Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa
File:                     B3078DFAE1E411EAAD5D8545C4F9AE02.roa (raw, json)
Hash identifier:          b3YBOBqsogHj2YbhgRinWyCzx0033g+UhkF2zMZqVrQ=
Subject key identifier:   0D:9C:3E:F0:6D:15:A7:2C:2B:DE:91:FD:C4:FB:7B:DB:37:07:1F:9C
Certificate issuer:       /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial:       088F
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:55:43 +0000
ROA not before:           Wed 18 Jun 2025 21:07:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140670
IP address blocks:        103.151.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
                          rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
        Validity
            Not Before: Jun 18 21:07:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4293f-660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:ff:fc:a0:1f:77:bb:fd:ab:2d:44:78:28:
                    ca:9c:e2:c1:60:18:ed:d0:07:6d:69:8f:8d:79:02:
                    89:20:e2:1a:d6:cb:05:0e:ad:b0:95:ca:2f:4b:24:
                    d3:fb:e5:bd:9c:b4:c3:49:e4:b3:c8:15:2b:57:fc:
                    0c:65:93:d3:4f:d9:88:58:63:e4:fc:ef:88:f4:ee:
                    0c:78:b8:96:b0:bf:f4:25:a1:78:40:a4:5f:fb:7e:
                    60:4f:ce:fb:8c:11:c4:79:89:cd:dd:f2:96:b1:b9:
                    03:b6:8b:ae:30:03:ad:44:e0:97:08:c2:f3:db:19:
                    ea:22:be:6f:72:40:01:61:db:12:21:9b:38:a7:af:
                    9b:4c:11:e5:b8:86:de:21:7f:d8:de:33:0c:28:a9:
                    98:74:57:cc:a6:75:8a:0d:1d:17:2a:ef:18:11:65:
                    6e:45:10:55:ff:01:d6:49:2f:c9:5b:bf:99:57:4d:
                    96:f2:cc:37:83:5c:51:53:df:d5:5e:75:f0:1d:cd:
                    18:7c:d5:ef:72:7a:25:1a:d8:83:bc:5e:2e:db:55:
                    7a:c3:c9:e7:63:34:dd:f7:2c:9b:d0:9f:e4:c5:91:
                    00:24:06:0a:df:4d:49:b1:8f:87:3d:91:40:1a:7a:
                    1b:71:f6:de:dd:e5:0b:d5:26:3c:67:d1:6a:53:16:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:3E:F0:6D:15:A7:2C:2B:DE:91:FD:C4:FB:7B:DB:37:07:1F:9C
            X509v3 Authority Key Identifier:
                keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/B3078DFAE1E411EAAD5D8545C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:00:7e:d4:37:ab:ac:46:ed:ce:df:9f:f2:d1:1a:73:db:
         0d:e2:6c:46:ca:75:08:28:36:14:26:05:f8:32:e0:18:80:e0:
         cf:81:8d:e4:ab:40:86:4f:a4:43:7c:94:18:4a:3c:94:4e:42:
         77:ed:2f:3d:e1:c4:19:c1:91:ec:7c:1f:7d:34:99:8a:5c:f8:
         7a:08:df:f6:3d:57:22:f0:57:9d:b7:62:d0:fb:de:bd:12:8d:
         1d:65:69:92:28:73:65:5a:28:00:24:d1:f6:07:70:02:f4:34:
         78:5b:c3:03:2f:6b:d0:f3:6f:22:fa:5f:e4:f0:66:62:be:49:
         cc:82:ee:e5:80:db:24:22:69:43:0b:09:81:d1:fd:fc:62:f9:
         fa:57:ed:57:7f:ef:e4:ea:ba:f9:fd:c1:70:ab:f1:2a:67:78:
         dd:f6:2f:da:36:30:7c:5d:87:c6:c0:59:63:63:63:04:05:30:
         57:ee:d2:56:bb:2b:e6:f0:10:b2:68:ac:bf:cd:78:a4:38:62:
         5a:bc:a3:6a:02:7f:28:ad:6c:27:0a:31:02:29:af:3b:85:f9:
         e4:15:7e:1f:55:62:31:79:aa:b3:95:19:f1:e3:30:e7:dc:6a:
         62:39:2e:b5:ba:68:46:4b:8e:56:0e:d6:2e:bf:03:76:6b:ee:
         ed:5f:ea:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0
QzlFREEwRjcwHhcNMjUwNjE4MjEwNzM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjkzZi02NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhgn//KAfd7v9qy1EeCjKnOLBYBjt0AdtaY+NeQKJIOIa1ssFDq2wlcovSyTT
++W9nLTDSeSzyBUrV/wMZZPTT9mIWGPk/O+I9O4MeLiWsL/0JaF4QKRf+35gT877
jBHEeYnN3fKWsbkDtouuMAOtROCXCMLz2xnqIr5vckABYdsSIZs4p6+bTBHluIbe
IX/Y3jMMKKmYdFfMpnWKDR0XKu8YEWVuRRBV/wHWSS/JW7+ZV02W8sw3g1xRU9/V
XnXwHc0YfNXvcnolGtiDvF4u21V6w8nnYzTd9yyb0J/kxZEAJAYK301JsY+HPZFA
Gnobcfbe3eUL1SY8Z9FqUxYWBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA2cPvBt
FacsK96R/cT7e9s3Bx+cMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux
RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUzQUUvRjMyOTk4QkNFMUUyMTFFQUFCRUVDNTI4QzRGOUFFMDIvQjMwNzhERkFF
MUU0MTFFQUFENUQ4NTQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5eQMA0GCSqGSIb3DQEBCwUAA4IBAQBJGgB+1DerrEbtzt+f8tEa
c9sN4mxGynUIKDYUJgX4MuAYgODPgY3kq0CGT6RDfJQYSjyUTkJ37S894cQZwZHs
fB99NJmKXPh6CN/2PVci8Fedt2LQ+969Eo0dZWmSKHNlWigAJNH2B3AC9DR4W8MD
L2vQ828i+l/k8GZivknMgu7lgNskImlDCwmB0f38Yvn6V+1Xf+/k6rr5/cFwq/Eq
Z3jd9i/aNjB8XYfGwFljY2MEBTBX7tJWuyvm8BCyaKy/zXikOGJavKNqAn8orWwn
CjECKa87hfnkFX4fVWIxeaqzlRnx4zDn3GpiOS61umhGS45WDtYuvwN2a+7tX+r8
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:19 2026 by rpki-client