Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/0B5742C234AD11F1851A1E75B8833773.roa
File:                     0B5742C234AD11F1851A1E75B8833773.roa (raw, json)
Hash identifier:          mrkKKc0cU8SDUFTCBDWltPPNG2EiLfGGhf70i5GAtLs=
Subject key identifier:   5A:37:9E:6D:FC:2D:B4:29:80:CF:9A:97:7D:20:2B:8E:22:A6:40:1E
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       0472
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/0B5742C234AD11F1851A1E75B8833773.roa
Signing time:             Fri 10 Apr 2026 09:04:52 +0000
ROA not before:           Fri 10 Apr 2026 09:04:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134696
IP address blocks:        103.142.190.0/23 maxlen: 23
                          103.142.190.0/24 maxlen: 24
                          103.142.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Apr 10 09:04:52 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69d8bd34-415b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:54:a9:2c:56:57:62:6d:e2:35:84:a7:5f:
                    e3:d0:04:56:d8:64:7b:13:87:d3:f8:24:b4:5f:7a:
                    f6:78:22:76:9e:b4:9e:39:bb:22:bc:fc:86:d4:12:
                    b0:1b:ae:58:2e:bb:43:7a:4c:d6:81:2d:56:9a:61:
                    38:d1:9e:54:f7:c2:74:91:04:96:a7:91:85:4e:e6:
                    b2:19:64:f9:8b:f4:5c:ad:a6:85:c1:1a:09:65:ae:
                    12:20:36:32:41:64:53:4e:51:de:6a:dd:0c:97:1c:
                    7c:e4:13:21:c1:54:ea:51:a4:79:10:a2:1c:8b:eb:
                    eb:89:82:6f:4e:e8:dc:11:f1:d9:74:d7:79:7c:76:
                    b6:b1:c3:c9:6e:a9:db:84:f9:5e:c5:43:db:a2:5b:
                    62:80:ab:d8:b5:14:50:a9:67:47:2f:4d:aa:a6:90:
                    c5:85:de:b4:e3:5f:6c:0a:e9:c3:91:56:ac:6d:e0:
                    fc:88:49:27:e7:18:39:82:93:23:13:10:dd:2e:d4:
                    8d:c1:6b:d1:97:cc:ba:b6:97:8e:c0:bd:ba:a6:d0:
                    0e:6f:20:2c:f3:5a:f0:ae:dc:8b:97:79:08:5f:d2:
                    41:9c:0e:b0:ae:50:5f:4d:27:11:fa:ac:15:c9:1c:
                    1b:8b:b7:f4:45:58:cf:f3:a1:38:e5:37:65:b2:b7:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:9E:6D:FC:2D:B4:29:80:CF:9A:97:7D:20:2B:8E:22:A6:40:1E
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/0B5742C234AD11F1851A1E75B8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:29:54:a1:44:a5:fa:49:91:ba:c6:c9:b2:14:db:66:7e:
         16:80:6d:24:57:f4:7f:41:09:74:98:0c:a1:65:75:2f:e7:85:
         8d:0f:4f:66:82:d7:c4:f2:08:37:ba:d9:11:91:c9:ed:2f:c2:
         ef:6d:ef:ee:20:24:fa:92:f2:af:a7:04:64:20:10:34:f8:50:
         82:32:34:f3:44:32:8d:48:1a:5a:7c:00:b5:e4:c6:2a:59:b8:
         f2:59:69:29:76:88:83:2d:25:de:18:76:7d:f3:9d:26:84:28:
         7e:f5:e9:c7:1c:72:20:f8:bd:27:58:8f:ca:3c:81:54:18:2a:
         85:85:41:c2:87:3d:12:51:ec:ef:51:4b:91:0b:08:df:fe:b1:
         b3:8a:e9:ad:48:a6:aa:f6:6b:1c:02:f3:6f:dd:41:b3:e3:0f:
         ad:52:e7:ad:44:4d:d6:28:1a:f1:98:43:14:be:aa:1a:a5:a3:
         1b:f0:0c:e2:9d:03:57:d8:f2:d7:d7:69:87:db:e9:be:af:7a:
         21:3d:4e:cb:dc:ce:2c:04:18:23:9a:1d:62:c5:b0:b1:59:f5:
         36:ac:81:74:4b:7c:eb:a4:f7:16:6f:a3:2e:81:b7:15:ec:17:
         e4:83:5c:80:81:88:6e:28:01:a4:a0:5a:65:53:8a:bb:57:d4:
         fd:9b:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:02 2026 by rpki-client