46 +0000
ROA not before:           Sun 26 Oct 2025 01:37:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149077
IP address blocks:        103.180.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27598 (0x6bce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct 26 01:37:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61da6-9ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:59:97:83:d1:c6:7a:f3:0e:a0:19:8f:3e:
                    3f:f5:22:06:be:7f:00:b3:81:ad:80:5d:dd:2d:23:
                    0d:e3:4d:e4:0e:44:41:a4:c8:52:3e:81:ab:f6:96:
                    43:7b:f1:a3:18:df:dc:fa:6d:41:98:f3:28:65:7b:
                    33:90:6a:4f:ff:48:31:bf:df:fb:3d:ce:00:0e:42:
                    0a:bd:74:8d:b5:92:50:57:6b:24:ef:c0:36:19:32:
                    e3:d3:17:ea:df:ab:47:f0:ac:7c:65:ca:cf:97:fd:
                    94:52:21:b2:50:8e:a9:13:70:31:37:03:05:68:a1:
                    54:d9:1a:4c:47:9f:5e:9b:61:0c:3e:11:5f:74:5c:
                    09:af:06:33:7b:cb:15:e3:9e:3a:d6:7d:db:10:4c:
                    44:46:b7:67:ab:fa:37:e9:1d:31:ad:00:4e:91:80:
                    72:c2:f1:70:af:79:b5:3e:37:e5:0c:69:ea:f0:c3:
                    44:90:23:fe:8a:97:53:36:61:9b:48:ce:1c:35:b5:
                    0b:7d:cc:8b:3d:f2:7c:d0:0b:10:ed:a2:7b:ef:83:
                    98:46:77:ee:f2:a4:a0:e1:24:3f:fb:de:be:09:a0:
                    a0:0b:1b:9f:fd:48:c5:30:3d:8f:ff:df:3b:24:f8:
                    81:bc:29:f7:51:cb:fc:5a:84:c5:f4:85:50:06:92:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:FD:C9:D3:E4:32:98:5F:4D:6F:8D:6D:C4:5B:E2:0B:DD:ED:36
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5949990EB20C11F0A33EA322C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:05:57:01:bc:3b:ef:84:a7:91:85:a9:c1:17:4f:69:92:
         21:ec:46:26:a0:f4:56:ff:ef:ab:fe:a2:85:7b:7a:85:73:a4:
         03:d2:a5:7c:ba:36:80:4e:6d:a8:92:aa:fa:f9:c2:90:27:41:
         50:9a:00:a3:4c:d1:8a:3b:6a:9a:25:73:72:e0:64:58:ad:86:
         76:9f:dc:c3:ce:a0:c1:52:d5:7b:e3:86:23:05:e2:84:0a:63:
         61:73:df:09:a7:0f:1e:a7:88:02:5a:6b:1c:3a:c2:ae:04:cf:
         e2:7a:0a:32:3d:cf:f0:1e:ae:11:4e:bb:87:94:c1:e4:d3:d5:
         03:83:9f:c1:76:bb:ad:62:d2:58:c3:0f:93:dc:a2:7b:4a:96:
         e1:b2:2a:dd:4b:71:fd:c0:57:ff:92:c5:5d:03:ea:09:38:00:
         b6:52:1c:38:2b:76:50:77:35:28:4e:75:fa:74:8e:78:ba:94:
         59:f3:fa:9b:3f:c0:f4:09:7a:8a:98:09:13:2d:94:5f:fd:a1:
         78:23:2c:f3:4b:83:38:b3:4a:cb:24:53:3b:85:4f:1e:11:9c:
         c2:df:1b:a9:d8:da:d1:64:55:e9:d9:ea:35:92:38:e7:fb:d5:
         6f:b8:1d:ef:13:dd:bf:ee:88:a3:62:42:7e:06:cc:16:37:87:
         fb:3a:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:44 2026 by rpki-client