Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
File:                     94A5320663A111F092E32646C4F9AE02.roa (raw, json)
Hash identifier:          sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=
Subject key identifier:   E9:5F:23:CC:A5:08:14:5A:06:77:35:4E:FA:15:DC:FE:B7:16:F0:F4
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       07EF
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:03:54 +0000
ROA not before:           Mon 06 Oct 2025 22:22:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140697
IP address blocks:        103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Oct  6 22:22:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47f8a-bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:a1:07:e1:4d:f8:5d:22:5e:f6:08:56:dd:
                    de:18:83:00:61:64:d7:55:4f:bb:55:34:a1:db:58:
                    67:fe:2d:70:e8:9c:b0:18:82:73:96:09:d2:5d:20:
                    0b:47:ed:c9:d9:ce:6e:ec:ca:9a:39:c1:5a:58:2a:
                    d6:b0:1b:1c:cc:c0:71:ae:a5:f0:6f:ce:46:c3:e5:
                    43:ed:a7:97:37:9f:15:25:e9:fe:7e:7d:5b:be:af:
                    80:14:fb:1f:39:44:d1:32:07:70:e2:6d:fb:9b:55:
                    86:e9:03:69:b2:8d:17:26:b3:e1:85:b9:48:3b:5f:
                    55:d6:d5:f0:28:c5:4a:96:f5:0e:84:7d:6f:98:5b:
                    65:f9:62:f4:93:0f:8e:25:f8:e6:7f:85:ef:65:bc:
                    5b:ff:1b:12:6d:0a:41:a4:62:20:f7:87:88:b0:38:
                    4d:9a:d8:47:fa:86:a5:60:4d:75:e5:52:f2:b7:98:
                    00:c4:bf:f0:e6:6f:05:5f:14:93:7a:af:e7:3f:55:
                    4e:a9:96:c4:71:40:3f:a7:69:a1:19:8a:33:a5:96:
                    55:eb:99:fc:6d:46:9f:e4:6a:e0:6e:8f:67:ad:9c:
                    8e:cf:8b:7c:cb:5c:1c:79:3d:00:c7:f0:8f:23:ef:
                    08:08:fc:d9:7c:d4:44:e4:e1:ee:f0:49:16:4f:a7:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:23:CC:A5:08:14:5A:06:77:35:4E:FA:15:DC:FE:B7:16:F0:F4
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:db:df:69:27:55:49:a5:97:01:36:8b:d3:c9:4a:3d:84:
         e5:4c:45:ca:19:72:e0:90:5d:16:21:c2:c7:eb:b6:20:31:71:
         1a:5e:92:af:8e:10:eb:7c:5a:ab:c2:a1:e7:1d:13:58:9d:49:
         f3:fc:13:44:2b:78:e9:c7:d8:11:bb:d4:30:a0:c8:72:5d:ab:
         80:c9:5a:ef:90:b4:fb:ba:ba:a3:d1:54:84:73:12:8a:4c:d5:
         1a:3a:ad:fe:8b:4d:4c:fc:07:21:18:8f:45:f0:56:59:0c:1b:
         f7:38:68:ef:51:59:22:92:b4:d7:dc:19:92:fa:e0:17:84:85:
         3b:e2:b1:f0:43:67:95:4d:7d:2a:f9:de:2a:94:bc:19:ca:b1:
         56:b0:01:2b:17:d4:48:3d:5e:4a:1d:01:32:85:97:ac:ef:4e:
         90:54:cb:96:62:6a:75:2a:71:6d:cc:bc:d7:e6:7a:4d:cf:78:
         47:14:80:4a:f5:f2:1b:e7:82:02:f1:0b:86:35:17:6e:24:82:
         70:15:6d:c3:d6:a6:6a:9e:38:51:1c:7b:64:e5:e4:81:d8:5a:
         90:c8:0e:bc:6e:4e:ee:c0:57:9c:e2:21:75:04:72:45:70:6d:
         65:92:67:bc:33:24:a0:f9:7d:f9:62:70:d0:dc:2f:7c:e2:0a:
         6b:aa:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:47:56 2026 by rpki-client