Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa
File:                     F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (raw, json)
Hash identifier:          CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=
Subject key identifier:   91:9C:CC:7D:4B:83:F6:55:FF:B4:DE:37:F5:B0:E8:5E:1A:7A:0B:47
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0AEF
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:00:22 +0000
ROA not before:           Sat 14 Feb 2026 19:16:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138582
IP address blocks:        103.133.172.0/23 maxlen: 23
                          103.133.172.0/24 maxlen: 24
                          103.133.173.0/24 maxlen: 24
                          2404:5140::/32 maxlen: 32
                          2404:5140::/48 maxlen: 48
                          2404:5140:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 19:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2799 (0xaef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Feb 14 19:16:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46296-0685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:d6:6e:ae:8f:9a:4b:3b:b1:42:8e:29:75:
                    32:e6:ca:04:9d:87:8b:e7:68:9b:83:60:49:3e:7e:
                    01:89:2e:6a:b0:25:f5:63:dd:6d:13:51:03:1d:57:
                    30:f5:81:0f:e5:44:22:1b:fb:b1:19:32:5b:25:52:
                    50:cf:19:18:e4:39:8e:7f:1c:4f:26:93:12:f5:97:
                    52:64:a0:b5:3a:71:aa:88:a3:2f:b0:56:62:ce:a0:
                    a1:c0:45:04:a2:bb:15:a1:02:9b:6a:16:c0:79:14:
                    79:3f:35:8b:2d:e7:6d:02:c1:6c:43:82:48:4e:cd:
                    0b:09:4d:59:e7:b5:2a:08:81:00:8a:e2:1a:2b:00:
                    58:52:cf:51:45:8a:1c:54:52:0d:2e:1d:84:cc:52:
                    21:8d:e6:2f:b7:14:e7:a2:56:86:0f:04:93:2d:96:
                    cf:b4:52:03:45:8b:0e:6f:1b:a7:69:68:f5:6e:b1:
                    1a:ad:b1:f6:e5:3f:1d:72:3d:67:30:52:b5:ec:af:
                    9a:13:bb:02:91:c1:38:cc:7c:11:3f:5d:df:d0:ec:
                    00:a7:a9:3a:a6:b6:bd:32:ba:6b:74:d7:16:cf:73:
                    de:88:34:7c:2d:8b:70:22:36:89:13:a3:7d:45:d0:
                    83:33:4c:2a:63:11:c1:eb:05:82:b5:6b:a1:50:06:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:CC:7D:4B:83:F6:55:FF:B4:DE:37:F5:B0:E8:5E:1A:7A:0B:47
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.172.0/23
                IPv6:
                  2404:5140::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:76:38:34:95:8c:be:c7:6b:82:90:b0:4f:22:52:8a:ec:
         62:7c:e9:4b:21:20:fb:9a:4c:2f:13:b8:56:07:d4:6a:f9:ff:
         33:02:2a:8c:e6:b3:df:23:a1:2c:97:96:1b:69:a6:01:ad:dc:
         cf:5c:29:0c:a5:dd:d2:65:fa:4f:e0:ff:92:c9:04:ea:f9:fc:
         3b:04:b2:8d:5f:f9:49:db:d2:6f:f1:fb:00:9e:df:c7:c3:24:
         2e:fc:4c:eb:dd:fa:10:85:5f:8a:e6:d0:e0:ff:b3:df:10:9c:
         5e:dc:c0:9a:00:bb:af:a1:4a:33:a5:e2:86:0b:95:cd:94:79:
         58:0a:56:52:e4:d3:55:04:45:fa:61:f1:ce:bf:58:53:09:56:
         c7:e8:77:8c:b1:b4:3f:dd:64:df:97:b4:34:ab:22:5c:47:a8:
         15:ea:c9:b5:8e:f8:c0:7e:ea:17:cc:f6:c3:4c:0c:a1:a1:0d:
         64:37:65:c1:66:68:f2:78:1d:b9:fd:58:b2:31:90:5b:d8:93:
         7c:2f:25:c1:b3:f7:21:33:31:5a:01:22:30:3c:82:fe:ff:59:
         c8:da:c6:92:ee:77:f3:a4:eb:d0:51:5d:19:3e:7a:92:1d:18:
         e6:fe:4f:68:17:a2:04:d8:ce:da:89:93:ad:75:7b:b9:1e:7e:
         5e:45:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:20 2026 by rpki-client