Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
File:                     F45C79E262F711EC8184F344C4F9AE02.roa (raw, json)
Hash identifier:          31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=
Subject key identifier:   00:D4:49:67:24:F2:C7:7B:E0:0D:84:E2:14:58:C0:C1:F6:10:85:DE
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       04C5
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:47:55 +0000
ROA not before:           Wed 23 Jul 2025 01:06:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139616
IP address blocks:        103.142.142.0/23 maxlen: 24
                          2001:df1:4680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Jul 23 01:06:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4357a-526b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:1d:2c:11:30:65:2c:46:1c:d3:a1:7a:c8:
                    c0:0b:bc:0e:8c:4e:f0:ac:ff:c8:94:64:c6:47:8d:
                    28:b1:cf:eb:1e:7d:e4:f5:70:c1:66:c6:93:c1:e8:
                    16:f0:a8:d8:77:62:8e:63:fb:05:75:ec:5c:fa:0b:
                    89:14:df:75:5b:83:56:81:9c:6d:a2:87:62:aa:90:
                    7d:64:1c:99:b8:0a:41:f7:8b:e5:4a:12:2d:59:34:
                    36:66:85:8c:6e:c1:bd:15:3e:7b:77:1e:51:d1:72:
                    db:6c:08:0a:f8:8f:0e:93:80:07:3e:6b:15:91:a8:
                    1f:e3:66:5b:0a:25:7c:70:91:a8:52:8a:27:8a:ef:
                    f5:4e:1f:43:9a:8a:17:bf:30:4f:3d:1c:97:09:b1:
                    a3:94:a8:c8:32:9a:55:2c:25:15:be:71:6b:a2:da:
                    c9:ca:c5:80:cd:d4:c5:ed:ff:d4:9d:fd:61:8e:8b:
                    11:18:f8:88:46:d8:2a:5b:96:25:15:a0:eb:bc:c7:
                    50:3f:9f:d1:95:ba:0d:30:6a:f8:b3:d0:12:d9:a3:
                    b0:b4:62:98:53:86:fe:4a:3d:c5:2e:04:a9:9f:28:
                    b0:79:1f:a6:51:df:dc:76:80:d9:af:69:60:41:17:
                    55:34:e7:48:59:4c:f9:65:90:9d:d5:dc:cd:90:b7:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:49:67:24:F2:C7:7B:E0:0D:84:E2:14:58:C0:C1:F6:10:85:DE
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.142.0/23
                IPv6:
                  2001:df1:4680::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:5e:8c:dd:2d:66:41:c1:c0:b7:cc:8d:a3:4e:31:42:bc:
         9b:37:e7:0e:0e:0e:0c:aa:75:41:5a:9d:ae:ed:da:6e:28:89:
         55:f5:96:ff:dc:f7:90:be:c6:e6:3d:7d:78:c1:c9:00:d7:c8:
         f7:37:31:a8:84:1f:b5:d6:3a:42:92:2a:c3:ed:a3:1b:cb:a6:
         20:6c:8b:b3:72:e2:61:88:ff:2d:69:25:d2:92:ea:0e:13:e5:
         0a:55:a6:44:ca:44:da:48:e6:c0:47:3f:aa:ae:11:34:72:fc:
         19:e3:60:49:a8:0a:28:ad:2e:e0:cd:30:f1:24:1c:59:2e:bf:
         0b:d0:3f:c8:f5:ef:d6:f8:1b:64:31:86:18:e9:c5:6c:25:14:
         05:0a:f6:76:23:ba:c4:d1:e2:70:79:47:c4:64:e2:e5:39:ea:
         3f:2b:54:9c:fe:bb:0f:76:21:d3:12:a7:22:1c:4d:36:03:f1:
         39:f5:32:8d:46:7d:ca:1f:3e:84:fc:f3:59:66:1b:7a:0a:af:
         4b:20:45:74:a1:fa:e2:50:c1:c7:e8:9a:6d:95:82:53:c3:1a:
         a1:d7:4e:be:60:d4:9e:75:e1:48:c9:78:c6:0f:fd:30:63:91:
         10:0f:a3:b1:a0:15:e5:66:56:33:9c:9f:4d:ea:a9:6b:ea:9a:
         b0:18:34:3a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF
NTg3QzZERDIwHhcNMjUwNzIzMDEwNjM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzU3YS01MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPEdLBEwZSxGHNOhesjAC7wOjE7wrP/IlGTGR40osc/rHn3k9XDBZsaTwegW
8KjYd2KOY/sFdexc+guJFN91W4NWgZxtoodiqpB9ZByZuApB94vlShItWTQ2ZoWM
bsG9FT57dx5R0XLbbAgK+I8Ok4AHPmsVkagf42ZbCiV8cJGoUooniu/1Th9DmooX
vzBPPRyXCbGjlKjIMppVLCUVvnFrotrJysWAzdTF7f/Unf1hjosRGPiIRtgqW5Yl
FaDrvMdQP5/RlboNMGr4s9AS2aOwtGKYU4b+Sj3FLgSpnyiweR+mUd/cdoDZr2lg
QRdVNOdIWUz5ZZCd1dzNkLeWhwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFADUSWck
8sd74A2E4hRYwMH2EIXeMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy
RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzExM0IvN0JFN0MwOTA2MkYwMTFFQzk1MkIyOTY1QzRGOUFFMDIvRjQ1Qzc5RTI2
MkY3MTFFQzgxODRGMzQ0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ46OMA8EAgACMAkDBwAgAQ3xRoAwDQYJKoZIhvcNAQELBQADggEB
AKRXXozdLWZBwcC3zI2jTjFCvJs35w4ODgyqdUFana7t2m4oiVX1lv/c95C+xuY9
fXjByQDXyPc3MaiEH7XWOkKSKsPtoxvLpiBsi7Ny4mGI/y1pJdKS6g4T5QpVpkTK
RNpI5sBHP6quETRy/BnjYEmoCiitLuDNMPEkHFkuvwvQP8j179b4G2QxhhjpxWwl
FAUK9nYjusTR4nB5R8Rk4uU56j8rVJz+uw92IdMSpyIcTTYD8Tn1Mo1GfcofPoT8
81lmG3oKr0sgRXSh+uJQwcfomm2VglPDGqHXTr5g1J514UjJeMYP/TBjkRAPo7Gg
FeVmVjOcn03qqWvqmrAYNDo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:07 2026 by rpki-client