Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa
File:                     37B8851C654F11EFACFE1271C4F9AE02.roa (raw, json)
Hash identifier:          vLy3TaKLP7LLA6i+HP9632XV9tszUWOfXY6uMznRKRE=
Subject key identifier:   64:7B:26:AF:79:16:52:2E:10:1D:81:00:69:4A:2C:3D:BA:9B:5F:A5
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       295D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:55 +0000
ROA not before:           Sat 26 Jul 2025 15:54:03 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14315
IP address blocks:        103.196.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10589 (0x295d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:03 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f03-d341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:42:71:d3:45:60:c4:d8:46:fa:1e:60:f4:
                    f2:fd:11:d6:22:9b:27:a1:35:fb:a8:31:de:85:29:
                    77:d1:a7:70:40:19:41:e4:2c:59:a3:4d:48:36:8e:
                    6c:ff:20:48:ef:6f:d9:cf:28:1e:0d:1d:b2:07:d7:
                    69:a9:8d:91:fc:32:10:af:fe:b2:e5:4b:68:7f:b9:
                    2b:31:cc:5d:2c:fc:8f:d1:90:74:2e:5c:ae:53:a6:
                    39:40:03:3d:26:fb:81:e5:07:8b:97:be:0b:f5:50:
                    66:20:51:d6:a5:52:e1:64:08:10:6f:91:f1:ce:13:
                    e8:67:a4:16:b1:56:c5:05:31:78:cb:7e:3c:8f:24:
                    3e:24:67:50:72:26:39:2c:f7:4e:29:f6:90:1d:b3:
                    41:ae:e2:1e:e8:b8:37:05:08:69:ef:73:58:8a:06:
                    be:ce:67:ec:48:80:68:44:e2:97:b8:c5:03:cf:f9:
                    2f:b8:46:62:5a:46:ad:89:12:df:60:36:a5:f4:9d:
                    57:a2:ff:09:3a:4f:3d:9c:16:6e:b0:e5:14:8a:55:
                    11:17:63:ee:bb:8a:b4:d1:d5:a3:0c:c7:cb:81:45:
                    9c:b4:b5:45:c0:c3:e2:71:52:18:ff:0f:21:2b:e1:
                    ad:26:98:ae:f5:19:db:a8:c9:a2:23:e1:6b:d9:1f:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:26:AF:79:16:52:2E:10:1D:81:00:69:4A:2C:3D:BA:9B:5F:A5
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/37B8851C654F11EFACFE1271C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:77:59:7d:e5:76:23:cf:bf:48:a6:29:ed:71:9b:64:65:92:
         ed:2c:51:94:12:ab:b1:ac:30:e6:6e:4f:c1:2e:5e:ab:51:ab:
         57:a7:b7:37:c9:e5:37:89:d2:7d:37:9c:00:e9:c2:9e:44:72:
         3d:a8:c3:b7:38:2a:8f:b4:2b:1b:a2:e2:2a:00:7b:9b:3f:bd:
         cc:b6:f3:98:28:c0:47:71:7e:11:b4:1a:6b:6d:9f:2d:67:45:
         26:b9:3b:8b:39:e5:40:ca:bb:ed:4f:d1:60:a9:20:c8:99:a4:
         3d:39:d8:87:08:11:5a:d6:9f:b2:32:00:5d:31:0b:6d:2c:e8:
         7d:6c:01:aa:64:ec:4a:e5:64:e8:31:78:1d:59:8a:bd:3b:be:
         b6:2e:7b:ef:9d:a7:43:98:87:bc:93:17:7e:fd:d2:7a:01:cb:
         c2:59:97:57:89:7a:3f:4a:f7:d0:91:19:80:5d:7f:50:93:c7:
         90:b9:f6:f0:ef:46:ae:52:83:f9:3f:c6:32:bd:b4:42:06:42:
         72:09:ea:fb:9e:06:56:87:a1:27:eb:98:54:9e:1f:a3:c3:a8:
         53:21:47:28:82:50:da:fa:0a:ed:1b:36:a8:99:00:78:ac:a7:
         a8:b2:dc:a9:b6:39:a4:00:51:93:96:8a:d2:19:a2:1b:32:a8:
         4e:af:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:31 2026 by rpki-client