Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
File:                     73E253FC76D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier:          7TXxWu5je2wgsHszDlPDcInyo6G0X3w93X7lFayt8pk=
Subject key identifier:   F4:AF:AA:12:59:B0:F8:BE:B2:40:05:01:B7:FA:19:D3:B4:94:30:BA
Certificate issuer:       /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial:       0240
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 01:21:38 +0000
ROA not before:           Wed 31 Dec 2025 01:21:38 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150667
IP address blocks:        103.51.84.0/23 maxlen: 23
                          103.51.84.0/24 maxlen: 24
                          103.51.85.0/24 maxlen: 24
                          2001:df1:a8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
        Validity
            Not Before: Dec 31 01:21:38 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69547aa2-d129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:d9:c3:ac:c4:1e:69:bd:f7:0d:db:ed:dd:
                    4b:96:c8:3b:5e:43:1a:e1:ba:3d:17:51:ef:5c:b4:
                    01:9e:30:d5:02:f6:77:d9:b1:06:f0:70:2f:d9:9e:
                    0f:1a:b2:b4:91:4d:8d:9c:cc:e5:21:99:7d:e8:39:
                    02:85:18:34:36:15:81:83:55:fd:f2:14:83:c7:d3:
                    84:ba:f1:3b:12:f3:1f:9d:76:cd:b2:28:46:37:e5:
                    c1:3e:5c:7f:f6:4c:4e:b1:fa:47:ee:98:d5:f6:66:
                    8d:35:f3:15:f3:5e:34:22:77:c4:cd:ff:a3:c1:80:
                    bf:a9:ef:98:17:ee:48:72:29:f6:40:6d:8b:c5:89:
                    7d:58:29:b5:a3:6d:4a:4c:9a:0f:c9:b9:b6:09:54:
                    94:c3:fa:0c:0d:07:03:52:68:1f:8c:94:56:f8:5a:
                    b4:d1:e6:52:d1:d7:4a:83:c8:8a:51:98:fa:e1:3f:
                    23:fc:2d:be:1f:c6:06:1d:79:1b:6b:0c:61:b7:f9:
                    d6:b1:5a:f0:22:b7:c9:d8:14:b8:20:49:32:4e:ef:
                    05:ef:d0:aa:b7:28:0f:b6:59:2e:e1:4b:a6:b7:d7:
                    41:82:a1:2b:3c:3b:40:38:57:32:e9:de:02:cb:a1:
                    ff:84:43:f7:ec:6c:91:ec:ce:88:ca:93:c4:e9:04:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:AA:12:59:B0:F8:BE:B2:40:05:01:B7:FA:19:D3:B4:94:30:BA
            X509v3 Authority Key Identifier:
                keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.84.0/23
                IPv6:
                  2001:df1:a8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:4c:24:1f:f0:a9:26:b9:dc:4b:05:e6:96:30:43:b5:49:
         ab:0c:70:06:b2:21:f1:58:4f:7a:01:2a:75:3a:06:10:1b:6a:
         bb:75:f0:8d:4c:b4:9f:41:68:c3:86:69:2e:8e:78:a1:27:4f:
         0e:0b:6f:aa:33:46:83:c6:fd:79:e7:3f:20:4a:3d:d1:5c:9a:
         a1:ef:96:c9:76:72:6a:62:8e:e2:6b:18:27:7e:22:8f:e6:a7:
         e7:19:31:da:48:2e:23:d8:c4:39:d4:89:b7:12:91:c9:11:09:
         f9:d5:ef:77:bc:a5:4e:a8:63:d9:7e:0e:2a:62:68:ce:5b:55:
         5d:00:47:12:59:8d:10:98:7a:73:dc:8e:6f:5b:1c:e2:3c:57:
         80:ee:a3:08:2e:f6:15:92:da:87:dc:39:30:78:34:ae:af:91:
         63:78:43:7f:24:fd:2d:48:60:87:b6:9d:98:ad:76:0c:aa:4a:
         c1:3c:93:31:1f:0e:7d:27:9c:98:7d:61:1f:71:73:02:c1:5b:
         9f:8a:79:f0:45:14:5b:22:50:d7:3f:7f:87:56:d0:68:c0:31:
         97:f2:2f:13:13:c9:2a:75:f4:5e:9e:f2:7e:ab:c4:98:73:fa:
         6c:e3:ab:be:0f:32:c9:5c:f4:b0:11:fd:69:45:20:6c:3e:fd:
         c7:84:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:49 2026 by rpki-client