Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/BF466AE8325611EFA462C323C4F9AE02.roa
File:                     BF466AE8325611EFA462C323C4F9AE02.roa (raw, json)
Hash identifier:          8vNtqHXYBEHG1BUuIx3hpyEUVshVqruHiCT2TQ+vhGk=
Subject key identifier:   D8:AD:94:2D:CE:95:50:60:D3:2D:9C:ED:0E:F5:44:F1:64:F2:6D:A8
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       015E
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/BF466AE8325611EFA462C323C4F9AE02.roa
Signing time:             Wed 15 Apr 2026 05:39:05 +0000
ROA not before:           Wed 15 Apr 2026 05:39:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150806
IP address blocks:        103.109.184.0/24 maxlen: 24
                          103.109.185.0/24 maxlen: 24
                          2001:df2:1840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: Apr 15 05:39:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69df2479-a476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:28:3a:0c:f9:e8:6e:a6:8f:dc:3c:56:68:
                    c2:af:b5:e1:b9:7f:c8:15:75:2f:59:d2:e1:f1:65:
                    0d:df:7f:13:59:44:ba:be:2b:d1:d5:97:70:ab:d1:
                    a0:e7:c9:91:e6:06:ba:a8:47:b7:2a:d0:21:83:ed:
                    45:ab:1e:fb:45:b4:57:8a:fa:89:8f:74:bc:c1:b0:
                    24:8f:7c:6a:87:20:ab:4c:21:cf:8f:26:90:23:57:
                    8a:9b:b0:1d:56:b7:c7:dc:0d:7e:ac:a5:fc:1a:13:
                    a3:af:8e:92:e5:61:d4:48:e6:2c:a8:1f:f6:f7:4e:
                    88:bc:d7:3a:f3:2a:4a:ea:bf:6b:20:a1:1e:3a:6c:
                    86:8a:e8:43:f8:82:99:05:c7:f8:c8:d5:88:be:8f:
                    28:02:a5:ef:31:df:f4:f5:c8:b8:10:57:b6:35:a8:
                    ef:d0:be:96:30:0c:b7:d4:d2:c7:7f:8f:d9:25:5c:
                    e4:10:1a:c0:09:e4:6f:51:d7:57:4c:8b:9d:c6:69:
                    36:89:9d:bd:02:cb:f6:90:f6:98:4b:ba:ea:98:f3:
                    f7:4c:05:f7:cb:b8:69:db:c1:d1:f5:4f:a8:f8:a8:
                    6d:45:5f:77:7c:ac:26:dc:6b:46:de:de:cf:94:20:
                    e3:8f:c0:33:23:9e:d8:b0:39:2d:dc:c3:3b:ba:26:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:94:2D:CE:95:50:60:D3:2D:9C:ED:0E:F5:44:F1:64:F2:6D:A8
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/BF466AE8325611EFA462C323C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.184.0/23
                IPv6:
                  2001:df2:1840::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:68:4a:22:85:31:03:7e:e7:a9:33:da:d2:f7:70:f6:ae:75:
         6e:59:1c:c8:a8:aa:e9:fe:93:e4:de:bc:dd:c7:8d:96:63:27:
         6b:41:18:69:d8:69:73:0b:d6:6f:34:92:ed:aa:9b:84:09:fb:
         24:71:35:59:6c:d3:df:ec:c4:37:6b:85:35:76:60:65:9c:ec:
         97:cd:89:40:8e:9a:1e:33:da:d1:64:13:ef:16:b1:ee:56:48:
         60:74:95:48:75:da:12:0f:f4:d5:26:fe:d6:24:07:62:15:3f:
         9f:c7:13:54:05:5f:4c:ca:46:30:a4:df:bb:13:7d:05:56:b7:
         d4:f1:58:80:e3:f2:3b:4a:d5:97:34:30:ca:ec:da:80:bd:8f:
         b1:1d:bc:9f:3b:d4:15:c9:ab:d9:b8:6b:36:b0:07:8e:25:e0:
         db:5f:d9:83:ae:98:17:eb:fb:b5:71:94:cc:d4:8b:8b:89:84:
         38:5f:55:b9:c8:2f:12:65:53:61:a7:66:32:c4:9d:fd:f0:2d:
         20:90:23:b2:7c:ca:15:fb:4c:2b:de:f6:c3:d2:df:a5:82:0f:
         8e:6b:1a:3c:74:0d:b1:ba:5f:0d:60:29:ed:eb:48:78:e9:31:
         6e:3d:05:82:af:8d:eb:5e:98:0e:78:d8:46:79:db:6f:4a:a7:
         c6:3d:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:33:43 2026 by rpki-client