Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa
File:                     835EF5A2C9DD11F09DEB004DC4F9AE02.roa (raw, json)
Hash identifier:          XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=
Subject key identifier:   BD:B6:7F:48:2E:0D:9D:3D:D5:3F:3A:33:CE:13:E8:44:A1:AC:88:E6
Certificate issuer:       /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial:       0107
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:28:36 +0000
ROA not before:           Tue 25 Nov 2025 09:02:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     45491
IP address blocks:        103.109.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
                          rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
        Validity
            Not Before: Nov 25 09:02:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59084-d487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:1c:00:53:97:0f:7a:29:b6:15:9e:67:bb:
                    bb:fc:c6:f6:04:f2:fa:17:02:00:5a:4c:b2:bd:4c:
                    11:e6:f1:f5:50:7d:98:8b:ec:86:9f:be:26:3c:93:
                    d5:91:05:f7:c7:3a:c2:ab:75:f4:a1:04:88:ce:6c:
                    2b:f0:0c:90:f4:88:8f:57:0e:f9:73:e9:ee:09:bc:
                    4c:68:86:89:c3:9d:54:62:c5:ac:1a:e1:f3:d8:9e:
                    af:6d:2c:dd:d2:71:2e:84:ee:80:58:c4:2e:0d:96:
                    c1:20:43:9b:bc:b8:6d:6a:07:8c:02:23:a7:7f:85:
                    ce:e8:a6:74:24:04:0c:55:22:93:fd:48:f5:e0:c1:
                    97:57:4b:aa:6a:fd:89:26:8d:71:75:f9:a9:c9:0e:
                    f3:98:16:eb:2f:1a:a0:77:59:fe:e4:99:56:5d:5a:
                    5b:ca:0f:c4:76:65:04:ea:d5:ca:9a:9d:e1:c9:b5:
                    a4:c4:5f:64:97:8b:e4:b6:05:31:03:55:30:97:4c:
                    a5:fb:3f:f4:1c:7b:d2:34:a9:6d:3e:45:cb:2c:94:
                    73:17:1b:f8:29:4a:27:93:90:63:bd:70:17:5f:ff:
                    57:fc:3b:9c:c0:fd:c5:13:7a:e9:a1:7e:bb:72:8b:
                    40:90:04:02:d1:0f:53:7a:9b:0a:71:75:01:82:a9:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B6:7F:48:2E:0D:9D:3D:D5:3F:3A:33:CE:13:E8:44:A1:AC:88:E6
            X509v3 Authority Key Identifier:
                keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:01:7f:69:23:3f:44:30:d7:c2:ee:2b:4b:bd:9f:46:da:
         72:f1:c7:6b:f1:a7:ee:ce:04:24:c7:d6:24:71:10:44:78:c3:
         da:5b:bd:a9:1d:75:64:33:89:4c:6e:11:d3:a3:ef:e1:fb:47:
         09:5e:d4:50:25:81:4b:60:47:4d:64:ac:65:a0:ed:7b:8c:22:
         56:93:79:d5:88:19:9f:db:89:fa:07:a8:b7:b9:89:bf:be:40:
         11:be:14:07:15:04:da:75:02:b2:1c:f3:7c:4b:71:01:50:2f:
         b5:4c:2f:81:d9:f6:7e:6c:93:24:3e:bf:f4:dc:bb:29:33:4d:
         45:91:7b:61:a4:64:50:4e:14:95:c5:86:c1:76:73:43:40:1e:
         4e:66:e6:d4:d6:7e:71:b2:8f:41:67:23:5a:ec:56:ca:0b:6a:
         00:bc:63:85:c3:75:06:f9:85:0f:e0:4c:45:c5:03:b8:ba:25:
         cb:5a:7c:a0:a9:2f:ee:87:51:d2:a0:88:1e:e5:83:0a:b1:f3:
         8a:db:d8:45:82:aa:23:92:43:42:c9:71:d6:93:13:ba:e1:95:
         8e:e2:89:8e:79:f5:75:93:f0:71:41:ef:c3:82:2f:ed:98:9d:
         a4:0f:73:eb:a3:d2:75:10:42:81:08:bd:c3:d3:77:73:40:23:
         99:34:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:10 2026 by rpki-client