Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/C6AA9D48E5DC11EE867C6F21C4F9AE02.roa
File:                     C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (raw, json)
Hash identifier:          4YIOdgZToNd6AkQxJEZ/tpO5YcOz0+4fIKBE30sHvQQ=
Subject key identifier:   E8:B6:C0:82:CC:69:73:EF:C6:DA:EB:2C:DE:A1:52:5D:78:30:2E:6D
Certificate issuer:       /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial:       020C
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/C6AA9D48E5DC11EE867C6F21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:31:29 +0000
ROA not before:           Tue 15 Apr 2025 03:08:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139871
IP address blocks:        103.119.80.0/23 maxlen: 24
                          2400:ef20::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
                          rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
        Validity
            Not Before: Apr 15 03:08:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3eb51-304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:f9:0f:a5:07:95:39:fd:fb:ec:17:31:cb:
                    1c:e8:c7:9b:7a:33:cf:fd:c7:c9:97:43:6e:cd:82:
                    1c:8a:4f:01:56:37:21:cf:43:99:30:22:9d:9b:3b:
                    bb:51:bf:64:3b:e2:75:c0:e6:ba:5d:de:4f:8d:40:
                    95:c4:c8:28:c3:fe:23:22:a6:e1:da:14:89:0c:0c:
                    50:e1:3d:7e:0f:ec:39:67:c8:a5:49:97:1d:89:35:
                    b6:8e:b0:a6:9e:af:d1:60:05:75:26:f3:8f:67:8d:
                    92:52:a6:e6:b3:18:91:9b:22:c4:b4:a4:2c:68:6e:
                    90:00:87:72:16:34:5a:90:cb:eb:ea:31:c1:2b:d4:
                    94:0c:1b:05:98:c9:72:4f:61:e9:e6:ff:b8:2e:64:
                    8b:bd:b0:dd:fa:64:e6:31:cc:80:2f:3f:66:21:4e:
                    6d:55:fe:2d:c4:78:45:6f:4c:72:d9:08:f9:16:4b:
                    71:67:ac:d1:d9:33:39:26:bb:81:a5:d9:57:92:a9:
                    84:e7:72:8b:ec:7f:7e:a2:77:03:49:d3:0a:3f:24:
                    05:ac:7c:65:95:05:c6:21:fa:28:e2:07:00:d4:79:
                    c1:ec:3e:fa:95:7c:3c:96:73:e7:e6:3a:f2:aa:19:
                    bf:a5:42:3b:c2:78:20:10:37:3b:61:26:d1:38:92:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:C0:82:CC:69:73:EF:C6:DA:EB:2C:DE:A1:52:5D:78:30:2E:6D
            X509v3 Authority Key Identifier:
                keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/C6AA9D48E5DC11EE867C6F21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.80.0/23
                IPv6:
                  2400:ef20::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:f4:7c:ea:92:74:e9:de:bf:86:f6:98:11:3e:4c:b9:f4:
         9f:15:56:83:a6:b1:47:7a:81:9d:2a:75:6b:be:c0:a6:f2:0b:
         22:d8:9d:69:43:0a:91:66:fb:01:ad:01:b3:3d:ad:56:1e:fa:
         bd:bc:39:8c:68:7a:84:1a:cb:b5:d2:d5:1e:09:c9:82:a4:01:
         3a:de:f0:03:41:c3:b0:a0:ad:e6:60:cd:59:18:25:a2:95:8b:
         26:c0:a6:1a:dd:d7:76:e8:1a:2d:af:77:cc:a2:a7:7a:c8:4c:
         0b:0e:06:3f:d5:f9:39:93:45:26:c5:cf:6b:96:b4:c5:fe:d8:
         9f:7b:b6:3f:67:9f:86:af:ce:1a:99:19:c6:07:0c:9c:ab:a0:
         ae:58:3e:06:c3:14:29:14:2a:a7:35:d5:85:0d:22:b5:8d:86:
         9d:35:1f:d0:fb:79:b4:89:25:1b:26:76:71:45:81:1a:65:83:
         1d:0d:59:d1:fe:fd:ad:ee:4a:98:53:43:e9:85:54:ab:3d:4e:
         3a:69:70:2e:61:0e:cf:5d:cb:50:03:43:ec:11:2a:b2:79:d7:
         49:3e:d9:fc:ad:ae:ca:c3:8c:0f:ec:19:ed:1e:89:5c:c1:40:
         18:6e:41:55:d9:32:8c:a5:9b:a0:f3:2b:42:a6:20:07:80:5e:
         ec:00:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:04 2026 by rpki-client