Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa
File:                     5F94C5B814A311EDA489B80DC4F9AE02.roa (raw, json)
Hash identifier:          cKQ+GalQu9XNt/5RvNMkJ98r6wqBmv6X34kALjzsemM=
Subject key identifier:   B5:B5:6A:4C:40:E8:54:E1:98:5A:96:BE:31:AE:F3:9D:DE:A3:91:0E
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       17C6
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:15:04 +0000
ROA not before:           Mon 30 Jun 2025 17:07:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     146996
IP address blocks:        103.91.204.0/24 maxlen: 24
                          103.91.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6086 (0x17c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: Jun 30 17:07:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42dc8-aa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:f9:f1:61:1b:49:85:30:0b:60:8c:60:53:
                    fa:60:00:35:b6:24:61:bc:df:6f:45:1a:39:76:ac:
                    6a:2a:2e:fe:a9:0e:8a:90:a6:fc:90:1c:a9:2d:e8:
                    0a:3b:45:74:da:c4:de:d3:54:43:24:5a:4e:34:9c:
                    65:60:5a:6a:b8:04:d7:e3:aa:ed:3f:55:6f:e0:c1:
                    68:c2:bf:a6:7f:6c:f7:96:66:f0:3b:35:16:52:ee:
                    6f:f0:48:63:7c:3d:20:cd:6c:2a:78:50:0e:bb:75:
                    a0:a3:a0:96:27:d5:ef:4e:79:c3:ce:89:b0:09:8c:
                    10:0e:5d:e5:86:e7:77:64:04:15:f2:40:17:58:35:
                    4e:cb:85:e2:0e:ef:34:f1:13:12:95:e1:79:bf:10:
                    cc:27:cf:d0:89:09:f9:bf:63:2a:b4:bc:6f:7b:8e:
                    be:72:18:c3:91:c6:42:ae:90:13:fd:63:e5:d7:c8:
                    64:83:7c:f8:23:d8:33:e1:64:bb:9d:8d:b0:3b:96:
                    ba:9d:4d:36:04:35:d7:4b:e6:bd:1b:c2:56:0d:2d:
                    bc:c0:2f:0d:b3:0e:c6:8c:d0:e3:53:39:60:f7:b7:
                    a0:de:36:c2:90:7a:13:28:66:bd:20:6b:e1:ef:d9:
                    4e:d8:cd:58:b7:79:54:c0:4d:c8:23:cf:14:03:ca:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:6A:4C:40:E8:54:E1:98:5A:96:BE:31:AE:F3:9D:DE:A3:91:0E
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:58:7e:03:f8:08:19:3a:9e:43:33:e2:b7:c1:bd:e8:90:
         6c:38:f6:49:d0:8c:71:ba:69:09:6d:64:36:46:45:46:d3:f0:
         08:68:cc:01:03:cd:56:b4:96:3d:02:2b:41:bb:29:bb:29:6c:
         0c:1b:a4:a6:04:19:03:78:4d:bb:16:61:7f:cf:e1:f0:be:f8:
         c9:ea:ad:0e:a6:ea:ff:35:3f:0d:98:6c:e8:37:28:1f:0c:1c:
         f1:b6:96:28:45:69:56:02:c0:1c:0c:b5:13:2c:e8:60:52:fe:
         29:f8:11:69:50:f2:67:08:ec:90:37:48:48:d3:ec:7d:48:0d:
         3b:65:7f:13:c5:cb:4f:41:7c:70:89:7b:d1:17:97:48:d3:98:
         3c:fb:e2:d7:58:63:24:ff:c9:f6:ff:b4:7b:94:1f:59:24:8b:
         45:01:f6:38:24:92:f6:19:ab:fd:6a:a4:0b:c6:f6:25:a5:bd:
         f5:b0:21:4d:ee:06:ef:c7:52:48:f2:5d:0f:08:17:66:1d:24:
         90:07:4c:c4:8f:d5:73:1e:f2:5f:df:4e:95:8c:d0:67:d0:63:
         32:36:af:c8:9f:fe:b4:4d:2b:e5:31:44:b2:01:cb:8e:c3:40:
         86:27:76:74:3c:28:19:e4:8c:01:69:b6:00:ef:ab:0c:5f:4a:
         2f:a5:31:08
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICF8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3OTUxMTAvBgNVBAUTKDg3MEFFNTlBNEIzOERBRkM2QTMxQUJFMzI5Q0NGODc4
RkRGNzJBOEMwHhcNMjUwNjMwMTcwNzEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmRjOC1hYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQv58WEbSYUwC2CMYFP6YAA1tiRhvN9vRRo5dqxqKi7+qQ6KkKb8kBypLegK
O0V02sTe01RDJFpONJxlYFpquATX46rtP1Vv4MFowr+mf2z3lmbwOzUWUu5v8Ehj
fD0gzWwqeFAOu3Wgo6CWJ9XvTnnDzomwCYwQDl3lhud3ZAQV8kAXWDVOy4XiDu80
8RMSleF5vxDMJ8/QiQn5v2MqtLxve46+chjDkcZCrpAT/WPl18hkg3z4I9gz4WS7
nY2wO5a6nU02BDXXS+a9G8JWDS28wC8Nsw7GjNDjUzlg97eg3jbCkHoTKGa9IGvh
79lO2M1Yt3lUwE3II88UA8oOWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLW1akxA
6FThmFqWvjGu853eo5EOMB8GA1UdIwQYMBaAFIcK5ZpLONr8ajGr4ynM+Hj99yqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDc5NS85OTI5NjlGQUU2
QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2eHFNYXZqS2N6NGVQMzNL
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h3cmxta3M0MnZ4cU1hdmpLY3o0ZVAzM0tvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA3OTUvOTkyOTY5RkFFNkFFMTFFNzgwMEE3QzYzQzRGOUFFMDIvNUY5NEM1Qjgx
NEEzMTFFREE0ODlCODBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ1vMMA0GCSqGSIb3DQEBCwUAA4IBAQBob1h+A/gIGTqeQzPit8G9
6JBsOPZJ0IxxumkJbWQ2RkVG0/AIaMwBA81WtJY9AitBuym7KWwMG6SmBBkDeE27
FmF/z+HwvvjJ6q0Opur/NT8NmGzoNygfDBzxtpYoRWlWAsAcDLUTLOhgUv4p+BFp
UPJnCOyQN0hI0+x9SA07ZX8TxctPQXxwiXvRF5dI05g8++LXWGMk/8n2/7R7lB9Z
JItFAfY4JJL2Gav9aqQLxvYlpb31sCFN7gbvx1JI8l0PCBdmHSSQB0zEj9VzHvJf
306VjNBn0GMyNq/In/60TSvlMUSyAcuOw0CGJ3Z0PCgZ5IwBabYA76sMX0ovpTEI
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:47 2026 by rpki-client