Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa
File:                     53B6E5D212CF11EBA8D2C037C4F9AE02.roa (raw, json)
Hash identifier:          xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=
Subject key identifier:   4F:29:11:CA:E7:A1:A6:B0:89:13:89:AB:CE:9D:14:AC:2F:7C:84:B9
Certificate issuer:       /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Certificate serial:       0833
Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 21:26:37 +0000
ROA not before:           Thu 16 Apr 2026 21:26:37 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132269
IP address blocks:        103.148.234.0/24 maxlen: 24
                          103.149.217.0/24 maxlen: 24
                          2001:df2:f680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
        Validity
            Not Before: Apr 16 21:26:37 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e1540d-c51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:92:f9:d1:51:fe:20:29:7e:e9:d8:de:47:
                    b7:8d:9a:bd:73:a6:e9:29:12:5c:d8:a9:ed:45:03:
                    66:eb:fe:2f:9b:db:68:46:aa:ab:48:33:96:9e:3c:
                    e2:8f:df:b6:9f:92:dd:b1:ec:d7:60:f4:3f:ec:3d:
                    ef:81:e4:b4:44:12:ab:c8:83:0a:db:c2:63:30:87:
                    21:6e:a2:88:a9:5f:7b:4e:28:bd:c7:9e:d4:b5:ce:
                    21:b7:d3:a5:4a:7e:86:aa:84:41:ae:0e:bc:ee:60:
                    77:11:6d:9c:a0:99:69:68:be:9a:e8:d4:c6:80:27:
                    4c:d1:7c:89:40:e1:8f:4b:63:fa:85:4a:77:36:c5:
                    a8:32:17:33:21:a0:2f:6f:fb:1a:1a:22:99:e4:97:
                    96:61:cd:cf:c5:61:ad:9a:d5:31:ed:79:1c:81:32:
                    c4:ef:3a:44:97:e2:85:c4:02:77:d7:3b:20:43:5c:
                    a0:22:ad:36:3e:77:e1:5d:3c:16:7b:2d:bf:73:09:
                    75:72:9f:f9:65:eb:cc:bf:cb:5d:61:db:45:b5:c0:
                    df:21:c9:36:4f:ba:04:ef:57:9a:69:d4:f8:6c:56:
                    cc:ad:51:56:6c:7c:57:90:b1:ba:76:8b:11:d2:ac:
                    08:21:fa:48:01:fc:f3:d2:ca:3d:8a:71:3f:ae:35:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:11:CA:E7:A1:A6:B0:89:13:89:AB:CE:9D:14:AC:2F:7C:84:B9
            X509v3 Authority Key Identifier:
                keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.234.0/24
                  103.149.217.0/24
                IPv6:
                  2001:df2:f680::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:66:59:1d:e3:4c:fe:fd:d6:c4:3a:a8:3f:00:06:2c:50:b6:
         c3:22:5d:5a:0d:e1:d8:f9:bb:8e:ad:9e:a7:ef:5a:8a:be:29:
         13:02:47:f2:d1:d3:62:4e:a6:e0:15:35:ec:13:7a:d0:05:6f:
         96:80:9d:6c:a5:00:a1:ca:d8:4d:9e:a0:85:ac:2b:6e:18:2f:
         1c:8a:e5:ec:7e:fd:54:30:43:66:9b:37:44:89:5d:05:33:87:
         77:cc:f9:b5:8d:44:eb:15:1c:a5:7c:91:3e:3b:14:3d:9b:7b:
         80:40:dc:a5:06:2b:c8:51:a1:2c:24:61:70:3e:21:2c:a1:07:
         32:0d:35:ac:14:6d:d3:c7:1a:be:8a:bc:cf:da:0c:73:7a:16:
         69:97:c3:7c:a7:cd:a9:24:f0:df:36:d6:4c:ec:4b:6f:f6:a3:
         b5:fe:a4:29:25:99:68:fd:8e:17:93:6b:02:24:54:5f:fd:7f:
         70:f3:28:94:b1:dc:bd:88:37:af:be:e9:d6:52:ca:69:cd:fc:
         15:92:b8:f1:85:1b:0f:30:2b:6e:06:5b:cc:99:01:fd:61:2a:
         6f:81:70:2a:03:a7:b9:2c:c0:f7:e0:f1:b6:6a:bf:d1:c3:1d:
         08:9a:87:8d:76:36:4d:4a:ec:9a:ef:cd:79:0a:43:5a:f9:20:
         04:a8:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:02 2026 by rpki-client