Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/F57B503EB05F11EEB6F38532C4F9AE02.roa
File:                     F57B503EB05F11EEB6F38532C4F9AE02.roa (raw, json)
Hash identifier:          Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=
Subject key identifier:   DC:42:F3:74:3D:2C:B3:C1:7D:57:0A:C6:0C:4B:09:38:B1:6C:05:EB
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01A1
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/F57B503EB05F11EEB6F38532C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:30:40 +0000
ROA not before:           Sun 03 Aug 2025 05:12:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.141.220.0/23 maxlen: 23
                          103.141.220.0/24 maxlen: 24
                          103.141.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Aug  3 05:12:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41550-6183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:1c:8f:b9:67:b1:8d:90:31:30:1f:ba:e2:
                    a8:5a:82:63:ed:cb:7d:1c:ac:a9:f4:b9:3f:cb:bd:
                    96:25:c1:ff:58:bd:32:72:b9:6c:8c:8e:a6:fa:8f:
                    d6:be:55:ad:9e:d6:65:c8:71:58:5b:7d:fc:c9:56:
                    25:a5:e8:11:b5:95:80:0d:d5:af:3d:02:71:f8:a2:
                    66:ab:53:3f:4e:f0:21:35:01:4d:24:bd:c6:ed:d8:
                    6e:f6:86:63:61:c1:2f:fa:3b:e7:9f:41:15:a7:03:
                    ad:25:4f:f2:5a:3d:26:5c:3b:5b:77:a3:d2:34:d6:
                    a7:4a:87:5e:7d:34:92:9a:dd:4d:2f:89:88:96:a1:
                    af:f5:09:09:7b:c6:05:aa:7f:e5:94:8e:97:ee:1b:
                    d6:2c:07:6d:bf:5c:db:c5:b9:da:64:fd:21:53:ca:
                    75:4d:56:7a:14:6c:a1:fd:ca:30:9f:c1:d7:45:9d:
                    0a:35:3b:9f:0e:c5:ab:d1:a1:b4:fe:b2:71:59:3b:
                    85:54:50:51:10:6c:4c:b5:44:bb:35:ae:5d:65:46:
                    1a:26:05:39:51:cf:80:81:c1:4f:77:9e:25:87:5a:
                    d5:6f:dd:44:81:75:a4:9b:91:03:63:3f:59:48:8a:
                    ca:df:ed:e7:0d:b6:40:dd:a5:06:18:df:4b:c4:e9:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:F3:74:3D:2C:B3:C1:7D:57:0A:C6:0C:4B:09:38:B1:6C:05:EB
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/F57B503EB05F11EEB6F38532C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:af:94:73:db:e1:f6:0a:61:a7:98:53:10:49:a0:32:ab:
         c2:bc:0f:00:2a:70:52:b6:58:19:ca:e4:e6:e9:b2:4c:92:c1:
         17:70:11:95:92:f1:ba:43:69:b3:5a:0f:87:4a:d5:84:78:0b:
         4b:70:df:97:33:26:9e:e0:48:8c:7f:f3:34:1e:17:65:39:4b:
         7c:f7:92:fa:bb:82:8a:65:19:ea:57:ee:b9:39:57:04:b3:5c:
         31:87:4e:47:4f:82:86:f8:60:d4:a1:58:c3:d9:a0:2a:b9:67:
         e7:de:a1:44:6e:38:37:4a:40:e4:7c:98:07:4c:30:14:f2:c4:
         5a:27:52:07:1d:1e:e0:2f:e8:91:65:02:ad:b8:a7:b3:99:43:
         a2:32:63:36:33:e1:f5:18:f5:fe:f5:c9:3d:3e:40:4b:62:78:
         c4:fa:8c:18:16:af:85:71:09:19:86:63:e2:8e:c4:20:a6:7b:
         81:61:e3:9e:fb:61:34:53:d0:19:90:a5:2e:7a:79:da:5b:e4:
         42:c4:ca:16:6e:d0:c3:fb:50:59:2a:95:8c:b7:2c:18:26:52:
         54:6b:68:65:4a:4d:21:ab:25:27:7d:82:10:f4:81:66:65:fd:
         1b:df:3c:c2:f6:84:ec:1a:41:13:3a:35:93:f9:2f:a4:cd:c5:
         28:fc:f8:eb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjUwODAzMDUxMjE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTU1MC02MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmwwcj7lnsY2QMTAfuuKoWoJj7ct9HKyp9Lk/y72WJcH/WL0ycrlsjI6m+o/W
vlWtntZlyHFYW338yVYlpegRtZWADdWvPQJx+KJmq1M/TvAhNQFNJL3G7dhu9oZj
YcEv+jvnn0EVpwOtJU/yWj0mXDtbd6PSNNanSodefTSSmt1NL4mIlqGv9QkJe8YF
qn/llI6X7hvWLAdtv1zbxbnaZP0hU8p1TVZ6FGyh/cown8HXRZ0KNTufDsWr0aG0
/rJxWTuFVFBREGxMtUS7Na5dZUYaJgU5Uc+AgcFPd54lh1rVb91EgXWkm5EDYz9Z
SIrK3+3nDbZA3aUGGN9LxOnjRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNxC83Q9
LLPBfVcKxgxLCTixbAXrMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTExQTEvQTlCNzNDQThCMDVGMTFFRTk5QzY1NDc3QzRGOUFFMDIvRjU3QjUwM0VC
MDVGMTFFRUI2RjM4NTMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ43cMA0GCSqGSIb3DQEBCwUAA4IBAQC9la+Uc9vh9gphp5hTEEmg
MqvCvA8AKnBStlgZyuTm6bJMksEXcBGVkvG6Q2mzWg+HStWEeAtLcN+XMyae4EiM
f/M0HhdlOUt895L6u4KKZRnqV+65OVcEs1wxh05HT4KG+GDUoVjD2aAquWfn3qFE
bjg3SkDkfJgHTDAU8sRaJ1IHHR7gL+iRZQKtuKezmUOiMmM2M+H1GPX+9ck9PkBL
YnjE+owYFq+FcQkZhmPijsQgpnuBYeOe+2E0U9AZkKUuennaW+RCxMoWbtDD+1BZ
KpWMtywYJlJUa2hlSk0hqyUnfYIQ9IFmZf0b3zzC9oTsGkETOjWT+S+kzcUo/Pjr
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:20 2026 by rpki-client