Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
File:                     FC3C8A6A81E211EE963BAB87C4F9AE02.roa (raw, json)
Hash identifier:          v31XiVYGJxKH7lnLyUBdZlEf6xpoQVchSdqRGdwSNGw=
Subject key identifier:   EE:EC:36:6D:2F:71:3E:D8:B5:DA:CD:04:C1:CE:7F:C2:EB:E3:60:22
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       01B4
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:17 +0000
ROA not before:           Wed 13 Aug 2025 05:12:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136262
IP address blocks:        103.141.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: Aug 13 05:12:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41c7c-9211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:54:8f:39:c8:88:af:2b:0e:68:42:2a:e6:
                    2a:71:fa:16:5d:ef:eb:a5:c5:9a:6c:82:34:b2:1a:
                    72:01:ce:cc:72:36:30:c2:e7:95:42:d7:ba:cd:80:
                    f4:15:50:cc:9f:31:ff:ea:f0:9a:c9:87:84:29:7a:
                    46:47:74:6e:4e:4a:97:97:a9:ea:ef:c3:e1:02:39:
                    e8:01:44:0a:e5:4e:95:c6:74:6a:a8:19:fb:e2:05:
                    75:04:eb:46:3a:de:cb:a3:29:62:cf:f3:84:db:3a:
                    f4:2b:4e:d8:bc:16:c2:02:31:88:ce:b5:80:d8:12:
                    ca:41:89:6e:67:b5:34:0b:e5:3b:6c:89:15:07:5b:
                    7f:9d:b4:5a:ae:aa:f8:aa:26:16:54:f4:98:8c:9d:
                    68:c8:6d:3a:ff:b0:98:4e:fb:24:2d:33:26:43:f6:
                    44:1c:fc:02:5b:e1:15:33:7f:ba:a5:8c:ad:cf:e9:
                    98:dd:3e:7c:2a:06:8f:a4:f9:ee:74:d4:f5:e9:1d:
                    63:cb:02:55:5f:4b:cd:35:29:1f:24:d0:b1:d3:3a:
                    11:db:59:dc:fe:cd:2f:56:2f:2b:6f:66:10:df:50:
                    62:bd:28:31:a0:b2:a0:fd:b6:18:fa:ab:02:c6:61:
                    88:2e:dd:6b:04:04:22:d4:89:e0:98:cd:de:9c:f3:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EC:36:6D:2F:71:3E:D8:B5:DA:CD:04:C1:CE:7F:C2:EB:E3:60:22
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:e7:ec:d1:61:45:dc:16:6e:05:6a:2f:78:a4:c8:a5:ee:
         20:b1:04:7f:70:0b:37:96:ce:34:bf:c9:00:03:e8:04:f8:71:
         61:bf:23:f1:cc:b3:08:c6:74:74:cb:b1:c7:1e:33:83:3e:22:
         c6:e1:93:49:4a:fa:64:2c:40:db:de:ff:76:04:e6:cc:3f:02:
         bc:1b:37:c5:d0:0f:83:61:ef:96:91:36:3c:2f:8b:75:54:6e:
         9b:96:10:83:ac:4f:07:11:22:d5:b7:f0:54:bf:13:6f:3f:bf:
         85:d1:70:6d:7f:17:d7:67:ef:80:cd:97:b6:a3:29:73:d9:e1:
         bd:36:18:0e:95:05:a4:e8:70:3a:94:e3:1c:3b:6d:c9:c6:85:
         4e:99:f6:e7:01:8f:6f:f1:e0:84:ca:4e:c7:16:08:e8:8c:64:
         03:e3:53:a5:f7:e0:c0:a1:f7:18:27:44:2a:57:4c:c6:60:5a:
         ad:69:a1:fc:05:7a:e7:34:75:ee:7e:35:60:88:ee:8c:03:17:
         ae:53:66:35:b9:8f:b3:e5:a1:44:71:38:9a:cb:d9:72:36:da:
         02:f2:6a:dc:84:fa:84:54:6a:cb:7b:a4:56:38:56:e9:73:9f:
         8c:65:6f:60:aa:cc:53:eb:9d:62:b6:c6:2c:dc:90:ef:24:aa:
         35:3c:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:17 2026 by rpki-client