Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
File:                     8160C03610E911EA86FA6774C4F9AE02.roa (raw, json)
Hash identifier:          6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=
Subject key identifier:   43:0C:08:9B:A5:33:FE:23:63:B2:41:AD:2E:2E:ED:53:C7:8E:2B:35
Certificate issuer:       /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial:       0CA4
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:36:08 +0000
ROA not before:           Fri 16 Jan 2026 18:15:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136009
IP address blocks:        103.79.182.0/23 maxlen: 23
                          103.79.182.0/24 maxlen: 24
                          103.79.183.0/24 maxlen: 24
                          103.122.90.0/23 maxlen: 23
                          103.122.90.0/24 maxlen: 24
                          103.122.91.0/24 maxlen: 24
                          2001:df6:d600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
                          rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3236 (0xca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
        Validity
            Not Before: Jan 16 18:15:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45ce8-efe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:9b:1a:db:8a:47:0f:fc:12:ab:22:a2:f5:
                    67:97:78:52:3d:4d:de:bb:6b:1f:0f:1e:df:fc:63:
                    c1:1e:1d:ed:76:9e:77:03:7d:79:3f:99:4f:94:a7:
                    0c:2a:ec:0d:a6:ac:b1:80:20:a6:a6:e5:82:ed:36:
                    df:f9:67:d2:cf:4c:0f:a7:4a:f7:a6:b6:02:25:e1:
                    86:87:07:ed:9b:18:c4:27:47:f2:3e:e7:b6:d7:00:
                    a4:93:0e:88:fa:25:f7:6f:3b:6a:ed:87:6c:ef:44:
                    ce:de:3e:93:d8:ef:bd:9e:fc:8f:6a:0d:9e:d1:fb:
                    d6:31:db:7f:5f:27:fe:b6:d4:a0:67:ec:81:40:4c:
                    41:28:c8:c2:a5:22:70:f6:37:f8:93:50:9c:58:e1:
                    fc:2e:aa:5b:54:c8:dc:8a:00:f8:3b:04:ed:2c:66:
                    09:68:7b:5a:a9:e8:30:b5:98:d3:62:5d:1d:eb:bd:
                    c8:86:7e:a8:09:76:db:55:51:79:f6:6c:3e:93:d4:
                    0c:9a:d6:ea:b6:1b:93:05:60:c4:b2:6b:53:bf:b3:
                    ea:f3:34:04:45:18:0b:04:bc:02:57:1e:eb:49:3d:
                    b7:42:f8:49:bd:e3:03:e1:5a:dd:23:0a:ef:00:93:
                    5d:8a:71:c6:fa:52:df:9e:48:99:f9:81:f7:39:f4:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0C:08:9B:A5:33:FE:23:63:B2:41:AD:2E:2E:ED:53:C7:8E:2B:35
            X509v3 Authority Key Identifier:
                keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.182.0/23
                  103.122.90.0/23
                IPv6:
                  2001:df6:d600::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:07:f0:a8:8f:0a:8a:c5:13:7b:9a:ab:e7:e2:74:9a:14:a3:
         86:cf:d6:27:38:1c:d7:31:fb:83:43:c3:4a:9f:a7:70:39:20:
         53:f6:95:f6:87:a4:7e:a0:2d:ff:47:bd:39:33:eb:28:08:92:
         35:b8:76:85:9f:47:37:70:54:b3:28:86:e8:3e:07:6e:bb:52:
         6e:a5:49:56:9f:15:e4:c4:b9:47:46:83:c9:a1:32:a7:f8:b7:
         4c:d1:e6:31:4d:8b:65:98:13:53:45:15:e4:bc:a6:6f:df:bd:
         1b:07:cd:8b:27:9f:e1:5b:25:64:6c:ad:e5:f4:58:e1:ae:08:
         1c:8c:eb:a7:db:d6:05:02:68:c6:a2:b1:42:54:50:e2:ed:94:
         72:69:07:a8:bf:c8:3b:dd:74:c0:8d:c9:f3:54:12:2c:fc:45:
         d1:a1:7d:2d:2f:ed:7d:ce:70:22:66:8f:ee:37:4f:43:33:af:
         2f:e3:2d:fa:87:bd:21:af:64:e1:bd:b3:0c:f1:98:79:4f:06:
         ee:b6:97:b5:b2:35:2c:5d:80:f2:7a:a9:40:ae:50:57:d3:05:
         da:55:b9:3c:e6:7d:36:e5:39:88:40:61:b1:b5:6e:d9:3f:ce:
         1e:c3:d4:fd:19:b5:53:3a:81:7c:2e:71:e7:79:01:09:43:7f:
         f9:86:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:00 2026 by rpki-client