Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa
File:                     3DA5441A070611F1ACA42273223D8C67.roa (raw, json)
Hash identifier:          n+Kx5YLJVSW5gosUnIscCwbaC3lMeiZQn4J/zNSLjd4=
Subject key identifier:   A2:0F:7D:EF:A3:EE:89:98:20:3F:FA:1F:86:06:59:AF:F7:BC:DF:D6
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       01C5
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa
Signing time:             Sun 01 Mar 2026 16:53:36 +0000
ROA not before:           Wed 11 Feb 2026 04:58:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141457
IP address blocks:        103.159.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Feb 11 04:58:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46f10-f61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:dd:33:41:18:a9:c9:30:c6:0c:44:38:0e:
                    bd:67:f3:f8:af:2a:0e:0b:bf:02:69:81:ab:81:0a:
                    e3:cd:1b:94:b6:a4:4c:ac:77:78:9a:d9:a5:b0:b8:
                    7c:4c:04:f2:cd:ed:a6:a6:e1:13:95:4d:a8:52:f4:
                    15:a5:f1:f5:2e:3f:d4:b5:c7:8b:06:08:84:10:28:
                    21:17:27:3c:53:97:98:8c:fc:15:93:09:c1:cb:fe:
                    6f:b0:cb:ae:18:d4:08:2c:bd:a7:81:0b:c9:1c:a4:
                    51:77:ed:75:74:25:f2:71:06:6b:90:f0:3b:f4:ef:
                    c4:7f:49:b9:7d:84:19:61:70:95:3f:ec:46:ad:42:
                    df:cb:4e:2d:29:22:5d:28:b9:ba:50:8d:e8:dd:fe:
                    11:de:5f:40:6d:61:a1:ac:5f:73:16:11:3f:eb:b6:
                    f6:3e:49:af:63:77:53:0c:d3:76:c0:ca:5f:1b:75:
                    94:a8:e0:25:7b:61:e9:31:1a:af:b8:0e:cf:13:6c:
                    ad:3c:28:20:24:72:15:d3:53:05:0e:a1:5c:d1:df:
                    f9:8c:9a:32:0c:cd:74:b1:26:b8:00:7b:23:7c:24:
                    c1:fa:e1:e6:23:59:d8:94:11:dc:ea:b2:22:21:58:
                    25:38:89:da:5c:89:91:c5:23:61:91:c0:f2:e1:28:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0F:7D:EF:A3:EE:89:98:20:3F:FA:1F:86:06:59:AF:F7:BC:DF:D6
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:00:f4:13:c1:53:87:1d:0f:df:b3:f5:3a:09:26:e0:3d:02:
         e5:9c:e9:fa:61:ea:e8:45:1e:a4:5c:04:47:31:d7:36:94:a6:
         2f:80:c8:13:29:32:1c:d9:79:a1:0b:b0:0e:32:f8:72:bf:3b:
         dd:8e:a2:60:4f:bc:59:07:84:d3:2b:75:3b:dd:64:63:f0:c0:
         88:3a:59:ab:a0:fd:8e:5b:40:67:5c:49:25:d3:0a:fd:44:c9:
         33:24:cc:fa:b0:5b:39:65:e0:c1:d0:bb:b8:c8:ed:06:5c:bb:
         cc:f2:f7:13:76:60:83:21:b3:3e:67:0a:8e:2c:83:88:82:db:
         d2:f9:57:28:63:f8:4f:7c:57:93:a5:fd:ba:ff:4f:7b:dc:49:
         bd:22:be:66:af:6d:08:4c:a3:39:85:12:51:63:87:e2:bf:a8:
         6e:bb:de:84:50:d0:7b:89:ce:3c:e4:34:fe:75:36:15:a1:82:
         a2:b3:e8:d0:c5:75:ff:03:ff:a0:ac:9d:dc:2b:b2:5f:81:6d:
         ed:fb:96:41:3c:e5:6e:71:59:89:27:09:b8:53:66:73:28:75:
         a5:11:55:79:fd:6e:03:4b:0f:aa:93:e8:fb:4e:3f:f0:ad:e6:
         0f:a4:55:11:2e:93:d4:f5:23:d2:f5:b4:cc:9a:78:aa:59:3a:
         be:51:9d:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My
RUYwNkU5M0IwHhcNMjYwMjExMDQ1ODAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmYxMC1mNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV7dM0EYqckwxgxEOA69Z/P4ryoOC78CaYGrgQrjzRuUtqRMrHd4mtmlsLh8
TATyze2mpuETlU2oUvQVpfH1Lj/UtceLBgiEECghFyc8U5eYjPwVkwnBy/5vsMuu
GNQILL2ngQvJHKRRd+11dCXycQZrkPA79O/Ef0m5fYQZYXCVP+xGrULfy04tKSJd
KLm6UI3o3f4R3l9AbWGhrF9zFhE/67b2PkmvY3dTDNN2wMpfG3WUqOAle2HpMRqv
uA7PE2ytPCggJHIV01MFDqFc0d/5jJoyDM10sSa4AHsjfCTB+uHmI1nYlBHc6rIi
IVglOInaXImRxSNhkcDy4Shp+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKIPfe+j
7omYID/6H4YGWa/3vN/WMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC
ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjlFOUQvNTI4MjhCMkE3Qjg3MTFFRUE4NDBGMjFFQzRGOUFFMDIvM0RBNTQ0MUEw
NzA2MTFGMUFDQTQyMjczMjIzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5/sMA0GCSqGSIb3DQEBCwUAA4IBAQCZAPQTwVOHHQ/fs/U6CSbg
PQLlnOn6YeroRR6kXARHMdc2lKYvgMgTKTIc2XmhC7AOMvhyvzvdjqJgT7xZB4TT
K3U73WRj8MCIOlmroP2OW0BnXEkl0wr9RMkzJMz6sFs5ZeDB0Lu4yO0GXLvM8vcT
dmCDIbM+ZwqOLIOIgtvS+VcoY/hPfFeTpf26/0973Em9Ir5mr20ITKM5hRJRY4fi
v6huu96EUNB7ic485DT+dTYVoYKis+jQxXX/A/+grJ3cK7JfgW3t+5ZBPOVucVmJ
Jwm4U2ZzKHWlEVV5/W4DSw+qk+j7Tj/wreYPpFURLpPU9SPS9bTMmniqWTq+UZ3v
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:02 2026 by rpki-client