Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/285C90D49A8911F0B2115222C4F9AE02.roa
File:                     285C90D49A8911F0B2115222C4F9AE02.roa (raw, json)
Hash identifier:          X4RiwJfU/AWIqnRXA1GtRFWmRdCHp9Hw0fFZqv0xXWU=
Subject key identifier:   E6:04:63:E2:22:C1:9B:B7:6C:CB:65:2F:08:6E:E9:72:47:A0:24:39
Certificate issuer:       /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Certificate serial:       71
Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/285C90D49A8911F0B2115222C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 07:47:16 +0000
ROA not before:           Thu 23 Apr 2026 07:47:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149802
IP address blocks:        103.186.206.0/23 maxlen: 24
                          2001:df1:7fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
        Validity
            Not Before: Apr 23 07:47:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e9ce84-d257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:ea:76:66:a1:d6:7b:ce:04:97:16:dd:ba:
                    d3:36:7f:39:fb:3f:8f:e1:62:65:91:b6:e4:11:22:
                    a3:1b:2a:0c:21:d1:3a:36:55:b7:82:b2:94:d5:a7:
                    11:4e:9f:37:8a:e2:23:f6:c1:49:5c:11:f2:d7:99:
                    d6:8a:a8:6d:58:2c:e9:75:c8:9c:13:92:4e:32:74:
                    77:c0:31:10:dc:86:ed:e1:cb:5f:e4:3b:09:7f:9d:
                    6e:bf:bb:18:1e:de:ba:bc:53:14:5c:18:74:e4:62:
                    db:a4:29:06:51:7c:b1:c0:21:73:e2:2a:8f:e0:8c:
                    e5:33:43:0e:cb:40:35:be:c2:56:94:44:55:58:a0:
                    67:76:0d:ab:71:b7:ab:b8:78:88:e3:09:39:ba:f0:
                    ff:90:19:45:a4:4e:ed:33:b1:32:19:fe:6f:76:bb:
                    a9:50:51:b6:9d:c9:5c:1a:86:91:a4:21:6b:48:cf:
                    d3:b9:51:02:0d:d6:6b:c3:0d:8e:24:34:da:8c:eb:
                    4f:8a:91:40:92:90:44:3f:c2:94:3c:f2:13:41:c6:
                    67:1e:b1:ca:19:a9:59:53:c0:c2:a6:a8:8f:76:1d:
                    eb:e5:61:97:44:c0:bd:2e:db:9e:3c:e1:f4:e9:fd:
                    19:1b:1d:5f:c6:34:47:a4:d0:44:ec:fa:a7:65:20:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:63:E2:22:C1:9B:B7:6C:CB:65:2F:08:6E:E9:72:47:A0:24:39
            X509v3 Authority Key Identifier:
                keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/285C90D49A8911F0B2115222C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.206.0/23
                IPv6:
                  2001:df1:7fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:45:14:57:70:b0:f6:29:a5:b7:56:ca:f7:34:29:ac:76:
         3f:f9:cd:5f:87:42:63:b4:a5:98:43:1f:83:91:b3:ff:21:d8:
         07:76:38:fa:e9:aa:b1:ae:6e:34:2a:c4:84:09:6d:da:2e:f4:
         3a:f3:e1:c1:60:71:9c:07:0e:0d:8a:89:93:d3:b2:30:c7:b3:
         a2:51:c4:04:7e:a1:46:b8:ae:ae:c2:5d:87:58:a4:65:ec:f0:
         fc:68:74:b8:14:2c:c3:a9:a0:a1:c4:c0:56:1a:3d:64:a7:fb:
         67:1f:c3:63:f4:4b:35:73:7c:a6:b1:36:cd:4c:a3:0d:13:da:
         d9:53:21:65:21:11:09:a8:1d:36:73:92:99:83:b7:4b:ef:ab:
         a6:a5:94:9d:af:a6:cc:b7:a2:17:a1:b4:ff:74:31:47:2c:e0:
         0d:32:3e:1b:2f:d4:97:dd:38:22:cd:36:5b:3a:d5:f5:8c:b8:
         b6:36:f5:09:04:06:69:21:89:53:4d:b4:aa:66:df:22:c5:bc:
         43:eb:e2:f1:05:48:56:92:36:98:a0:df:e5:59:fc:b9:e6:e8:
         6d:6b:b9:d2:27:68:93:db:b8:91:1d:b7:aa:70:2f:ca:ea:fe:
         97:48:a5:65:d2:c4:af:55:8d:d4:b5:ce:97:ab:cb:4e:fd:ec:
         ce:03:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:32 2026 by rpki-client