Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa
File:                     25E96E4C2F6511F0A4430347C4F9AE02.roa (raw, json)
Hash identifier:          +exKuqWeShK/trwZJ8lAhtVMT6cQiqxHezUCowjTWXA=
Subject key identifier:   89:88:D8:0E:80:52:5A:FC:47:C6:19:1B:9C:7F:8A:7B:B7:E8:30:71
Certificate issuer:       /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Certificate serial:       DB
Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 07:34:43 +0000
ROA not before:           Fri 03 Jul 2026 07:34:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139225
IP address blocks:        103.140.3.0/24 maxlen: 24
                          2001:df0:a280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
                          rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
        Validity
            Not Before: Jul  3 07:34:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a476613-c13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a2:87:75:17:92:d8:0c:02:26:2c:c5:0e:a8:
                    fd:70:6f:e0:7f:37:35:8a:34:4d:1c:95:86:54:f7:
                    cf:4e:18:4a:26:5e:b0:22:00:02:cc:80:7f:74:a1:
                    1c:0f:0e:1a:33:46:99:36:aa:df:bd:e7:d1:d6:ee:
                    6d:59:ff:2f:b4:5b:c6:48:1e:01:a2:be:58:d3:64:
                    eb:d3:d9:b6:81:b4:52:ad:f0:56:da:45:8a:f2:82:
                    60:2f:0b:2a:48:2c:d5:b3:a6:67:a3:42:05:11:3a:
                    19:b2:48:cc:dc:c3:7c:f0:ca:6a:37:4e:7d:e5:7f:
                    87:ee:50:6b:b8:4d:ae:2e:4f:9a:e0:79:79:98:f3:
                    02:32:b0:f8:a4:37:d0:74:40:e2:3c:11:a4:e0:f7:
                    9e:fd:f2:c3:21:57:cd:0e:40:fb:6a:53:d9:1a:37:
                    ed:79:fe:0a:f9:89:bf:2e:e6:36:a5:44:68:2f:11:
                    bb:1a:20:dd:3a:6a:a4:1f:06:80:c6:1b:48:ed:e2:
                    5c:6d:1d:da:ff:0e:bf:25:c6:16:5d:95:5a:74:be:
                    d1:6c:f0:dd:84:9e:3a:91:75:c0:15:6f:15:b3:9b:
                    98:2c:45:32:05:fd:49:14:69:16:9e:2f:10:4f:4d:
                    d9:ca:c5:e9:84:36:0f:71:c2:97:60:84:37:69:ef:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:88:D8:0E:80:52:5A:FC:47:C6:19:1B:9C:7F:8A:7B:B7:E8:30:71
            X509v3 Authority Key Identifier:
                keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.3.0/24
                IPv6:
                  2001:df0:a280::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:cc:72:0e:a4:da:68:49:32:83:e5:32:ac:f4:5a:df:31:
         0c:31:06:88:73:97:fb:07:e7:89:ae:94:eb:ea:58:02:c7:65:
         ea:1a:1f:49:f6:eb:ac:51:75:f1:b2:08:f7:d2:de:c0:2e:9a:
         ba:15:82:33:e6:94:dc:f3:29:dd:f8:f8:5c:87:f6:49:44:90:
         fd:c4:73:5c:6d:b1:bc:5e:4b:26:7e:b1:7e:6c:5c:53:29:98:
         1e:fd:30:fc:d1:05:ce:05:a0:48:60:ff:d1:ed:e1:5a:75:c6:
         0e:93:83:6f:91:cf:0f:42:0a:9d:e7:f1:c2:f9:68:b8:07:95:
         12:d4:84:12:e6:3c:44:45:17:e1:62:03:ef:51:62:24:81:30:
         24:ce:c2:17:4d:39:96:f6:ec:19:90:6d:53:cb:86:a1:73:c4:
         ff:8b:a8:3f:b6:81:37:b2:3f:3a:08:fa:22:47:b6:27:3d:b0:
         c4:07:56:40:55:db:ad:cc:e7:bf:0f:2b:8a:08:db:41:42:ba:
         d5:d4:29:49:c7:0d:2e:5d:7a:4e:0f:73:77:fe:e1:f2:35:14:
         98:ad:df:15:56:7e:f4:a3:dd:0f:80:bf:0a:f3:60:b2:89:53:
         be:c8:f7:ac:8d:e4:74:92:32:26:d0:b9:63:5c:6f:57:f2:7d:
         16:ab:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:17 2026 by rpki-client