Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1614034C93C711EDB3D8A867C4F9AE02.roa
File:                     1614034C93C711EDB3D8A867C4F9AE02.roa (raw, json)
Hash identifier:          NrQQkVXLMpdvNf6nXRcerpadEJ5fwZiI58MW+BR6ujg=
Subject key identifier:   1B:78:B2:23:CC:94:8E:9B:79:A2:54:39:C3:00:56:7B:EC:52:7C:A4
Certificate issuer:       /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial:       065B
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1614034C93C711EDB3D8A867C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:49:12 +0000
ROA not before:           Thu 10 Jul 2025 23:35:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142426
IP address blocks:        103.168.42.0/24 maxlen: 24
                          103.168.43.0/24 maxlen: 24
                          2001:df6:cd80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
        Validity
            Not Before: Jul 10 23:35:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46e08-00ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:8d:3b:27:0a:11:a3:03:30:c4:a2:ff:86:
                    59:ac:1a:8c:f3:a8:82:63:83:0a:58:2d:db:24:fb:
                    31:6c:6a:b5:12:e8:7f:de:a3:5c:aa:05:94:21:b1:
                    d2:4f:20:a2:61:ab:0f:24:c9:db:eb:1e:cd:ff:42:
                    42:b5:ae:18:a2:7c:fb:b6:6a:e4:ad:13:2f:ca:f7:
                    c0:21:c3:6d:7b:bc:01:ef:1b:62:5b:97:ea:14:9b:
                    18:3b:b9:72:a8:59:5a:99:06:b8:d8:ae:bc:9c:d3:
                    dc:76:7b:5b:64:da:8f:58:a7:f8:c1:cb:38:b4:ef:
                    f9:33:a5:30:f5:1f:56:fd:4f:7a:cd:c2:fd:11:d4:
                    14:e7:91:1b:d5:ee:77:e9:49:72:8a:c4:42:a1:bb:
                    37:4c:8e:c1:55:4e:f7:26:44:4d:09:cd:89:79:e4:
                    fd:2d:75:09:27:84:73:fc:15:be:55:eb:24:42:75:
                    79:ab:12:45:19:89:fb:01:5f:06:ec:cb:71:30:f3:
                    91:fc:21:fe:58:6f:5f:5e:07:c0:48:bd:8e:d1:db:
                    38:3f:b9:98:90:a6:45:c5:d2:87:fe:e5:8e:81:75:
                    c9:0e:a7:06:93:fb:94:ad:fb:ce:26:8a:a3:0f:eb:
                    80:26:3a:1f:b7:3b:26:da:be:7a:90:a4:7b:b3:98:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:B2:23:CC:94:8E:9B:79:A2:54:39:C3:00:56:7B:EC:52:7C:A4
            X509v3 Authority Key Identifier:
                keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1614034C93C711EDB3D8A867C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.42.0/23
                IPv6:
                  2001:df6:cd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:28:65:e6:75:01:79:d4:3e:0f:a1:5a:84:24:52:0a:21:
         e9:5c:72:1f:f8:fe:e9:09:22:a0:02:4a:2b:88:c8:b9:8f:50:
         a3:8e:a9:29:4f:45:9d:5d:33:b8:ca:a1:1e:d4:93:83:e9:e4:
         d8:a0:7a:e2:0b:9e:bb:5b:79:cf:8f:47:0a:47:8e:43:64:20:
         79:f9:b0:b5:95:44:50:57:7f:f7:de:c7:c8:c7:05:56:6b:06:
         25:45:31:3a:ff:36:76:f7:75:38:77:e9:21:ef:a2:67:89:9d:
         c4:53:fb:21:9f:c2:80:3e:de:b2:df:26:61:07:55:a9:fc:25:
         b9:03:f5:66:4b:2c:b8:5d:ab:17:42:bc:a2:3c:f8:df:5d:3f:
         d1:3d:55:c9:19:00:8d:1a:5a:97:ca:fe:90:43:fa:5c:04:0f:
         d0:1a:a3:a7:e2:ed:d5:3c:eb:18:f5:bf:1f:53:c9:43:88:da:
         b4:5d:3f:89:df:7f:0d:6f:12:51:15:e0:5c:63:1d:8c:e8:96:
         0f:85:38:b1:ef:4c:34:03:bd:72:a8:69:c5:80:ff:fc:cb:68:
         08:10:52:8e:45:74:8e:e1:79:2d:40:4f:3d:68:8e:9b:68:0a:
         8f:06:e3:27:00:fc:92:4e:a8:16:99:11:80:aa:dd:3b:29:d7:
         cd:79:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:03 2026 by rpki-client