Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
File:                     AD286018B29C11EDB216812EC4F9AE02.roa (raw, json)
Hash identifier:          YsWaPmtg5tmHB4YVZTYxNVoG50IpCI5IiT+MeSWq6Eg=
Subject key identifier:   A6:EF:0C:8F:BF:BE:8C:CB:C7:5F:3C:BF:1B:45:3A:6B:CE:61:1D:77
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       0240
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:32:01 +0000
ROA not before:           Tue 11 Mar 2025 03:19:28 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        103.89.240.0/23 maxlen: 23
                          103.89.240.0/24 maxlen: 24
                          103.89.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Mar 11 03:19:28 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3dd61-7c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:d8:4b:6b:a6:3b:1c:14:33:03:d6:39:e9:
                    05:2e:c7:fb:4f:c2:6f:53:3e:23:e3:af:fb:e5:a8:
                    5f:c2:e1:61:05:6b:5e:dc:0b:9e:a2:39:77:eb:ee:
                    7b:84:8d:eb:dc:af:bb:59:f0:4a:9f:0d:cb:8b:c4:
                    dc:43:6b:80:44:8d:a9:11:52:be:00:4f:f8:b1:46:
                    09:e4:f2:b8:8d:7e:1c:bf:92:91:61:b0:b3:7c:76:
                    85:dc:0d:36:df:4a:87:45:c6:67:7d:77:88:5a:45:
                    43:1c:51:54:7c:77:c2:35:e0:bc:72:d8:b1:7f:a6:
                    64:aa:34:28:4d:46:0c:76:b4:ce:79:a8:24:bf:3e:
                    50:24:f3:30:e9:00:e2:25:5a:ce:c5:b7:cb:51:5f:
                    68:f0:0c:f1:7d:7d:6a:9f:e1:49:16:c9:1a:24:83:
                    c5:f0:ab:75:f6:ac:ea:86:d4:cf:93:52:3a:6c:14:
                    d1:55:76:24:01:17:22:cf:5f:7e:e6:2d:35:e5:67:
                    d8:9c:88:7a:5d:4e:d8:71:e0:66:04:ec:90:2a:ec:
                    fb:02:9e:10:24:60:eb:f7:ff:d8:1b:1f:5d:28:b1:
                    77:4d:d4:aa:7f:fa:19:3e:a4:79:39:42:13:3b:fe:
                    79:90:5d:5b:04:81:31:d0:a8:d8:67:48:72:c9:d7:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:0C:8F:BF:BE:8C:CB:C7:5F:3C:BF:1B:45:3A:6B:CE:61:1D:77
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:5a:be:fa:f3:f7:0f:23:60:23:03:b3:a5:ba:71:eb:f8:f2:
         ea:74:84:5a:58:10:c4:b5:16:18:f3:9d:08:7b:c6:cf:f9:1a:
         54:92:e8:21:b8:51:2e:4a:70:dc:22:ce:52:47:56:aa:d6:ee:
         57:0a:c6:e0:39:0a:15:09:c0:0b:af:2b:74:e6:d4:7b:47:1c:
         ea:a4:42:fe:92:47:85:65:be:75:8a:9d:1f:be:65:95:fe:22:
         65:af:3f:4d:6f:9a:f4:d9:91:00:9f:18:c8:42:85:a3:97:4f:
         bc:f0:ee:22:7b:d8:40:94:fc:2a:1c:4a:75:b0:2e:71:25:05:
         07:ed:ef:e6:e2:ed:18:e3:0b:0b:49:34:e2:d5:38:d3:cf:23:
         f8:23:3a:a3:40:f7:1b:df:14:bd:54:49:42:a9:b0:58:99:de:
         88:25:b1:c8:65:94:47:a5:38:71:0e:ff:a7:5e:ee:30:98:84:
         e9:5b:51:3f:36:14:69:e4:ce:db:db:89:4c:8e:0c:d8:a1:e1:
         7b:cc:e5:ec:31:e8:63:6b:40:df:fd:77:37:18:4b:97:41:d9:
         52:bf:0b:f5:94:11:54:b9:96:a7:de:16:c6:7b:38:48:2d:bf:
         84:54:c4:d7:b4:cb:ef:99:6b:13:49:c6:27:06:52:34:c1:99:
         af:30:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:04 2026 by rpki-client