Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa
File:                     695C5050C27D11EEB0AE466DC4F9AE02.roa (raw, json)
Hash identifier:          FJcj3biGpJ151yYH08MS1FEs86/kv4TpHVPLtHfPpJM=
Subject key identifier:   4F:DB:19:E0:26:C1:6A:2C:1F:C9:54:ED:DD:E2:E5:A7:3F:61:92:4A
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       065D
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:36:43 +0000
ROA not before:           Wed 02 Apr 2025 23:25:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        103.136.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: Apr  2 23:25:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46b1b-d345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:ac:3e:65:2d:25:b5:68:da:8e:19:e7:02:
                    a9:07:02:85:4a:14:0e:a0:68:fe:1e:4d:9a:5e:ab:
                    3c:ec:fd:58:7d:dc:f1:a0:0c:a7:68:34:64:3a:65:
                    c9:3d:a5:7a:ae:db:cd:43:ad:21:7c:b7:db:12:79:
                    9f:0e:a0:d4:64:57:4c:38:16:61:59:c3:d8:e9:72:
                    c6:d3:32:1e:f6:ba:de:d0:3a:f4:00:55:5e:9d:ff:
                    19:ab:02:a8:30:a6:a3:67:16:cf:7e:11:c8:9a:56:
                    b6:44:27:be:a9:fa:a2:16:dd:f9:bf:73:36:4e:7d:
                    97:d0:a6:ae:f5:82:af:70:40:42:18:5b:6c:b5:6c:
                    a0:f4:c3:63:03:64:20:4c:90:24:0b:70:a1:e5:fa:
                    a7:ea:f0:6a:82:93:bb:01:6e:c9:18:4e:cd:e6:35:
                    af:a6:c5:a7:5a:60:df:f6:4b:3e:26:f8:23:a0:57:
                    69:cf:dc:bd:49:0f:f0:6e:21:03:c3:48:a9:e8:a8:
                    df:ce:62:61:1b:9a:25:22:19:ca:a4:66:b0:4c:cd:
                    2e:78:e7:94:7c:f6:97:ec:93:35:51:c3:56:3a:2a:
                    0f:8e:74:be:ba:ab:89:f7:c2:a6:a4:57:35:fa:76:
                    28:d9:8b:78:5e:61:6d:68:2f:1a:e4:63:c7:37:c3:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:19:E0:26:C1:6A:2C:1F:C9:54:ED:DD:E2:E5:A7:3F:61:92:4A
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/695C5050C27D11EEB0AE466DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ee:84:2d:69:b0:2d:a6:16:df:d7:cc:98:4e:2d:b9:ae:e4:18:
         d5:10:d1:f6:82:15:09:2f:3c:f9:9e:90:d6:12:c2:ff:39:73:
         9a:82:6c:8a:a5:8d:59:bf:cc:40:a2:a5:1b:b9:2d:40:b1:c8:
         f5:aa:cb:77:ca:f3:25:a8:34:72:63:69:0d:ba:e2:65:33:8e:
         7d:4e:fb:c6:b4:f4:28:34:84:d8:8b:c5:9a:54:e3:63:7a:2d:
         33:44:cb:87:c3:e1:78:39:42:6e:9e:89:83:77:4c:ff:87:44:
         00:73:68:44:24:d6:42:29:49:76:3b:93:4c:4b:23:53:40:ea:
         3e:22:ed:f1:be:c0:a8:05:0d:09:86:f9:ff:43:a9:ff:d7:e6:
         7d:31:39:8e:de:bf:b5:38:63:03:7f:97:6f:25:11:af:58:fe:
         50:8e:36:0b:f0:8a:23:05:bd:67:ed:9e:c2:38:d3:12:bf:90:
         cb:3b:d0:81:e9:68:a6:d8:cb:0d:c6:1b:cb:44:eb:70:75:a0:
         44:03:af:31:51:36:ee:16:36:9f:12:d7:2a:46:f0:77:ec:3a:
         27:5a:df:51:cb:fc:57:ee:89:7f:43:22:3f:ef:79:1f:2e:62:
         d9:d6:76:fd:73:f3:cd:aa:6b:86:c9:9f:29:0b:9d:fe:bc:a3:
         1f:34:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:49 2026 by rpki-client