Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File:                     1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier:          WhXKErJLAIqR1zLHcYxgscDMvLyXfXcOfeeDlHCZXbo=
Subject key identifier:   DB:89:08:FB:E1:B7:F1:59:5D:C3:AE:28:29:18:6E:24:33:61:C0:E8
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0B76
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:45:45 +0000
ROA not before:           Sun 10 Aug 2025 19:29:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140866
IP address blocks:        103.141.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2934 (0xb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Aug 10 19:29:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a426e9-7e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:c8:9b:c3:f1:ee:7f:e7:e2:55:63:73:f8:
                    9c:5c:81:c6:98:84:7e:a5:8e:7c:7b:92:91:04:72:
                    8a:5b:4e:8b:5e:5e:fa:1a:16:1c:f1:41:43:5a:b9:
                    27:6f:d1:d0:1c:68:92:74:a7:82:d8:59:fe:b9:2b:
                    e8:d1:5d:34:80:2e:01:2f:79:00:71:fe:08:ea:06:
                    84:38:68:d4:19:d5:cd:27:c1:87:e1:02:28:70:b9:
                    ae:b1:93:3a:4a:57:45:e4:3b:31:36:4b:bb:71:76:
                    2f:87:a9:cd:54:0f:f4:2a:bc:c2:ed:1d:b0:d8:17:
                    e3:e8:11:50:a0:70:50:f0:ab:d3:14:0b:5b:15:d7:
                    e7:97:d7:27:b6:1a:b5:34:16:9b:89:fd:60:f2:2d:
                    b4:ad:e3:9b:83:2a:a8:04:2d:78:2b:32:c4:9b:92:
                    42:06:a5:4d:53:e0:d9:6f:42:e3:ae:1b:d0:0c:7c:
                    e6:0a:b3:da:15:a9:0f:65:ee:a6:d9:96:ad:eb:50:
                    ab:61:c4:a2:01:95:3f:ce:84:46:20:3a:e8:b5:97:
                    2a:86:cd:31:7b:7b:b4:0a:ea:df:66:98:19:31:d4:
                    3a:ea:98:cc:ac:3f:6a:f8:75:9f:7e:74:46:a8:76:
                    30:f8:fd:18:e1:97:c7:7e:f8:9f:28:df:8f:c6:cf:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:08:FB:E1:B7:F1:59:5D:C3:AE:28:29:18:6E:24:33:61:C0:E8
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:99:53:64:1a:8e:c4:46:98:dd:08:88:fe:2a:2b:95:da:
         32:af:b0:fc:f7:81:03:85:d1:1d:d6:d2:f1:6c:83:10:8a:31:
         8a:2e:c3:9f:34:df:ef:a4:a8:91:50:cf:e2:09:96:b8:76:e6:
         55:17:13:f6:06:d1:65:06:92:7c:e5:cd:b4:95:a0:be:10:02:
         96:c2:66:b0:8f:fe:df:d8:06:12:21:04:b3:12:a0:e0:cf:56:
         af:60:55:6a:98:83:af:df:03:e2:d7:15:46:96:33:2d:da:cc:
         76:2d:fa:58:f8:5d:c6:c2:98:d5:c4:17:b0:8b:26:24:1e:c5:
         fd:05:0c:16:d1:21:7a:e5:66:d7:d1:c3:08:07:b8:21:22:7f:
         2b:5f:a6:c6:72:29:dc:39:dd:94:4a:11:96:b9:fd:10:40:40:
         dd:50:88:30:b6:e6:fe:8b:96:25:88:6a:93:ad:6e:a7:59:96:
         bb:cd:44:e8:2d:18:7a:5c:db:5b:54:16:c5:1d:3b:5e:5c:5d:
         2f:d5:c0:61:d1:25:e9:8b:40:e8:81:ef:a2:4d:8b:a6:42:6a:
         59:b8:44:06:9d:9e:cb:2a:4c:85:09:17:f1:aa:28:da:78:7c:
         71:1c:6e:64:75:6d:d3:12:8b:6c:15:c0:31:94:83:38:31:06:
         d5:79:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:17 2026 by rpki-client