Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa
File:                     F15E709A880611ECAF18133AC4F9AE02.roa (raw, json)
Hash identifier:          cuuKGOgaAIzziFbUu4MYdKy1H8GnS5IRo7Bx5dFMRl0=
Subject key identifier:   02:CA:15:21:79:D4:E8:D7:CF:AE:4A:F7:5E:C5:96:D4:36:09:47:FD
Certificate issuer:       /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial:       0463
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:00:55 +0000
ROA not before:           Thu 07 Aug 2025 01:07:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136903
IP address blocks:        103.98.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
        Validity
            Not Before: Aug  7 01:07:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40e56-9ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:e6:23:3c:08:f4:f3:cb:94:30:72:16:c6:
                    01:1f:a0:0d:c1:78:13:dd:99:c9:ce:c3:b5:15:37:
                    a8:20:6e:c4:df:7a:b0:41:ba:69:c9:2a:4b:2e:d2:
                    4b:da:81:48:bd:8f:f5:66:c4:9f:86:87:62:5d:a2:
                    a2:4d:dd:ee:7a:36:f3:20:bb:7e:b7:40:2a:e5:86:
                    9a:7a:c7:ff:9d:64:02:4b:2f:3b:4d:fb:4d:85:8f:
                    a0:6d:32:ef:71:65:f4:cf:2d:57:f2:19:c9:fd:52:
                    16:4a:cc:52:f3:d0:da:63:9a:5f:bd:6f:73:85:70:
                    ff:3c:a8:6d:85:7c:0b:ad:d8:2b:02:87:1f:49:bf:
                    58:30:08:be:c8:3a:9e:51:cb:83:37:94:8c:ad:6a:
                    5c:51:11:b5:f2:dc:5a:93:e5:01:5d:f8:31:56:46:
                    41:25:1e:08:6c:87:8b:a4:f1:11:c3:43:77:8f:dd:
                    71:29:da:fe:97:09:98:42:bd:f0:35:a6:7c:10:38:
                    6c:6b:d5:7c:01:e2:3c:22:46:be:df:21:3c:23:b2:
                    e9:74:d0:05:c5:83:4c:30:a8:db:e2:1e:53:90:f4:
                    5b:70:60:c3:be:b7:d2:7e:a8:b1:da:ec:8c:1e:71:
                    b0:da:a9:d7:a8:bb:c3:17:33:b4:8d:07:de:57:a1:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:15:21:79:D4:E8:D7:CF:AE:4A:F7:5E:C5:96:D4:36:09:47:FD
            X509v3 Authority Key Identifier:
                keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:5c:ca:cf:56:54:13:a7:47:e5:a1:cc:fc:b2:6d:eb:40:
         76:59:63:f9:4d:44:9a:08:34:12:65:8b:69:64:5d:12:c5:04:
         76:8b:d1:c0:ee:f4:65:bb:69:cc:10:86:86:c8:85:8d:82:83:
         2d:27:6e:0c:ef:48:a0:73:a4:d3:6f:d0:d6:30:37:6d:28:df:
         23:16:5b:6d:b2:9d:45:4c:1a:de:63:ad:a4:e8:d1:ce:fc:b8:
         d7:01:cb:a9:8b:94:36:68:76:ad:77:21:11:4c:1e:8a:e4:e0:
         c6:b6:8f:4e:fa:61:11:c6:94:9e:dc:94:37:de:45:f5:bd:e7:
         55:5e:ee:3c:26:c5:72:3d:b5:8a:09:6b:7f:0d:74:c7:31:2d:
         7a:5f:43:15:38:e3:2a:c1:7c:58:9b:3d:ec:1b:c6:1c:ac:a7:
         5b:1d:4e:b2:42:07:fb:94:0d:76:11:a8:6c:ea:8f:62:a7:dc:
         98:f6:32:71:17:22:35:75:39:56:cb:4c:d0:e4:cd:f8:2b:da:
         f9:2c:bb:8d:a0:e0:2f:8d:94:cf:c4:58:27:df:55:e6:5e:68:
         a6:70:98:41:f1:92:c6:06:4f:e4:d4:7b:ba:da:62:e6:2c:59:
         56:12:24:69:fa:07:b0:05:ec:ea:50:49:12:57:30:65:9e:3c:
         01:78:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:20 2026 by rpki-client