Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa
File:                     EADAF6B2743E11F0ABAB020EC4F9AE02.roa (raw, json)
Hash identifier:          mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=
Subject key identifier:   57:2F:82:C1:06:25:00:85:D6:DD:2F:51:E7:3C:07:FB:6B:39:37:BE
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       6F
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:12 +0000
ROA not before:           Mon 01 Sep 2025 08:56:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58690
IP address blocks:        103.15.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Sep  1 08:56:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f517-597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:08:1a:3e:a3:5b:e1:97:73:f4:14:c6:f8:
                    e0:82:90:d4:0e:23:de:21:36:6a:7a:f8:f6:16:7a:
                    df:1f:d1:db:16:62:e0:ec:b8:b2:94:75:26:fc:40:
                    ab:46:5e:ac:58:f5:ea:ca:58:1a:8a:8e:81:1c:64:
                    1d:83:ca:c3:7b:f2:2a:72:b3:15:19:56:30:1a:e6:
                    12:87:ba:4e:17:7b:c7:40:08:2a:d1:47:e4:7f:1c:
                    21:d0:e8:92:32:dc:75:ab:37:16:bd:4b:34:e6:cf:
                    ef:35:59:c6:98:4b:4f:d0:fd:28:fa:4a:22:b2:e5:
                    74:d3:f9:0f:92:33:cf:1f:00:55:35:da:e3:a7:30:
                    a9:38:86:97:b7:8b:08:a6:8d:06:80:c2:a9:c6:0d:
                    fc:07:27:7c:4b:76:9c:d8:da:68:f9:00:38:e9:83:
                    92:0d:97:2d:73:0a:e9:bc:f2:df:ec:b7:16:93:9f:
                    90:8c:55:5a:32:95:41:52:39:45:2a:85:3c:1e:5c:
                    0b:15:9d:02:35:93:16:ac:08:30:e0:7a:55:ba:34:
                    cb:92:b6:15:bf:29:c6:46:7d:d3:1c:36:2e:b0:26:
                    0d:89:3c:e5:fb:af:aa:27:c6:06:13:21:9c:3d:69:
                    2c:93:f6:e8:83:bb:34:a3:96:8b:28:86:b0:98:6a:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:82:C1:06:25:00:85:D6:DD:2F:51:E7:3C:07:FB:6B:39:37:BE
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:0a:f9:ec:db:87:06:45:24:81:1c:80:5b:4e:73:65:43:f8:
         53:81:6f:05:c2:75:a1:49:21:37:a9:98:7a:73:60:a4:b6:7a:
         6c:12:37:4a:43:3a:a3:3e:1c:a1:00:80:65:a8:ab:a0:77:27:
         68:81:34:6e:36:1b:5c:53:ff:bf:7d:9b:80:a9:d8:a5:98:80:
         25:0c:3f:03:76:7c:05:62:b6:8c:4a:70:94:b1:c3:ce:1a:28:
         b3:a5:9d:a1:30:df:19:15:8b:0d:ba:02:67:ed:72:8a:3b:33:
         8a:cb:9e:e3:a8:b9:ca:d2:32:eb:db:7a:11:a4:e1:7f:43:38:
         22:4d:64:e2:8f:46:79:4d:04:67:15:72:ff:df:70:b6:a4:d1:
         50:bc:87:bb:20:da:15:1d:13:1b:94:2d:d8:b3:87:9c:2c:14:
         33:fa:06:e8:60:5e:10:a6:94:4a:dd:e4:fe:cd:6e:3f:fb:c0:
         b8:20:fa:ae:c5:a8:87:90:54:69:26:ac:b5:1b:6f:18:5f:64:
         b7:96:ee:56:10:cb:3d:a3:96:9d:93:14:c6:50:8a:35:06:89:
         3f:a9:40:9e:df:f3:30:2b:c0:3c:e7:bc:94:5f:58:ee:51:a6:
         45:9c:ff:2f:0c:77:96:d7:11:b1:cd:b0:6a:77:c9:1a:74:0f:
         f4:54:d9:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:20 2026 by rpki-client