Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
File:                     6445C13C2D1511F18C0F846BB3833773.roa (raw, json)
Hash identifier:          9QqpnJcWgyDf2mtA4MnObByXA5vEs6rKETFijGykNxg=
Subject key identifier:   5D:31:47:86:85:4A:ED:4A:A6:9F:8E:97:27:F8:DE:2D:28:C9:94:9B
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0209
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
Signing time:             Tue 31 Mar 2026 15:22:13 +0000
ROA not before:           Tue 31 Mar 2026 15:22:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132883
IP address blocks:        103.144.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Mar 31 15:22:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69cbe6a4-3a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:b7:0f:08:c8:49:05:d9:dd:ed:a3:7e:c8:
                    50:40:f1:61:f4:bc:80:b7:a3:5e:88:6d:38:dd:9d:
                    ce:52:2a:af:92:91:4a:bb:9f:c9:1f:17:8f:42:b4:
                    07:74:c6:57:a4:6f:d3:99:47:3c:07:78:6e:72:96:
                    a0:c8:51:93:f6:bb:7c:cd:7f:a1:95:86:b0:8d:cb:
                    35:20:98:fb:22:bc:49:dd:a0:df:6b:3a:87:6a:89:
                    2c:b7:a4:d0:ce:ad:17:db:b3:a0:d4:ae:77:3e:62:
                    61:f2:31:ce:ae:4b:8b:de:4c:c1:11:37:d4:9f:98:
                    05:fe:c9:21:99:dc:06:0e:85:e4:fa:47:39:b3:e0:
                    6f:0d:17:09:96:40:60:e7:07:7a:1a:a9:3a:5d:4f:
                    9a:4c:6e:20:4d:7b:de:65:c2:ac:e0:f0:45:18:b0:
                    15:94:c4:0b:30:50:d0:ec:3e:30:59:a5:4b:0f:9b:
                    0c:02:04:97:ec:11:80:9d:c8:cb:4d:b9:6a:46:f5:
                    ad:84:fc:58:1a:ed:aa:80:f2:bf:17:2e:ae:37:07:
                    19:a5:fc:d7:7d:02:43:26:a6:45:85:05:eb:e5:0d:
                    6d:3b:38:02:5e:1e:cf:a6:99:9a:59:d1:25:03:32:
                    04:07:2d:38:4d:e4:08:df:da:59:5b:7a:b0:0b:36:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:31:47:86:85:4A:ED:4A:A6:9F:8E:97:27:F8:DE:2D:28:C9:94:9B
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:db:e3:e6:3b:19:40:e3:96:10:13:d6:29:41:49:72:09:b6:
         9d:9d:74:04:e8:37:cb:cc:de:11:7b:73:1f:d7:9d:8e:2a:6f:
         52:be:5b:ed:8b:cf:5b:0c:60:a4:9d:87:e0:38:c0:36:15:41:
         ca:b6:35:3b:05:67:91:f8:e4:56:4c:bb:42:6f:76:df:37:85:
         61:7c:2f:61:d1:40:e0:b6:87:7b:0a:82:94:8c:f1:83:cb:96:
         00:7f:2d:f8:3f:8b:23:af:8f:da:2d:d8:9c:84:e6:1f:b4:6e:
         03:83:36:40:e7:cb:c9:a5:ea:32:50:86:e3:d0:52:c1:79:bd:
         09:a6:71:32:58:5d:db:2e:f0:95:d7:f8:f4:00:c5:02:cb:8c:
         98:d4:ab:3c:a6:88:42:64:76:36:ae:fb:ce:0f:bd:b3:51:b3:
         c7:78:2b:a6:39:05:05:ec:7f:49:48:27:6d:2d:0e:8f:a8:1f:
         59:ac:7f:74:ba:41:42:50:33:b1:dd:02:3c:75:59:65:6b:66:
         33:26:12:b9:08:f7:84:14:1d:fd:5f:01:e4:24:71:77:75:85:
         a3:e3:01:57:f1:f9:4c:0b:f0:17:80:a1:5a:60:e0:ef:0e:80:
         9e:b6:e3:19:a3:32:5d:af:22:d8:9f:4b:b7:58:51:99:1d:7c:
         45:d2:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:26 2026 by rpki-client