Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/6896A446318411F0BBC4F91DC4F9AE02.roa
File:                     6896A446318411F0BBC4F91DC4F9AE02.roa (raw, json)
Hash identifier:          MfzN1k54/wkCiAendoymZC3ZEWqOCUIUy5Y1tmrtH+A=
Subject key identifier:   E5:C0:EE:63:D3:79:68:BF:40:19:90:D6:82:51:A7:DA:E8:40:41:13
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       D9
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/6896A446318411F0BBC4F91DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:20:05 +0000
ROA not before:           Thu 15 May 2025 12:02:01 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     36652
IP address blocks:        103.186.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: May 15 12:02:01 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5aaa5-c1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:a6:49:ea:3c:f6:10:44:c2:49:59:d5:f8:
                    1c:fd:d7:02:d3:47:f2:19:7e:6a:04:72:92:88:bf:
                    94:61:d5:32:0e:23:62:9a:b9:68:06:d0:a2:ae:2d:
                    2a:91:e0:b3:49:24:e9:7d:a2:b5:87:af:51:e9:de:
                    0e:4f:39:fd:f5:8e:13:fe:0c:ad:3a:14:e4:41:62:
                    07:47:35:cb:e6:0e:b7:09:55:5a:b2:cd:9c:96:cc:
                    97:58:ff:36:15:a8:19:04:ee:de:35:61:2e:ef:67:
                    11:d7:60:5a:36:94:01:a5:46:d4:50:b7:9e:59:02:
                    a2:15:7e:75:43:3e:d9:71:a4:80:67:25:93:72:36:
                    7f:be:39:04:23:26:fc:c7:79:d8:94:a6:0c:3a:78:
                    16:ab:69:2f:57:f6:14:e9:c5:6e:47:94:47:53:61:
                    43:66:be:11:ee:87:cd:c0:dc:3f:e2:18:e9:32:4c:
                    44:ac:fc:9b:60:3f:52:2e:7b:73:79:76:71:0e:df:
                    82:88:32:53:5c:d0:c4:57:16:63:00:2a:b2:90:ec:
                    14:71:9f:06:73:f6:d3:65:62:17:10:7e:3e:54:2a:
                    74:19:79:aa:0e:1f:96:14:ff:79:f8:40:f0:93:54:
                    ab:58:56:cf:e5:2e:c1:a7:c9:89:19:62:01:25:64:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:EE:63:D3:79:68:BF:40:19:90:D6:82:51:A7:DA:E8:40:41:13
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/6896A446318411F0BBC4F91DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:9f:c8:5d:90:93:57:68:92:dd:85:8a:60:5c:cd:3b:54:
         cf:bd:0c:12:27:07:5d:9c:30:4d:4c:31:95:d9:cc:51:b5:74:
         f6:fa:a1:09:48:a1:ef:c4:f5:fd:f5:f6:97:74:7b:60:f7:aa:
         20:8c:47:ac:e3:a3:2f:7c:85:c6:9d:0d:7a:fa:45:57:57:44:
         c6:bb:70:76:3d:cb:b7:4f:8a:96:e1:1d:ad:af:38:02:c5:57:
         40:72:94:32:3e:96:f3:f1:75:64:34:ca:05:85:29:11:09:28:
         6d:93:9b:77:c0:af:09:3a:e6:6a:bd:78:fa:92:5e:3d:6f:32:
         0c:c5:86:cd:b6:5d:2f:51:3a:34:f8:10:65:06:1e:89:58:54:
         41:b2:48:fd:af:aa:9a:0f:fe:f3:76:96:80:83:ac:bd:24:61:
         27:3e:4d:54:fa:02:3c:d8:04:08:29:f8:c7:ff:6d:8a:ca:1a:
         e8:53:6f:fb:ed:91:3f:4f:4b:a6:2c:cf:8f:49:39:82:7b:1d:
         d1:82:cf:cb:cd:ad:06:98:d1:44:78:aa:8f:70:52:a4:fb:47:
         39:00:0a:ae:ad:e4:b7:ff:e5:ea:25:ce:ab:20:e9:ab:c3:ef:
         2a:d5:6d:28:73:37:7f:47:af:84:81:b3:f4:a8:f0:f5:21:84:
         38:ec:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:01 2026 by rpki-client