Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa
File:                     671E96C631D811EE8F448240C4F9AE02.roa (raw, json)
Hash identifier:          irHoEjr1GIUaKPYFmyQpkRMEIYv26BomyciGLejer2U=
Subject key identifier:   FA:F2:43:8A:5B:59:29:C0:6B:2A:CF:B1:16:BD:2A:A8:7F:1C:F3:AE
Certificate issuer:       /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial:       01E5
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:17 +0000
ROA not before:           Thu 05 Jun 2025 03:52:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140734
IP address blocks:        103.152.60.0/23 maxlen: 23
                          2406:2a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
                          rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
        Validity
            Not Before: Jun  5 03:52:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3ec71-683f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:6b:b5:6a:04:06:84:a0:75:f7:86:fd:20:
                    0a:30:bf:bd:1a:54:32:ed:c0:d8:5e:ff:b9:6a:49:
                    e1:db:a3:6a:52:a1:7d:32:53:0d:a0:92:37:15:3b:
                    4c:ae:79:8f:47:d5:ec:bc:1f:24:78:4a:d1:58:d1:
                    fc:57:db:1d:47:d0:e4:2f:0d:19:38:7f:05:9e:14:
                    44:8c:aa:39:85:f2:87:22:89:3e:58:a0:17:a3:18:
                    d6:f2:6d:ce:d4:f0:21:96:fe:f2:ec:d9:45:a2:2b:
                    2b:c1:79:1b:cf:37:c5:c4:c4:70:80:f5:43:1a:2f:
                    df:aa:95:45:7f:ff:53:dc:5a:b1:9a:60:8f:74:43:
                    ad:ec:dd:82:ba:bd:e6:45:3b:69:56:4e:fb:9b:6b:
                    70:87:26:01:6f:d9:6a:1c:2c:a1:da:ee:d5:c5:38:
                    df:fb:d1:a1:82:f2:f7:b1:27:1c:d9:5c:91:d2:f6:
                    0e:32:60:73:6e:b2:62:d8:79:48:65:93:14:8a:3c:
                    0e:7a:fa:1d:0b:6b:10:51:ed:24:fe:b6:8e:e8:f9:
                    54:67:f4:9c:5c:ee:cf:e2:22:f6:01:da:20:ab:76:
                    34:20:26:d4:76:01:80:c9:fd:fd:5b:1e:35:06:da:
                    10:c5:7a:20:f6:c3:2a:c6:ec:fc:57:ba:50:2c:fd:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F2:43:8A:5B:59:29:C0:6B:2A:CF:B1:16:BD:2A:A8:7F:1C:F3:AE
            X509v3 Authority Key Identifier:
                keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.60.0/23
                IPv6:
                  2406:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:23:85:a1:bf:8f:2e:f6:33:0d:67:cf:ff:60:b0:4c:bf:a5:
         53:70:48:18:97:a5:f0:8b:60:08:9c:ee:e6:b6:dc:ca:3c:83:
         d3:97:c0:9b:a2:4b:f2:5e:85:8a:24:a2:02:e6:4f:89:7b:2f:
         26:38:5e:3b:85:e5:dc:a2:fd:29:4c:16:b8:8d:81:c4:68:e5:
         45:d9:1e:98:2a:ae:5e:21:54:75:19:af:7f:6b:64:38:8b:50:
         cd:de:7e:ff:66:b8:2e:55:2c:80:f1:3a:3b:ea:8f:62:83:0e:
         15:ed:d0:80:cb:fa:50:95:b1:54:9a:8f:ff:1f:3b:dd:ce:59:
         98:d8:ce:d5:32:23:13:f1:3a:cf:03:ce:a2:e9:95:1e:7b:fa:
         34:43:2a:60:4a:2e:42:77:d7:29:c3:3f:f5:25:99:c9:8e:67:
         9d:99:79:9f:12:62:bf:14:c9:f1:4e:73:83:99:44:92:1a:2b:
         5d:8f:ed:e2:70:dc:38:fd:ad:8d:39:18:22:bf:9b:91:e6:ae:
         d5:d8:ec:7e:22:7a:f4:32:cf:21:1a:f8:a1:d9:9c:93:ab:08:
         7b:ab:dc:4b:74:e8:e4:d6:23:94:89:25:45:35:d9:a4:66:46:
         06:72:48:24:be:12:f4:50:80:94:ca:98:86:a7:71:a7:7f:f5:
         63:38:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:35 2026 by rpki-client