Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
File:                     5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (raw, json)
Hash identifier:          iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=
Subject key identifier:   5C:36:80:8A:00:AE:5A:1A:A8:9D:0B:B4:34:5B:AF:8E:99:0B:87:8C
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       0176
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:55:08 +0000
ROA not before:           Thu 21 Aug 2025 02:40:29 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140607
IP address blocks:        103.189.194.0/24 maxlen: 24
                          103.189.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Aug 21 02:40:29 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48b8c-4087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:55:c1:90:f4:60:75:59:db:13:11:e1:45:
                    3f:fb:17:a4:2c:b1:34:11:52:74:dd:9e:cc:22:22:
                    21:4f:48:19:c7:2b:a5:18:6c:f8:11:44:df:41:68:
                    b0:7a:38:a9:13:52:81:c0:38:2d:df:11:c8:1d:f4:
                    8f:f8:5e:6f:97:af:63:70:8e:50:d8:91:d9:27:df:
                    cd:0d:c2:a8:fb:f3:47:02:b7:38:ca:fc:3c:7b:a0:
                    65:7b:2c:14:43:0a:68:1d:21:e0:1b:40:7c:66:57:
                    c9:50:e7:01:a7:27:20:bb:9d:e6:12:be:6a:a4:28:
                    16:04:7e:7f:f4:fa:18:16:27:c1:4a:6c:df:61:85:
                    02:3f:a3:53:38:02:6c:cb:49:29:e9:cf:ce:36:dc:
                    9f:20:dd:92:6b:b6:83:40:05:e2:6e:89:14:52:60:
                    58:7e:b3:c5:e4:c5:14:ba:72:c3:27:30:27:9c:86:
                    c7:b7:cc:65:e9:a4:2c:e4:ef:a4:40:79:ff:84:43:
                    50:ea:20:5a:1f:a6:ad:81:88:59:4b:c4:56:4e:4f:
                    df:18:68:5f:42:c9:4d:75:fd:8d:cf:6f:13:8c:b5:
                    03:7c:69:95:6f:b9:e1:e5:e4:48:8b:de:83:99:4b:
                    b0:e8:66:e4:6c:73:2b:b3:e9:bb:9c:72:45:08:36:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:36:80:8A:00:AE:5A:1A:A8:9D:0B:B4:34:5B:AF:8E:99:0B:87:8C
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:c9:ff:b9:c3:82:2f:ea:67:6e:24:70:71:aa:92:aa:95:
         3a:75:55:1e:7b:3b:9e:28:90:5c:73:96:f5:38:de:5e:68:1f:
         d5:20:0d:85:1c:e4:26:5f:fe:9a:30:60:ba:5b:65:95:f5:ce:
         f4:02:69:79:90:c4:ff:3c:28:31:af:8d:20:ca:83:8f:bc:5e:
         37:47:14:17:b8:e0:9b:c8:01:48:8d:c2:85:f7:27:5d:56:b5:
         d5:84:70:4e:22:ff:94:f4:50:46:8a:5a:2d:9f:9e:37:80:c7:
         77:c2:5c:7e:fa:fb:6a:5c:28:e1:82:5f:59:e1:0d:0a:f4:94:
         85:31:2b:a9:db:26:04:95:df:10:d5:12:c1:d5:9a:85:c4:6f:
         32:c7:10:a9:be:c1:80:c6:f6:8d:46:12:a9:b3:fb:2d:16:c4:
         d3:26:d5:e0:17:8d:0a:ab:4f:36:4f:34:23:51:42:ef:bd:3a:
         ed:49:e7:0c:6c:3d:f5:50:8d:39:33:cd:62:49:5e:05:0a:28:
         6a:e5:0c:80:46:90:08:9c:3a:57:88:42:55:8b:25:93:9a:9a:
         03:ea:46:98:b2:83:e4:75:63:23:65:97:49:94:f8:06:72:c6:
         83:fc:ec:a9:f6:cf:ae:f5:12:59:1c:94:9f:38:55:1a:80:67:
         36:16:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:27 2026 by rpki-client