Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa
File:                     8880996075DC11EA84E0A94CC4F9AE02.roa (raw, json)
Hash identifier:          39ZisHTbo+nHiSIEXbaCF/1qoIat8w/3CiQIRNmhIe0=
Subject key identifier:   BC:15:CC:09:F7:53:44:2D:63:18:B8:B3:A9:48:30:2A:51:96:CC:C6
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0AA5
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa
Signing time:             Thu 26 Mar 2026 19:25:29 +0000
ROA not before:           Thu 26 Mar 2026 19:25:29 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140090
IP address blocks:        103.148.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Mar 26 19:25:29 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c58829-8ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:da:d6:51:69:2b:9f:60:3e:6c:f5:d4:c1:
                    b8:65:25:63:fd:dc:58:dd:94:89:38:2f:f8:0a:0f:
                    1f:40:88:15:80:67:78:80:e3:90:1b:a4:55:12:9e:
                    93:fa:da:e2:d2:77:75:56:88:34:f1:cc:36:4f:f4:
                    1b:3b:d9:18:b7:30:56:f1:7b:ac:9b:a8:a8:b7:9c:
                    f9:5a:66:e3:1b:d9:37:10:3c:15:49:81:cf:d3:ab:
                    49:43:76:98:6e:89:66:96:dc:ea:b2:6b:6a:06:2e:
                    53:46:bf:ad:27:4e:0a:46:1b:9d:b1:01:07:f8:bc:
                    13:18:09:43:eb:bd:f0:16:7a:f9:1d:a3:65:ae:f6:
                    77:59:63:18:a3:aa:1a:1f:11:2b:df:2a:97:a6:df:
                    96:ae:8b:00:82:e0:07:bb:a4:d0:e0:37:cc:26:c4:
                    0c:22:34:c4:a7:31:c0:6d:35:c9:0e:51:46:1e:2c:
                    a5:b3:d0:53:95:ea:ec:dc:71:3e:65:c1:eb:f4:52:
                    b0:eb:f7:75:9c:7a:7a:2b:4e:28:80:30:ea:41:a1:
                    45:c9:87:5b:8f:f9:5d:92:ef:31:18:82:f2:17:ef:
                    6e:fb:7d:fd:b6:9e:05:2c:32:34:49:e2:7b:79:51:
                    03:15:e0:cd:43:84:1d:91:d0:77:d0:09:01:be:1b:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:15:CC:09:F7:53:44:2D:63:18:B8:B3:A9:48:30:2A:51:96:CC:C6
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:94:1d:2c:39:14:be:7d:0c:ce:9b:15:bd:b4:7f:4a:17:2e:
         1d:20:70:46:8d:d3:c5:89:82:11:09:28:1b:61:07:9c:7d:43:
         4f:81:29:cc:42:7d:f8:3d:c1:b9:1c:31:7b:58:ee:03:bf:71:
         25:27:ca:e4:f7:74:e7:5a:9a:58:91:f1:56:9e:6d:7c:86:73:
         48:d6:39:48:65:58:ef:f6:3d:80:70:83:a1:43:44:b9:9a:05:
         de:0a:a2:7c:ab:c2:b7:08:6a:63:50:5c:55:27:98:a5:a0:5f:
         b6:bb:c3:57:f0:63:a4:39:5a:d7:07:21:d4:38:da:63:74:30:
         0f:12:c6:b5:dd:5d:0f:cd:89:95:2b:f1:ce:23:40:38:71:e1:
         42:c1:90:93:a3:cd:d8:b2:00:ec:91:d4:6a:b0:70:ab:4d:52:
         73:b5:05:34:b4:52:a9:14:5e:b8:d6:59:72:c2:1b:c8:4a:e8:
         ef:67:b8:26:97:e4:fb:fc:14:16:c1:ed:cf:a0:d1:b8:6e:14:
         99:a5:1c:b5:f0:f3:25:ca:5b:48:16:a2:46:50:1f:65:db:40:
         dc:e2:bd:1a:4f:52:a9:b8:58:e8:f2:92:f0:64:8e:fa:03:1e:
         96:16:5e:bb:f3:fe:f0:15:96:dd:3a:1c:c5:bc:c8:8f:45:73:
         7b:41:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:42 2026 by rpki-client