Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
File:                     EF98E11472E211EEB93A4F72C4F9AE02.roa (raw, json)
Hash identifier:          yk/9ot3XpwBFQbeeQTCnsEGrPuk1VLAKGTz+akxH/p8=
Subject key identifier:   67:A7:F1:29:75:E5:8B:23:82:4D:89:91:79:FF:DA:08:18:87:CA:20
Certificate issuer:       /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial:       01BB
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:39:32 +0000
ROA not before:           Sat 15 Mar 2025 04:21:05 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140214
IP address blocks:        103.148.145.0/24 maxlen: 24
                          103.173.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
                          rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
        Validity
            Not Before: Mar 15 04:21:05 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3df24-00ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:e5:68:a3:f3:22:03:cb:0e:b5:08:48:50:
                    c8:74:6e:a9:87:3e:99:38:fe:12:e1:cc:f3:ca:b8:
                    be:99:d4:f4:b3:d9:65:22:37:d8:c4:90:55:68:f8:
                    03:91:19:2a:c9:74:67:10:32:2a:bb:21:24:c2:7e:
                    e5:4b:1b:e3:c3:96:47:83:7c:66:a2:f8:cd:ce:86:
                    67:8a:8a:7f:89:94:52:f0:18:c2:aa:28:b9:74:a2:
                    e7:27:6c:d4:01:32:10:f8:e9:d3:b7:46:58:9e:84:
                    08:8c:09:f1:91:16:03:81:a7:7b:e5:e5:ac:ef:39:
                    bb:54:95:12:c4:31:b2:0d:26:21:2b:a2:af:66:18:
                    08:f4:a0:54:b4:de:f9:20:be:60:18:64:ea:c9:53:
                    6f:14:d2:86:25:80:8a:73:5b:de:e2:7f:c9:74:17:
                    f4:4e:88:65:21:31:33:fc:d1:00:8d:b0:45:bb:67:
                    36:25:7d:bd:dd:34:32:a6:d6:b4:44:00:2d:b1:9d:
                    69:c7:4f:36:7f:34:5b:82:7f:09:1e:81:00:8f:b2:
                    13:d3:60:1c:fd:83:47:7e:00:59:cd:ce:7b:8f:ea:
                    25:ab:aa:6d:a4:63:7f:ea:85:61:d2:cd:e8:8c:e1:
                    d9:7d:ac:90:02:9b:9b:27:65:ec:d2:d3:bf:ef:6a:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:F1:29:75:E5:8B:23:82:4D:89:91:79:FF:DA:08:18:87:CA:20
            X509v3 Authority Key Identifier:
                keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.145.0/24
                  103.173.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:fb:07:b2:ec:32:e9:50:1a:b3:8d:f1:26:ba:d8:00:9e:
         eb:d9:8e:0b:56:e0:bb:3c:50:05:76:50:13:34:61:37:c2:77:
         b2:08:7b:8b:44:b7:f0:8a:26:d6:cd:b8:47:43:9c:4a:90:26:
         85:54:e2:7d:2d:80:be:dc:85:4a:e4:f5:8e:cf:4f:da:95:e7:
         8c:9e:fa:34:79:31:38:91:69:97:dd:29:e4:c7:9a:02:e0:70:
         69:d0:c8:1c:77:47:12:8d:a5:ab:c9:6d:63:4f:f1:38:9f:56:
         f3:1b:7a:23:75:ba:79:bb:b1:45:20:a8:f0:f3:58:d8:3d:5b:
         c6:e7:c3:49:78:7c:34:e4:3e:64:9d:1e:0e:8f:74:71:98:10:
         16:af:df:75:2d:7b:2b:2e:47:90:23:d3:9a:5c:0c:ff:e9:7d:
         f8:7c:fc:52:3e:17:4d:46:af:bc:96:2e:81:df:1e:a4:28:2e:
         43:c8:e2:f0:a7:78:e0:41:61:81:4e:5a:d0:88:db:7d:42:6c:
         d7:1f:dd:90:73:a9:c3:33:80:75:e6:63:85:21:e7:d8:85:f9:
         e8:c9:96:27:fd:f4:34:39:f4:4d:a3:d3:fd:fa:cd:04:cc:5b:
         89:11:71:2b:d3:45:c1:5d:70:b1:fb:27:34:7e:5c:26:3c:7d:
         e0:e0:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:03 2026 by rpki-client