Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
File:                     975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (raw, json)
Hash identifier:          jAKvnhGGumY3r7ewKcT9Lzim+X/g3AItHLNz64M4NG8=
Subject key identifier:   3B:F1:31:91:C7:60:9E:89:12:0C:95:AA:9D:35:56:9B:53:38:CC:D6
Certificate issuer:       /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial:       0982
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:03:16 +0000
ROA not before:           Wed 30 Jul 2025 21:01:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141322
IP address blocks:        103.151.184.0/24 maxlen: 24
                          103.151.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
        Validity
            Not Before: Jul 30 21:01:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a44724-da60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:fd:1f:dc:0b:bb:3d:16:be:5d:53:ce:5c:
                    37:5b:66:7e:56:53:3c:8b:96:71:c7:14:65:48:ce:
                    70:b2:60:0f:f9:2f:bf:9e:3e:a0:8b:90:13:6d:06:
                    c2:fc:3d:fa:5b:02:43:8a:ed:ee:c8:d3:07:d5:a3:
                    36:f9:28:1e:9a:ed:d5:25:c0:63:46:bf:71:9c:ff:
                    86:e1:d2:d5:a5:e6:29:5e:81:6a:45:45:44:17:a6:
                    4f:8e:43:98:ae:e3:65:6e:d7:96:92:1f:58:f1:19:
                    f8:f9:bc:0e:44:60:7f:5c:89:08:5a:f9:67:0f:8c:
                    42:d5:9b:14:16:a5:8a:79:73:8f:08:5d:a1:4d:80:
                    54:bf:6b:b9:b4:82:aa:55:83:c9:15:94:35:d7:0d:
                    57:cd:d9:53:4f:1b:d0:37:c3:ca:c6:53:f0:17:39:
                    71:02:aa:91:d9:10:7b:f1:a8:bb:47:46:51:91:04:
                    94:d6:b2:f1:d9:57:b7:5c:aa:2a:e1:7d:47:7d:d3:
                    e7:44:9f:69:ab:68:c8:27:8f:51:18:d2:25:77:a3:
                    5c:82:0a:82:73:4b:ac:32:d7:f3:5b:1d:3c:d4:80:
                    76:aa:07:14:d3:3c:b8:53:8d:1c:21:d9:26:49:25:
                    92:4a:06:41:84:5f:21:39:cf:17:25:ba:42:29:98:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:31:91:C7:60:9E:89:12:0C:95:AA:9D:35:56:9B:53:38:CC:D6
            X509v3 Authority Key Identifier:
                keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:5e:15:2a:64:be:66:78:76:82:32:6f:ea:5f:8a:b2:cd:
         b7:f5:ee:25:10:81:41:d9:4a:6f:24:de:36:d0:85:62:b2:66:
         8b:a6:05:04:e9:e5:c6:5c:b6:47:c0:bb:ec:96:74:c1:05:16:
         95:00:c0:fc:7d:da:95:54:f9:91:e4:c7:a8:c8:06:8f:a5:6e:
         7c:ed:58:96:04:c2:f3:82:37:d3:61:ef:4e:5e:fb:66:b3:f0:
         0a:90:09:8e:c6:5c:fe:80:69:28:8c:03:19:48:2f:75:6f:36:
         4c:e7:61:de:21:ab:63:8f:57:3c:ff:93:69:fa:f4:51:b3:ba:
         8d:b0:6b:4d:17:ce:87:c3:88:64:4d:82:a7:d3:81:45:2e:c4:
         5e:bd:2a:54:05:2d:fe:16:d2:cd:42:5a:d3:1e:e9:28:2f:35:
         eb:03:79:14:f4:2a:78:76:b4:5b:b2:c8:68:5c:60:34:68:0d:
         8e:50:73:4d:0d:01:b5:f7:2b:67:51:59:cb:f3:ad:94:80:cd:
         9e:6a:f7:e2:8b:da:c5:41:b3:ef:5d:f8:2c:6f:fc:3a:3d:b7:
         eb:ab:36:23:9c:02:a0:86:91:88:9a:f1:80:36:8f:13:b7:46:
         f8:a5:7e:aa:ad:b2:38:15:94:e6:4c:df:cf:37:60:5c:92:d8:
         53:b2:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:48 2026 by rpki-client