Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
File:                     0ECA16060C5911EFA8601E42C4F9AE02.roa (raw, json)
Hash identifier:          EAZq5ICviDwHpkwl67AFkwJKvgTwEE2w0QqDhrDYQew=
Subject key identifier:   B9:6B:29:C2:D0:9F:B3:5D:57:8E:BC:C7:37:8E:F3:D9:7C:FB:79:84
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       0469
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:32:32 +0000
ROA not before:           Fri 03 Apr 2026 00:32:32 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.181.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Apr  3 00:32:32 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0aa0-fce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:8e:1e:f4:01:c7:c3:1d:45:61:5c:c2:e2:
                    92:ca:5d:44:ad:01:66:15:9a:25:44:b5:be:d1:55:
                    42:25:60:cc:9f:d3:e1:9b:1e:03:45:3c:7a:26:c4:
                    a6:ee:6a:ab:51:e9:41:68:ea:25:50:1b:45:80:6f:
                    ce:87:b5:60:93:6d:cb:54:0f:c7:68:77:ba:76:f5:
                    af:d8:dc:87:51:29:dc:e8:0a:85:04:01:fc:f4:71:
                    28:3c:52:6c:9a:da:ed:c8:42:d0:fe:6c:cd:cc:0e:
                    93:4a:11:9b:0c:7a:b5:1f:3d:10:d8:97:f5:03:37:
                    d2:93:3c:e2:8d:aa:be:81:ab:62:34:65:34:b4:75:
                    dd:fa:fa:2f:2a:dc:a4:fc:a9:0e:c7:0b:9d:c8:9d:
                    c3:8a:53:36:91:67:d5:21:b9:17:e1:e1:0c:7b:87:
                    1b:19:22:86:b6:57:fe:d4:69:b9:0a:29:b1:7c:ec:
                    7b:27:d7:3b:66:a9:69:b6:9d:72:9a:06:1d:4f:f3:
                    38:6f:6f:f0:59:f0:3e:5d:ae:f0:ab:82:6e:8e:b7:
                    09:c3:fc:d3:37:42:2a:f9:e2:98:88:e5:df:10:79:
                    8a:65:80:5b:02:00:42:d4:46:c0:6e:dc:e5:63:e5:
                    1b:ef:39:96:61:58:50:6f:12:16:bf:40:30:02:c9:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:29:C2:D0:9F:B3:5D:57:8E:BC:C7:37:8E:F3:D9:7C:FB:79:84
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:bd:a3:56:fe:0f:65:4a:96:8b:ed:ca:7f:9e:3a:1a:0e:
         30:78:ca:89:48:97:ca:69:79:e2:cf:47:f3:c2:7f:e3:08:e0:
         29:26:6f:8e:6b:cd:a2:ce:d7:94:9e:f4:c7:b6:cd:34:14:a9:
         f1:db:f6:b2:cd:2d:70:84:75:84:4a:d1:fe:a2:a1:e2:4f:f4:
         fa:6d:2f:dc:f3:67:36:f3:b6:ed:e0:3d:97:c7:ff:b8:4e:95:
         53:25:9f:b2:5a:47:4d:4f:8f:56:e6:36:ce:0e:e3:76:a1:5f:
         b6:8f:d1:21:63:32:0f:ee:03:d0:f1:ed:57:43:8b:66:76:4a:
         d7:1d:d0:1c:7f:9d:35:2a:25:16:c2:de:ba:e2:16:fa:5a:6d:
         56:06:92:56:87:e9:e9:b2:34:ba:81:82:78:5d:36:04:cc:10:
         eb:f4:9a:6b:09:90:9a:d6:26:5b:ec:7e:c4:49:b7:7b:1f:b7:
         0e:98:d4:e7:b4:da:21:32:30:a2:34:27:bd:4d:68:65:17:7a:
         06:ee:3b:a1:62:59:aa:bd:c6:84:8e:fe:0b:33:8c:b5:0e:c3:
         d3:76:ed:30:a3:80:f9:42:c5:f7:26:be:93:98:58:88:de:ea:
         c0:c0:e3:88:a0:df:21:64:21:0c:f3:ba:6b:a1:70:7c:04:7c:
         c4:b9:2c:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz
QkUyNUM2QTAwHhcNMjYwNDAzMDAzMjMyWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMGFhMC1mY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhGOHvQBx8MdRWFcwuKSyl1ErQFmFZolRLW+0VVCJWDMn9Phmx4DRTx6JsSm
7mqrUelBaOolUBtFgG/Oh7Vgk23LVA/HaHe6dvWv2NyHUSnc6AqFBAH89HEoPFJs
mtrtyELQ/mzNzA6TShGbDHq1Hz0Q2Jf1AzfSkzzijaq+gatiNGU0tHXd+vovKtyk
/KkOxwudyJ3DilM2kWfVIbkX4eEMe4cbGSKGtlf+1Gm5CimxfOx7J9c7Zqlptp1y
mgYdT/M4b2/wWfA+Xa7wq4JujrcJw/zTN0Iq+eKYiOXfEHmKZYBbAgBC1EbAbtzl
Y+Ub7zmWYVhQbxIWv0AwAsnH9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLlrKcLQ
n7NdV468xzeO89l8+3mEMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF
M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjk2REIvQTg2NEQwRUE4RTNEMTFFQ0E4N0FCRjE2QzRGOUFFMDIvMEVDQTE2MDYw
QzU5MTFFRkE4NjAxRTQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7W1MA0GCSqGSIb3DQEBCwUAA4IBAQBZvb2jVv4PZUqWi+3Kf546
Gg4weMqJSJfKaXniz0fzwn/jCOApJm+Oa82izteUnvTHts00FKnx2/ayzS1whHWE
StH+oqHiT/T6bS/c82c287bt4D2Xx/+4TpVTJZ+yWkdNT49W5jbODuN2oV+2j9Eh
YzIP7gPQ8e1XQ4tmdkrXHdAcf501KiUWwt664hb6Wm1WBpJWh+npsjS6gYJ4XTYE
zBDr9JprCZCa1iZb7H7ESbd7H7cOmNTntNohMjCiNCe9TWhlF3oG7juhYlmqvcaE
jv4LM4y1DsPTdu0wo4D5QsX3Jr6TmFiI3urAwOOIoN8hZCEM87proXB8BHzEuSxH
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:51 2026 by rpki-client