Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/6E603522F1AB11EA9F82A23DC4F9AE02.roa
File:                     6E603522F1AB11EA9F82A23DC4F9AE02.roa (raw, json)
Hash identifier:          8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=
Subject key identifier:   D8:F4:B2:24:72:1E:1C:35:47:69:9B:B3:C2:31:C9:CF:B6:2A:E6:71
Certificate issuer:       /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial:       0870
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/6E603522F1AB11EA9F82A23DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:43:27 +0000
ROA not before:           Sat 24 Jan 2026 20:17:14 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140045
IP address blocks:        103.147.86.0/24 maxlen: 24
                          103.147.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
        Validity
            Not Before: Jan 24 20:17:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45e9e-2403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:d5:95:fe:d1:e7:21:d5:b4:c7:9b:77:74:
                    1e:cb:9c:34:cd:ba:fa:d7:02:05:9c:4e:e5:cd:6b:
                    22:37:7f:30:11:32:1f:e9:9e:8e:01:24:7c:b4:d1:
                    fc:b2:da:90:24:3f:7c:67:b0:20:5f:5f:ee:c8:2e:
                    cc:01:d4:d2:ca:cb:27:63:aa:6e:80:d5:76:63:e7:
                    85:4d:ff:02:5c:dc:9e:b9:71:3c:8f:6b:c9:eb:f1:
                    8e:ec:57:ef:ff:14:ae:17:d7:81:42:a2:0f:42:66:
                    9d:8c:01:71:a1:9a:1a:5f:c1:0e:47:63:e0:44:0d:
                    92:5c:3e:d6:b4:e2:21:9e:bb:d8:1f:96:b3:ce:0b:
                    5a:f6:0f:ca:6a:25:26:31:94:94:89:29:c3:af:01:
                    e9:55:0c:49:31:39:7a:47:2c:4d:9b:5e:6d:11:31:
                    43:95:d5:69:2d:ef:8a:5d:9b:7c:a3:60:20:8a:f8:
                    55:c7:07:27:45:c1:1c:4c:ef:b9:24:2e:8b:8c:4b:
                    85:17:d7:5f:26:5a:ed:39:48:c0:7b:e9:ce:c5:69:
                    df:b0:1c:79:96:14:bf:b4:53:31:ac:e3:25:8f:a0:
                    e7:27:ac:f3:cc:49:a7:bd:f1:fb:27:ac:95:fe:a1:
                    5a:91:b6:7d:7c:d0:87:d2:9c:57:fb:9e:8a:4a:fa:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:B2:24:72:1E:1C:35:47:69:9B:B3:C2:31:C9:CF:B6:2A:E6:71
            X509v3 Authority Key Identifier:
                keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/6E603522F1AB11EA9F82A23DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:5c:73:d0:5f:12:4f:ac:02:1e:cd:1f:49:40:ed:04:bd:
         fd:00:ef:31:ac:6e:29:81:95:1b:a3:74:cf:10:ca:ca:ea:da:
         7b:0c:9a:b6:17:8e:06:df:b6:66:da:ab:5f:d2:f7:cd:5e:85:
         28:be:94:3c:2b:79:2d:50:4f:43:54:d9:55:d9:35:cf:99:2d:
         fb:45:49:90:31:ac:ce:0e:79:2c:0c:2c:dd:d8:99:3d:07:d9:
         d1:b6:ff:07:00:ce:19:ff:f1:1b:85:5b:81:66:2b:ae:ac:bb:
         82:19:71:37:1c:70:77:ee:e4:24:0b:bd:2d:83:c3:b7:3d:8b:
         b5:83:79:0b:f8:70:bc:82:ad:56:44:5c:47:c7:a4:29:dd:8b:
         d8:58:9b:af:2b:b4:92:42:81:cf:0b:f1:00:b3:f6:98:f2:ff:
         cc:c8:2d:02:17:42:99:d0:4c:f1:76:1b:57:b8:31:eb:ca:df:
         81:13:cd:7b:1f:24:f0:28:d9:30:81:aa:fb:3b:92:1d:53:db:
         5e:03:a1:ad:69:26:e7:76:cb:e2:3d:63:76:e8:15:ee:15:18:
         4f:4e:13:d9:46:d9:59:e0:99:8b:b1:15:fb:e2:51:de:3d:60:
         ee:a1:fe:47:ce:6b:f9:03:42:78:a2:a4:08:99:ec:ff:50:e7:
         58:fc:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:29 2026 by rpki-client