Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa
File:                     EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (raw, json)
Hash identifier:          d3rKZ//K+dxve4/XCAx+VA89CIyu6oQFqdYbiu3rWTw=
Subject key identifier:   FE:58:89:88:4B:48:48:17:3E:43:5E:50:1D:38:76:ED:AD:08:2C:04
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       0970
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:45:49 +0000
ROA not before:           Sat 12 Jul 2025 21:00:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     4775
IP address blocks:        103.141.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 19:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Jul 12 21:00:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5948d-f18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:39:46:d1:c0:dd:ee:35:40:e9:70:78:af:
                    e1:6d:62:b2:32:67:65:2f:97:c3:a7:47:4f:15:02:
                    94:58:63:68:c7:0b:9a:5f:54:4f:d1:84:b8:d7:f7:
                    e7:16:14:7f:e5:78:69:12:03:7f:8f:03:d6:0b:a8:
                    a8:a4:47:3d:08:dc:1f:0a:03:a6:14:7f:99:d7:bd:
                    1c:60:b2:cd:90:f3:ba:ae:db:44:2b:a9:3e:cb:aa:
                    bb:68:80:60:d7:23:aa:ae:9e:14:46:16:ad:b3:55:
                    e4:f8:c6:f3:1a:c8:b4:9a:f1:6d:7d:8b:81:67:d0:
                    59:2b:b6:ec:52:ad:11:0f:f9:d0:a1:b2:25:22:51:
                    f8:9c:c5:73:11:b8:16:12:8c:0c:0c:9e:3b:be:22:
                    30:cf:11:d0:7a:96:be:1c:51:41:ab:34:a4:32:db:
                    82:c1:e7:b5:c0:eb:df:a7:56:04:d5:0c:21:c0:67:
                    6d:72:87:0b:2c:6e:76:63:18:b2:8b:cc:57:dd:2c:
                    f0:6e:5c:35:70:05:f0:6f:88:a8:41:28:ce:dd:de:
                    52:b3:ce:65:1a:88:5e:75:5e:7e:a4:68:51:53:e4:
                    6b:43:d0:1b:31:0f:07:3a:3d:f7:05:03:73:13:8b:
                    82:39:c5:03:2b:cd:81:54:1f:09:57:80:1e:08:da:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:58:89:88:4B:48:48:17:3E:43:5E:50:1D:38:76:ED:AD:08:2C:04
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EA41FB0EB6A911EAB0EB257EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:fe:3d:8b:79:bf:36:cf:46:70:ee:97:3a:eb:b2:9b:72:
         2e:40:b5:58:b3:ea:9a:7c:b6:f7:60:74:01:f7:28:c9:0a:bc:
         7f:2f:51:24:79:d6:16:ca:e6:da:83:84:dd:29:7f:e7:4a:10:
         f6:68:5f:99:ba:2d:2e:3a:b2:ea:9d:db:cd:3e:d8:b1:9a:19:
         90:a4:2c:3c:ed:b5:d0:c3:40:a5:2c:15:35:c5:a4:ee:85:96:
         50:ec:c1:2a:b4:53:b3:f1:ec:b6:7e:45:ed:99:da:d1:43:d4:
         ed:2e:14:2a:e0:a6:b3:b6:4a:5e:b1:fd:b6:44:16:57:94:f9:
         ec:5f:13:fe:fc:6b:47:74:f0:df:d5:85:83:9b:d3:3b:02:b3:
         d4:c6:57:12:e2:68:04:1d:16:c4:c1:c9:e5:82:2a:45:3d:1c:
         c8:6b:d2:57:67:f1:31:a6:46:f1:f7:93:76:88:f0:70:5f:93:
         09:71:55:63:ae:a2:55:ad:fb:eb:52:4c:1d:e3:77:b3:af:2a:
         aa:85:da:bd:5d:1e:7e:9b:21:b2:5a:96:f8:95:3e:56:a4:cd:
         af:50:3c:8e:48:d1:4d:28:ce:0e:72:e3:e1:17:ea:e1:a2:c3:
         42:cd:5e:2b:f5:40:3f:a7:b4:0b:48:e1:87:69:98:77:23:df:
         3c:b6:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:26:44 2026 by rpki-client