Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/71E30CDCC4ED11EAA1C5766AC4F9AE02.roa
File:                     71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (raw, json)
Hash identifier:          7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=
Subject key identifier:   44:5F:51:E8:AF:70:43:41:52:AB:EB:E4:70:37:B0:EF:44:AB:36:56
Certificate issuer:       /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial:       0C3A
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/71E30CDCC4ED11EAA1C5766AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:42:08 +0000
ROA not before:           Fri 16 Jan 2026 19:15:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133495
IP address blocks:        103.147.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3130 (0xc3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
        Validity
            Not Before: Jan 16 19:15:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a51520-04b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:e0:33:d3:1d:42:3d:8a:1b:7f:84:00:d4:
                    8a:cb:b1:0d:68:b2:46:af:61:6d:1a:a5:a7:76:90:
                    50:ed:cf:50:38:24:35:4c:bc:aa:dc:ba:1f:64:05:
                    a9:a0:9e:17:57:2e:23:4f:11:ee:31:75:56:71:75:
                    a8:a8:2a:e5:6a:81:8d:65:7a:be:3c:64:fb:ca:42:
                    e8:6b:8d:0d:59:91:7f:ac:af:42:54:cb:0c:49:b0:
                    48:3f:f2:a3:ba:d8:66:1d:84:d6:15:23:e7:43:80:
                    6e:f0:0b:37:e1:af:c2:ce:94:5e:c9:18:70:08:59:
                    6a:88:d3:15:e1:f5:97:d9:3f:56:5d:77:6d:a9:e2:
                    4e:9c:ba:0c:11:31:56:7c:2f:3b:4a:b6:7a:76:36:
                    30:1d:7c:89:37:29:29:17:77:30:d4:d1:58:95:d1:
                    37:75:eb:b1:6c:b5:c5:75:4f:77:bd:95:c9:b5:60:
                    b6:9a:b3:5d:6d:ee:a7:98:8c:af:67:76:53:02:fe:
                    06:e9:54:02:a7:61:4a:4c:a6:cc:e1:d5:6e:b7:f1:
                    9e:71:f4:a1:57:e7:f2:ac:2e:db:56:be:5d:62:70:
                    14:88:a6:74:55:98:71:bc:a3:58:02:51:4b:62:b7:
                    75:1f:62:ff:47:04:cc:22:55:90:17:df:67:be:89:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:51:E8:AF:70:43:41:52:AB:EB:E4:70:37:B0:EF:44:AB:36:56
            X509v3 Authority Key Identifier:
                keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/71E30CDCC4ED11EAA1C5766AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:8b:3f:40:f4:cc:2b:1d:ca:bf:93:d2:fe:93:1b:f8:86:
         57:a0:4b:6b:ca:45:c1:3b:81:b1:17:c2:07:5a:b9:f3:55:b8:
         07:1d:fd:f6:af:29:aa:59:96:d1:cf:fd:86:a6:d3:6d:28:ba:
         62:0c:a6:66:fe:51:53:af:f4:32:90:a3:ff:a2:49:b6:71:c3:
         d8:fd:d9:37:2e:3d:e6:05:bf:02:c9:8d:7f:87:64:88:bb:ee:
         87:e5:43:1a:4b:c0:f2:73:28:0f:85:2b:12:11:03:f8:8d:de:
         6d:58:ee:9e:04:1e:0f:13:ef:db:5f:51:bb:42:c8:27:7f:44:
         e0:ab:45:b1:2d:92:ca:6a:90:78:34:4c:72:91:96:44:25:0e:
         4d:a6:cd:c9:47:88:4e:15:74:ab:5e:a0:6e:f0:ed:ba:bc:c1:
         73:f0:80:7e:ba:06:fb:b5:49:69:70:35:98:f1:a6:1e:5e:77:
         36:24:c3:ab:01:d2:3b:33:4e:70:82:39:7a:04:e9:d3:78:6c:
         ec:e3:41:66:61:94:a4:ee:b4:d3:b3:84:59:1d:09:3d:fc:58:
         e6:91:0d:3a:9b:21:9b:5c:4b:7e:a2:03:dd:7c:b6:2f:64:1a:
         f3:80:98:5f:ae:ee:b9:c0:64:ec:6b:01:39:df:45:9b:96:00:
         03:a7:88:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3
RjE5QjREMUYwHhcNMjYwMTE2MTkxNTQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTUyMC0wNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqjgM9MdQj2KG3+EANSKy7ENaLJGr2FtGqWndpBQ7c9QOCQ1TLyq3LofZAWp
oJ4XVy4jTxHuMXVWcXWoqCrlaoGNZXq+PGT7ykLoa40NWZF/rK9CVMsMSbBIP/Kj
uthmHYTWFSPnQ4Bu8As34a/CzpReyRhwCFlqiNMV4fWX2T9WXXdtqeJOnLoMETFW
fC87SrZ6djYwHXyJNykpF3cw1NFYldE3deuxbLXFdU93vZXJtWC2mrNdbe6nmIyv
Z3ZTAv4G6VQCp2FKTKbM4dVut/GecfShV+fyrC7bVr5dYnAUiKZ0VZhxvKNYAlFL
Yrd1H2L/RwTMIlWQF99nvomWnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFERfUeiv
cENBUqvr5HA3sO9EqzZWMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD
NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBDMEIvNDQ1OTQ0OEMyQzZBMTFFQTlDRUNCRjRBQzRGOUFFMDIvNzFFMzBDREND
NEVEMTFFQUExQzU3NjZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5MqMA0GCSqGSIb3DQEBCwUAA4IBAQA9xos/QPTMKx3Kv5PS/pMb
+IZXoEtrykXBO4GxF8IHWrnzVbgHHf32rymqWZbRz/2GptNtKLpiDKZm/lFTr/Qy
kKP/okm2ccPY/dk3Lj3mBb8CyY1/h2SIu+6H5UMaS8DycygPhSsSEQP4jd5tWO6e
BB4PE+/bX1G7Qsgnf0Tgq0WxLZLKapB4NExykZZEJQ5Nps3JR4hOFXSrXqBu8O26
vMFz8IB+ugb7tUlpcDWY8aYeXnc2JMOrAdI7M05wgjl6BOnTeGzs40FmYZSk7rTT
s4RZHQk9/FjmkQ06myGbXEt+ogPdfLYvZBrzgJhfru65wGTsawE530WblgADp4jx
-----END CERTIFICATE-----
Generated at Sat Mar 14 20:47:28 2026 by rpki-client