Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa
File:                     A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (raw, json)
Hash identifier:          LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=
Subject key identifier:   13:93:BF:9E:55:AD:01:D1:BB:3B:02:51:09:C1:5D:71:2D:1B:23:CE
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0C4F
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 19:38:03 +0000
ROA not before:           Tue 18 Aug 2026 19:38:03 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137884
IP address blocks:        103.116.116.0/23 maxlen: 23
                          103.116.116.0/24 maxlen: 24
                          103.116.117.0/24 maxlen: 24
                          103.116.118.0/24 maxlen: 24
                          2402:f940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3151 (0xc4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Aug 18 19:38:03 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a84b49b-8f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:85:8b:ab:5b:e6:6a:06:c5:38:98:17:e4:
                    9b:7d:31:c8:eb:3f:5e:14:23:ce:d7:87:65:47:91:
                    c4:23:60:b7:74:72:44:06:9c:98:c5:8d:9f:a6:6f:
                    d8:0a:f7:ce:7d:b2:41:f5:e7:cb:cc:1e:52:be:b6:
                    1b:44:d0:87:f0:b1:56:ec:57:e6:7a:6f:68:78:43:
                    9f:e0:c5:be:45:cb:83:de:85:fb:62:83:41:f8:86:
                    41:f7:53:71:c8:9a:d7:f0:da:82:0b:1f:1a:63:d1:
                    68:0e:1f:fd:59:2a:c8:f0:f5:fe:28:e8:f1:dc:bb:
                    1e:49:b8:64:fa:d0:7b:94:e8:e7:ab:d3:da:d7:f8:
                    63:d8:2e:41:5a:ca:15:61:df:ff:1c:15:62:06:c4:
                    2c:dc:6c:0a:d4:14:95:81:c3:6e:73:9e:23:ad:a2:
                    66:e5:4b:63:ac:47:cd:e8:a7:dd:c5:c4:b3:eb:1e:
                    43:ba:8b:46:fb:50:72:ef:8a:e4:63:23:f9:52:54:
                    54:ab:92:38:4b:4a:b0:05:cc:8a:14:ed:cd:f2:99:
                    55:33:b6:0f:f8:c1:a8:49:d1:5a:45:be:87:10:01:
                    4f:c2:ed:df:c2:4a:e6:56:4c:01:6a:e6:08:69:b9:
                    d8:c3:c0:62:66:a2:f7:7a:99:eb:e8:4d:54:3c:ff:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:BF:9E:55:AD:01:D1:BB:3B:02:51:09:C1:5D:71:2D:1B:23:CE
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.116.0-103.116.118.255
                IPv6:
                  2402:f940::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:04:22:12:bd:38:9b:3d:ea:1e:ab:89:ec:7a:81:69:5b:
         77:e1:81:9d:75:69:7d:2b:8b:43:48:e1:3e:04:a4:f8:61:63:
         0c:43:bb:84:5a:d2:5b:bf:e9:a4:23:2d:2c:fd:6e:55:0d:01:
         6d:70:ce:db:af:7e:6a:7c:c4:77:3f:32:72:c1:39:bd:5f:b3:
         53:b6:be:87:65:6a:c5:e3:e3:0d:d6:14:61:7f:8e:b7:85:95:
         71:13:a2:5e:62:61:70:09:ca:1b:84:72:f4:e9:e0:4b:7e:d4:
         5a:25:d2:66:7f:67:2e:0f:24:87:3e:45:ee:d7:03:d0:87:d4:
         6e:6a:99:5b:8e:bc:84:23:ca:c8:b2:36:47:df:76:05:e7:96:
         99:7c:bc:51:ea:f6:37:db:2b:53:b1:99:89:48:68:7e:02:57:
         1a:42:15:21:98:15:be:f0:67:93:76:b0:a2:9f:71:fe:dd:e6:
         19:0a:e9:b2:36:b8:20:41:84:a0:4c:3c:42:da:44:f8:95:ce:
         68:05:26:70:2d:95:4a:92:a8:7e:89:1a:e5:73:b1:05:e0:2a:
         23:7c:2b:a1:e7:a6:7d:98:1b:07:03:85:a8:fc:09:6b:6c:01:
         e3:8e:6b:45:d7:78:c8:43:c5:65:e4:21:11:94:da:e7:67:5c:
         20:dd:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:58 2026 by rpki-client