Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
File:                     55D7D802475A11F0B3C02112C4F9AE02.roa (raw, json)
Hash identifier:          1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=
Subject key identifier:   6D:AA:38:10:D4:2F:33:A4:B7:98:C3:D0:BD:F0:AE:24:26:E2:C4:5E
Certificate issuer:       /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Certificate serial:       0AB1
Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:31:24 +0000
ROA not before:           Wed 12 Nov 2025 19:09:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     149175
IP address blocks:        103.144.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
        Validity
            Not Before: Nov 12 19:09:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a469dc-f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:f4:0d:0f:34:34:13:a3:51:d2:d0:00:ab:
                    6c:bc:cc:26:48:ca:93:e6:43:e0:e0:79:d6:70:e8:
                    86:a7:2d:45:2d:14:14:72:e1:aa:16:3b:a6:cd:48:
                    21:31:ff:50:ac:88:50:09:cb:48:89:8d:12:8c:43:
                    de:c4:0a:d8:a6:1c:a7:59:ac:fa:ba:89:d7:01:17:
                    cd:ed:77:08:d4:a1:67:c5:d2:f8:f5:cd:40:81:68:
                    30:d1:e6:71:91:a2:34:b7:49:04:95:9d:7b:01:a9:
                    16:55:b9:8b:29:2a:3e:d9:d8:44:53:36:8b:47:bb:
                    e0:81:c0:2f:b6:01:83:56:39:b3:30:00:e6:df:81:
                    38:cb:1b:35:a7:a5:fe:7e:ff:2d:cb:e4:a2:18:59:
                    4d:6c:e9:dc:fe:54:8a:d8:bb:a5:5a:08:85:fe:41:
                    61:12:47:3c:d4:91:65:91:87:59:44:82:a0:d7:3b:
                    95:62:26:3b:5b:56:17:c8:0d:48:e7:ef:0c:c5:56:
                    d2:8b:cf:ea:75:58:32:e9:8f:10:53:50:72:16:45:
                    ff:68:a2:3d:ae:19:1f:22:56:92:05:2c:1e:85:d1:
                    c4:52:20:1e:16:ba:c4:f8:fb:9c:bb:33:bc:12:32:
                    1e:10:8c:f4:fa:5f:9d:01:76:d9:77:59:45:26:f3:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AA:38:10:D4:2F:33:A4:B7:98:C3:D0:BD:F0:AE:24:26:E2:C4:5E
            X509v3 Authority Key Identifier:
                keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:74:ef:dd:63:12:14:f2:0e:1e:f0:f1:a8:78:6e:03:5e:12:
         20:47:02:e6:14:ce:87:76:1f:6b:5f:cf:c7:76:27:cf:8c:da:
         82:f1:b5:09:8e:1b:47:ed:71:78:6a:59:fc:0d:b9:fd:98:56:
         62:c1:b0:f7:c8:73:cf:32:63:ab:a2:cb:7e:bb:ce:07:1e:26:
         be:32:21:c2:b6:bd:6e:70:0e:ba:8f:4e:10:98:0f:79:df:47:
         45:b0:98:30:d4:30:68:87:51:83:31:6a:eb:7b:d3:04:52:5e:
         90:da:92:77:33:8a:ea:01:08:4b:06:62:f2:b2:2e:ca:a9:b1:
         88:a0:91:5b:0b:17:16:64:7a:99:12:e7:c5:49:77:7e:ec:14:
         31:23:bf:a9:6c:d7:0e:57:37:1a:da:66:15:58:7d:8b:44:7d:
         8c:59:c1:84:56:43:3d:74:f3:d7:12:17:66:c7:a8:4f:9b:56:
         e1:4e:ee:47:b8:47:a6:c7:ab:9b:dd:d6:b5:63:52:d6:66:76:
         47:5d:94:d8:de:3c:07:07:8e:17:f3:eb:5e:75:7d:8b:9c:1a:
         0f:2d:b1:b7:0a:5f:32:51:0d:cd:37:56:83:01:20:c6:78:09:
         dc:02:0e:52:74:c7:3c:92:df:2a:d1:27:56:2c:ad:1d:00:1d:
         0a:1d:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 13:43:18 2026 by rpki-client