Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa
File:                     746CEA6E7CD911F0942A980CC4F9AE02.roa (raw, json)
Hash identifier:          7H7LCfHEHtj+1wD17wSlFL029ZCZpCRBRuL/DnZ0gcM=
Subject key identifier:   CF:74:57:52:C5:B7:3D:0A:76:FA:61:1A:C3:31:50:20:61:6D:08:E5
Certificate issuer:       /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
Certificate serial:       64
Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:28:00 +0000
ROA not before:           Tue 19 Aug 2025 08:49:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139022
IP address blocks:        103.138.160.0/23 maxlen: 23
                          103.138.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl
                          rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
        Validity
            Not Before: Aug 19 08:49:45 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3dc70-251b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:a7:65:8f:23:91:e4:fa:f5:47:67:d4:6f:
                    bb:eb:db:ff:05:1b:57:2e:c9:51:3b:9f:f5:68:d2:
                    82:53:d4:1f:ee:23:28:4a:66:71:db:42:35:3b:e9:
                    be:b7:7e:98:b6:e6:57:0c:7b:10:b4:6a:e4:f2:54:
                    a7:5e:7b:a8:8e:bd:0a:3b:e8:13:23:ab:44:d3:1c:
                    00:f0:e4:2d:2f:5b:90:f8:9e:92:aa:ef:1a:01:01:
                    9d:a6:a3:8b:ac:70:d4:04:b1:76:13:d9:1b:7e:5f:
                    1f:f2:ba:f5:41:e0:fb:92:47:0a:eb:89:33:51:6c:
                    0a:0f:4d:b8:77:1c:54:7f:b2:da:9d:0f:da:d0:b2:
                    4b:db:99:d0:0f:16:7e:75:a0:63:d0:00:e5:8b:ca:
                    e8:3e:19:43:e3:40:fb:20:8c:0f:3e:3f:fb:16:35:
                    50:81:db:53:2a:47:39:23:69:37:49:81:c1:f6:26:
                    88:8b:e7:fe:aa:05:43:91:39:68:66:45:68:a2:95:
                    ac:1d:ac:93:fb:44:4d:ad:e6:46:f1:84:9f:89:88:
                    5a:47:b4:ab:89:9d:33:4c:67:2c:90:b1:86:27:cc:
                    30:80:de:61:d1:92:fa:e6:6d:cb:9d:af:43:c3:2b:
                    6a:c3:29:16:5d:6f:56:a0:61:e0:a9:d4:4c:36:5a:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:74:57:52:C5:B7:3D:0A:76:FA:61:1A:C3:31:50:20:61:6D:08:E5
            X509v3 Authority Key Identifier:
                keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:e0:4d:04:ee:d2:68:f5:ae:cf:6c:5d:30:4e:5f:ba:70:f4:
         5b:ae:3f:df:19:2c:e3:54:9a:b6:8c:f3:d7:9d:a6:f1:2d:c4:
         e8:9a:37:f3:a3:36:42:c0:90:28:ed:a3:5e:b3:16:d4:97:42:
         8f:29:ca:74:85:d2:a5:01:33:ba:d0:a3:5d:7c:0a:9b:1a:95:
         13:c0:78:ae:0f:65:40:d5:78:94:15:c4:11:8e:eb:58:c0:1c:
         c6:a6:54:7d:15:78:f5:10:c3:d0:47:62:57:31:01:78:d8:93:
         f1:59:0e:55:08:74:fd:02:9c:d3:91:e6:00:38:d7:e8:83:33:
         f6:3e:b7:b5:a3:71:cf:cc:af:2e:04:7a:9e:b4:66:33:a7:b2:
         bf:14:2c:bb:00:da:da:f4:c5:1d:c5:06:91:59:75:9d:f2:29:
         0e:87:65:b5:a3:cc:a8:41:a1:ce:8f:92:2b:8a:bb:3e:4d:5f:
         f5:4c:80:0d:e8:4a:38:06:8c:f8:f0:a2:f3:27:d9:13:0e:ed:
         5b:ca:87:c6:95:8d:49:cc:f3:55:3d:8f:e4:66:6c:df:d0:54:
         34:14:b7:c7:79:b7:10:e2:bb:b6:22:13:14:5c:57:e1:b9:ed:
         08:46:ed:85:88:5a:2b:86:8f:4d:cc:2e:5c:f2:8b:c4:ea:b4:
         fe:b9:11:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:22 2026 by rpki-client