Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
File:                     452D9EF494F811ED85ADE381C4F9AE02.roa (raw, json)
Hash identifier:          oaiaqucuuW2GkSf9+4cz6o/y7s/8O/quv+/nOFG+UjI=
Subject key identifier:   50:23:39:F5:7E:59:DD:94:73:32:FF:CC:DB:86:7E:10:20:99:9A:9C
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       0254
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:08:33 +0000
ROA not before:           Wed 11 Feb 2026 02:21:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137406
IP address blocks:        103.107.156.0/22 maxlen: 24
                          2403:8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Feb 11 02:21:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41021-107d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ef:ac:ed:14:86:c0:83:9f:27:e8:b5:d9:88:
                    0f:4e:9f:05:28:71:56:a5:01:fe:98:49:d0:a6:31:
                    59:48:0b:42:ad:16:8b:0b:a8:1d:f9:7d:16:fc:a7:
                    b5:ee:53:2f:0c:ef:9d:d2:25:d4:2b:b4:fb:95:9c:
                    0c:46:41:33:1a:e7:5c:71:67:84:2f:6b:6b:50:a7:
                    0c:9c:61:9a:5c:21:4f:4c:fd:3d:a7:5f:ae:03:d9:
                    4c:ad:c8:46:53:75:0d:c5:09:79:d1:6b:d2:c5:d6:
                    24:6a:53:d9:2e:ef:15:d6:4d:ab:a7:a1:39:c4:bb:
                    5b:e5:81:f4:28:b9:32:ee:b6:f9:08:36:2e:43:77:
                    8c:4c:f8:76:87:43:08:89:92:69:58:70:35:13:96:
                    7f:ad:ca:e6:92:79:8a:50:e7:b6:8f:b9:5c:be:bc:
                    51:5c:cc:ba:0e:d6:ef:01:be:51:3b:21:ac:ae:3c:
                    35:96:e9:24:8e:65:c8:6e:08:f5:16:14:e1:0e:57:
                    f8:94:d8:aa:68:d6:34:b8:e4:3e:8c:1c:0f:d6:0b:
                    a4:13:93:35:08:5a:fa:cd:62:51:ad:2e:03:57:2f:
                    fe:fe:a9:48:38:51:22:84:5a:e3:24:09:a6:6e:51:
                    02:01:91:ed:77:14:11:d2:27:d0:ce:55:94:48:73:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:23:39:F5:7E:59:DD:94:73:32:FF:CC:DB:86:7E:10:20:99:9A:9C
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.156.0/22
                IPv6:
                  2403:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:bb:b0:d2:89:7d:d3:bc:60:1f:c4:f6:d8:bb:c9:0f:af:a5:
         d4:41:1c:ad:30:5e:cb:21:37:67:92:e8:09:95:27:79:61:4d:
         98:cd:ff:78:a9:21:49:82:bb:0a:c0:09:40:d0:c5:0a:38:85:
         bf:b7:d7:71:4c:c7:9b:98:27:ef:45:4c:0a:3d:4c:d9:f2:cc:
         a4:a0:d0:0b:b8:5d:84:e4:a4:52:42:1f:73:44:a6:24:40:94:
         7b:24:6b:f7:02:08:6f:c8:f6:a6:73:14:31:ea:67:39:97:09:
         48:2d:03:d6:c5:32:57:4e:06:ec:fc:f5:0c:de:ee:6c:83:a8:
         2d:51:64:e9:58:6a:e2:f7:6a:96:b6:45:80:a9:10:40:31:5a:
         76:c8:fe:30:bc:6a:19:38:e0:a0:e9:e9:55:d5:6d:97:61:5c:
         b9:89:3a:39:ed:f8:09:c4:be:f7:ff:d2:8e:7d:06:84:64:ac:
         cd:a4:92:1d:d4:d5:65:ca:37:c8:3f:9f:b5:01:6e:94:be:7d:
         6e:6b:24:30:c8:c7:71:d3:db:80:fc:fb:45:6d:99:36:2a:db:
         a3:28:5e:cd:ce:aa:32:c2:f5:5d:be:ba:df:4c:a4:53:65:34:
         1e:e9:37:39:37:d4:ec:22:72:d4:c2:bc:9c:c2:1b:19:81:19:
         fe:58:28:70
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjYwMjExMDIyMTUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTAyMS0xMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9++s7RSGwIOfJ+i12YgPTp8FKHFWpQH+mEnQpjFZSAtCrRaLC6gd+X0W/Ke1
7lMvDO+d0iXUK7T7lZwMRkEzGudccWeEL2trUKcMnGGaXCFPTP09p1+uA9lMrchG
U3UNxQl50WvSxdYkalPZLu8V1k2rp6E5xLtb5YH0KLky7rb5CDYuQ3eMTPh2h0MI
iZJpWHA1E5Z/rcrmknmKUOe2j7lcvrxRXMy6DtbvAb5ROyGsrjw1lukkjmXIbgj1
FhThDlf4lNiqaNY0uOQ+jBwP1gukE5M1CFr6zWJRrS4DVy/+/qlIOFEihFrjJAmm
blECAZHtdxQR0ifQzlWUSHOilQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFAjOfV+
Wd2UczL/zNuGfhAgmZqcMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgwNjYvMThBNTEyNDg5NEY1MTFFREIxMEJDMjdEQzRGOUFFMDIvNDUyRDlFRjQ5
NEY4MTFFRDg1QURFMzgxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2ucMA0EAgACMAcDBQAkAwjAMA0GCSqGSIb3DQEBCwUAA4IBAQCu
u7DSiX3TvGAfxPbYu8kPr6XUQRytMF7LITdnkugJlSd5YU2Yzf94qSFJgrsKwAlA
0MUKOIW/t9dxTMebmCfvRUwKPUzZ8sykoNALuF2E5KRSQh9zRKYkQJR7JGv3Aghv
yPamcxQx6mc5lwlILQPWxTJXTgbs/PUM3u5sg6gtUWTpWGri92qWtkWAqRBAMVp2
yP4wvGoZOOCg6elV1W2XYVy5iTo57fgJxL73/9KOfQaEZKzNpJId1NVlyjfIP5+1
AW6Uvn1uayQwyMdx09uA/PtFbZk2KtujKF7NzqoywvVdvrrfTKRTZTQe6Tc5N9Ts
InLUwrycwhsZgRn+WChw
-----END CERTIFICATE-----
Generated at Sat Mar 14 20:37:27 2026 by rpki-client