Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
File:                     0853E998C45711F080167D38C4F9AE02.roa (raw, json)
Hash identifier:          q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=
Subject key identifier:   4A:BA:2D:E1:CC:BC:50:F9:9A:B3:82:8E:A9:8D:8C:18:54:28:A4:2E
Certificate issuer:       /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial:       3C
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:03:30 +0000
ROA not before:           Tue 18 Nov 2025 08:17:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.139.114.0/24 maxlen: 24
                          103.139.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
        Validity
            Not Before: Nov 18 08:17:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3d6b2-b056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:50:1b:d0:21:87:f8:ac:a6:5e:61:7d:7b:
                    39:d0:c3:ce:ea:c8:8a:8f:f1:ef:96:e6:ca:c9:c8:
                    42:46:db:d6:75:d7:61:0f:c1:f4:0b:ed:01:0f:90:
                    62:fc:e3:f7:31:84:65:ec:a6:9b:f8:b9:af:9b:19:
                    8f:85:4c:1a:88:eb:25:97:ef:7c:e5:5b:a8:46:1e:
                    ee:ef:7e:60:93:f6:87:70:da:af:32:58:04:de:95:
                    bd:74:21:c6:0f:17:9d:d3:56:94:ba:19:b1:c0:48:
                    b7:f5:6d:a4:9a:15:52:4d:67:0e:e2:4c:61:d5:d8:
                    5f:d1:0e:ee:64:71:51:51:f0:1e:a0:12:d3:68:68:
                    80:e0:23:86:4a:d5:57:02:e4:c0:e8:04:da:59:55:
                    cc:0f:d4:0b:e0:40:46:0b:e8:b1:a3:0f:44:7e:f6:
                    d0:e7:0c:34:c9:42:bf:79:07:14:2a:14:04:32:9f:
                    c5:7b:07:fa:6f:62:44:69:54:c8:06:91:5a:53:42:
                    1b:05:af:77:77:cb:20:6e:0f:fb:cf:00:49:3b:f5:
                    43:1d:07:9d:ce:15:06:81:5f:b0:50:7b:84:b7:21:
                    6d:21:f7:8f:bf:8d:e8:cd:ba:fd:3f:6c:a4:67:bc:
                    07:16:f3:16:32:5c:e0:59:00:c9:92:17:0e:f1:c7:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BA:2D:E1:CC:BC:50:F9:9A:B3:82:8E:A9:8D:8C:18:54:28:A4:2E
            X509v3 Authority Key Identifier:
                keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:08:3c:57:06:4d:61:1e:43:ef:1d:34:74:d4:c0:6b:6b:c7:
         67:36:57:cb:99:80:bb:df:85:75:33:57:55:89:bc:7c:01:05:
         62:40:38:e3:03:f4:68:63:05:55:9b:5f:95:d6:4a:f5:2a:60:
         d4:68:92:74:56:3c:0a:06:d4:4c:76:92:bf:38:98:f6:ed:49:
         e8:03:a9:2c:c2:b4:e6:4e:aa:7c:f1:37:ee:54:0c:40:3c:4d:
         9f:30:5d:32:a2:85:b1:84:f8:d1:3a:01:87:3c:93:48:f3:c9:
         ee:d8:01:ac:07:d1:94:70:07:f0:00:bd:d0:df:2f:d1:d8:e8:
         e8:ab:a6:c1:58:e9:88:3c:5d:86:d7:c7:44:51:43:cb:46:83:
         09:fb:81:99:f8:c1:38:20:df:0f:88:be:e6:5f:b1:95:e1:5a:
         2b:52:3a:a3:71:f5:f7:a3:31:bd:ac:c8:69:00:78:ee:ac:c6:
         cc:24:6c:22:44:43:e3:6c:99:02:40:e1:1b:43:5a:89:bc:ef:
         1a:ab:56:1b:2e:85:7c:00:df:b0:cf:56:e2:ce:dc:9e:ca:2d:
         c5:d3:97:5c:ab:bb:16:9a:29:6f:68:2b:be:8c:60:70:0c:3e:
         a5:33:35:c8:87:8b:b2:7e:8b:1f:37:fb:97:16:29:10:23:0b:
         4b:fc:ee:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:54 2026 by rpki-client