Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E87976C65BA511EFBB8C405EC4F9AE02.roa
File:                     E87976C65BA511EFBB8C405EC4F9AE02.roa (raw, json)
Hash identifier:          JRf1OCmY002Z8K8CZ7Cc4/U2Tbk23T82QtGojtN3HZY=
Subject key identifier:   DE:C1:B3:33:FD:D7:3E:63:EA:B8:B2:5F:60:A5:92:20:8C:DA:E3:44
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E01
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E87976C65BA511EFBB8C405EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:16:21 +0000
ROA not before:           Thu 28 Aug 2025 14:53:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135978
IP address blocks:        103.140.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24065 (0x5e01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:42 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c35-eb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:8b:2e:4c:da:6d:ce:5c:57:ba:bc:7f:8e:
                    8c:d2:83:d3:c8:69:fd:1a:9b:97:28:97:f5:76:ed:
                    f6:9f:e7:af:47:51:00:fd:a3:35:a4:8f:78:db:83:
                    c3:ae:14:68:9f:42:06:93:39:45:02:c9:9f:aa:11:
                    94:b2:2f:73:3d:fb:08:c7:aa:de:5c:0f:b3:ae:bf:
                    ec:1d:97:51:d2:83:0d:7b:3f:9a:6f:46:36:62:7e:
                    34:0f:e6:87:a2:22:c9:0c:77:a6:15:6a:c6:1d:04:
                    d0:cf:99:34:f2:4e:e7:ec:51:d4:fe:1b:42:a6:f4:
                    9a:e6:bb:55:e5:52:75:5e:dc:8a:19:cd:6d:0f:83:
                    12:33:30:be:2f:2b:3c:10:e6:87:18:c5:e8:17:30:
                    0c:cb:86:03:db:2d:6d:df:df:ff:94:66:af:55:11:
                    14:d0:08:5c:4a:0d:38:56:a7:68:22:bd:75:7f:d1:
                    3a:7b:72:53:43:d5:27:82:6d:d3:a5:b3:f6:81:5d:
                    fc:58:0e:5e:50:cf:62:94:85:be:b8:bc:f4:2e:8e:
                    a1:1b:7a:db:1b:9c:3b:b5:fc:2e:9c:2e:6c:1c:e5:
                    e1:31:07:08:05:d1:63:40:3b:93:e4:18:6b:2d:63:
                    d5:fe:90:1f:34:c3:b0:89:3c:df:18:fe:64:a1:da:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:B3:33:FD:D7:3E:63:EA:B8:B2:5F:60:A5:92:20:8C:DA:E3:44
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E87976C65BA511EFBB8C405EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:96:03:f8:bd:91:08:3c:8a:e8:e6:e2:8d:eb:0a:00:b3:
         bf:77:73:35:89:56:e5:99:9c:4a:e2:c7:03:1f:d6:78:6f:01:
         bc:bd:03:c2:34:62:88:fe:0c:52:e1:ca:6e:1e:cb:0c:bb:3d:
         2b:e2:3f:1f:55:24:6a:4e:ba:5a:0f:5a:53:4d:f7:f3:4c:04:
         86:62:8d:94:ee:fe:25:b7:85:43:ca:1b:d4:c0:3e:d1:de:ba:
         32:b6:d5:ee:9e:c3:6a:f6:f9:e1:91:ee:5f:6e:84:32:90:ad:
         fc:d9:7f:cd:61:a9:1c:3d:b7:bd:39:e1:48:c0:dd:9f:d1:29:
         cd:b4:79:05:68:93:e2:e2:72:98:33:ac:eb:bf:90:8c:06:53:
         bd:5f:32:44:4e:6d:7b:09:bd:e0:1e:32:37:76:48:69:83:26:
         be:0b:39:d1:43:2c:76:d3:70:28:66:53:b8:c6:4e:2f:59:3d:
         6b:b2:4e:db:23:0b:87:89:14:a2:aa:bd:1a:d7:56:f0:f3:bc:
         c4:51:0b:24:8d:b6:74:69:99:63:09:af:00:29:3d:32:35:11:
         c0:6e:d4:1d:19:13:95:10:08:b4:93:0b:79:7c:95:15:85:75:
         ab:3f:42:a4:a2:5a:4a:16:f8:92:f6:52:81:f7:c0:de:61:63:
         61:8e:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:04 2026 by rpki-client