Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa
File:                     6D24010C300311F0995E874EC4F9AE02.roa (raw, json)
Hash identifier:          v88X53jf1N+0e4ko5ebfMPBilUzf1Ikr3zZ6sHanDNI=
Subject key identifier:   8C:02:0E:6C:9A:AB:1A:B5:23:79:B4:B0:DC:4E:7E:20:D8:2F:C8:AF
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       0676
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:18:59 +0000
ROA not before:           Tue 13 May 2025 14:06:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214143
IP address blocks:        103.136.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 22:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: May 13 14:06:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51dc3-8282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:7a:45:eb:21:42:09:ca:ec:b4:c9:ae:0c:
                    49:cd:2d:d4:1e:43:21:01:e1:db:75:72:ff:88:a9:
                    2e:3f:09:94:0f:a9:04:e2:04:df:8e:3b:2b:0b:06:
                    ad:c2:49:c0:9e:64:28:d8:65:14:ff:88:ff:db:0b:
                    40:c8:ac:51:be:a9:de:be:b1:52:d2:1d:0f:de:5e:
                    f1:49:42:98:ca:32:8c:d5:a7:46:d2:33:11:22:80:
                    1b:a6:1f:34:84:d4:97:29:e7:24:17:55:be:5b:3d:
                    39:0a:94:84:df:5b:73:dd:79:c5:73:40:f5:3b:00:
                    59:ea:fb:8a:98:fb:ec:37:8a:aa:79:7d:60:af:6e:
                    15:86:a9:83:fc:7b:c7:68:b0:3c:70:2e:54:83:4a:
                    e2:a5:71:4c:7c:26:54:ff:d8:53:17:1d:87:d6:b8:
                    73:73:b6:d6:ad:ea:c3:e3:54:c3:8b:cd:1f:88:62:
                    5f:11:40:43:ab:62:c4:cc:86:3d:e1:2c:6b:38:ea:
                    e7:b5:75:43:d2:6d:d8:d3:e6:63:7f:ec:ce:4f:c4:
                    de:57:d4:fe:bd:4c:09:20:d5:0e:60:1e:dd:87:be:
                    a6:f1:a6:4e:4d:85:aa:36:97:22:0e:ee:62:81:e6:
                    50:9c:33:13:e6:21:3f:76:97:76:2b:2a:90:2f:a0:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:0E:6C:9A:AB:1A:B5:23:79:B4:B0:DC:4E:7E:20:D8:2F:C8:AF
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:d3:37:65:90:22:0c:2c:31:5f:e4:57:c2:aa:d3:cc:95:fc:
         ff:1c:fa:f3:79:6f:34:a4:c3:e0:82:6d:5a:b7:4f:08:b2:a9:
         5a:2b:69:73:47:8e:ed:9f:b1:bd:a0:22:6d:12:81:f0:9f:80:
         54:e5:54:dd:df:b3:95:57:93:4c:b4:d8:54:15:52:c5:6c:ef:
         43:97:6c:e4:ea:cf:1b:d8:98:40:bf:57:12:b5:0e:22:0d:25:
         62:1b:43:fe:d7:96:71:bf:06:f1:e3:a1:2a:b5:f8:37:fe:b1:
         9a:2e:73:88:ad:5b:31:10:26:a2:f1:3f:6e:68:29:e2:11:ab:
         e1:09:97:a7:5d:46:ab:cc:5b:c3:14:7b:e6:a8:30:11:57:62:
         6f:31:2a:8c:c9:d3:d8:e9:b4:19:34:bc:45:2d:6d:f1:be:93:
         a1:6a:ca:a3:32:a2:9a:4a:1d:96:f9:60:ef:9a:2b:0f:5e:e7:
         95:b8:4c:40:33:4c:d7:f6:49:f2:d9:d3:42:d8:f2:b8:4e:96:
         82:ea:f6:10:17:7c:e6:01:1a:7f:db:7f:3f:ea:2d:3f:65:62:
         9b:33:0b:5e:d7:2d:62:a9:cb:4d:a1:3d:fa:d8:12:7a:5a:c1:
         a3:f2:6a:a2:45:51:3b:7f:c7:13:93:a7:ca:c6:1d:5c:21:c3:
         ac:22:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:50:14 2026 by rpki-client