Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
File:                     F6CE4EEC56F911E997D5B40AC4F9AE02.roa (raw, json)
Hash identifier:          D9Vbd5oLTjv1UtRVThtNHCYhAvomqLgl47nTBJHilWA=
Subject key identifier:   2B:D6:B3:FC:3B:E3:31:07:DC:3D:A0:8F:64:0B:DC:DC:EB:53:87:36
Certificate issuer:       /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Certificate serial:       165D
Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:49:01 +0000
ROA not before:           Wed 02 Apr 2025 17:15:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137521
IP address blocks:        103.111.79.0/24 maxlen: 24
                          103.123.84.0/24 maxlen: 24
                          2001:df3:e0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
                          rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5725 (0x165d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
        Validity
            Not Before: Apr  2 17:15:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40b8d-e33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:9a:13:bc:ad:4a:bc:eb:7e:48:3c:02:65:
                    4b:6d:ab:19:f9:fa:79:ea:07:51:2b:7f:58:e2:26:
                    96:68:2c:21:66:ab:02:69:94:ea:4a:7d:c2:cf:22:
                    7d:83:de:21:d6:10:4e:5f:a8:bb:2f:22:10:ec:d4:
                    4a:e5:40:bf:d1:2c:5b:5f:6d:c5:89:d9:59:9a:ef:
                    58:8e:c8:6f:03:62:62:95:56:b7:bd:7a:de:24:aa:
                    93:83:85:5c:2a:3b:f7:dc:62:5e:de:eb:70:e8:b0:
                    50:20:0d:f3:e6:2d:c1:ad:9f:90:c6:23:61:bc:8b:
                    25:ca:cd:2e:29:14:a8:93:6b:ef:e2:2c:21:ae:16:
                    2e:3b:4c:a6:a0:66:c3:d1:a4:5b:d7:a4:30:22:34:
                    75:60:17:ea:68:2e:1c:cc:da:8b:c7:07:b0:c1:d9:
                    e9:9e:c9:41:21:3d:59:c6:c5:34:79:dc:0d:2a:7a:
                    eb:31:8c:59:f3:d4:62:41:3c:6e:06:17:12:7a:9d:
                    71:55:99:83:75:10:20:4e:3a:47:b5:f8:62:6f:7f:
                    e2:f8:66:ca:e5:ea:b1:8d:e2:21:4c:24:aa:73:b7:
                    e4:65:f3:0e:02:51:f5:dd:2e:e7:47:35:a7:8c:4a:
                    af:1a:22:c9:8a:64:10:c5:49:79:b3:36:27:b9:e7:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D6:B3:FC:3B:E3:31:07:DC:3D:A0:8F:64:0B:DC:DC:EB:53:87:36
            X509v3 Authority Key Identifier:
                keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.79.0/24
                  103.123.84.0/24
                IPv6:
                  2001:df3:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:54:8e:e9:df:dc:33:4d:38:23:e1:f4:da:db:fb:ba:4d:3c:
         c1:fe:73:19:6e:97:92:46:cf:e9:95:d4:f4:ec:91:c0:9d:77:
         19:20:1a:4d:8e:f6:b5:c2:d7:35:26:26:c7:e1:df:82:3c:f8:
         e0:55:92:9d:72:a4:56:89:85:4f:48:5f:07:28:2f:e8:e2:af:
         c5:41:e7:a6:8a:5c:4c:a7:d0:60:78:61:62:4d:19:c5:b3:e4:
         32:f7:3d:0a:be:9c:87:77:3f:35:6e:38:d7:a3:9c:6d:49:a3:
         54:77:73:67:00:b0:0c:32:9a:c3:d5:58:3c:f4:69:71:59:89:
         54:65:fd:6b:f8:74:ac:61:dc:dc:c1:7d:ac:af:d4:6c:26:a5:
         03:b0:f9:41:ba:f3:58:6e:e0:32:0a:4e:ab:b3:c3:c9:a1:41:
         cf:a8:48:c0:7c:e7:e6:ac:0c:57:9b:5c:e5:cf:b1:a1:ee:21:
         8a:f1:c5:37:22:b7:f9:c7:41:4f:76:49:df:7d:89:fe:aa:aa:
         34:82:9c:f2:58:fa:38:d6:38:64:bd:fb:2f:bb:03:ea:4e:9b:
         ee:74:1d:31:d1:23:4d:77:75:ba:67:7f:4e:57:f6:99:02:37:
         2e:55:ee:c1:af:ad:e5:9d:9a:b7:85:3e:8f:5d:94:e0:f7:ac:
         26:36:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:28 2026 by rpki-client