Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/0D3A9110829911EABD93A72DC4F9AE02.roa
File:                     0D3A9110829911EABD93A72DC4F9AE02.roa (raw, json)
Hash identifier:          PxOmvDmrB3CEdW6KhDSMOQWoDMH93at+hpnwpbEaqbk=
Subject key identifier:   BF:16:9E:C2:91:A8:E5:F1:AE:B3:CE:5B:38:C2:7C:7C:29:BA:E5:F8
Certificate issuer:       /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
Certificate serial:       0A55
Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/0D3A9110829911EABD93A72DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:01:34 +0000
ROA not before:           Wed 26 Nov 2025 19:10:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4638
IP address blocks:        103.76.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl
                          rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
        Validity
            Not Before: Nov 26 19:10:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a446be-80bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:ad:cc:50:a8:2b:30:85:2e:1b:47:b7:ea:
                    42:ac:ac:c0:32:b1:7d:1b:96:87:56:06:bf:27:d6:
                    30:e9:ee:c0:1e:7d:40:2a:db:44:a8:9f:45:f2:f6:
                    a3:da:fd:d8:45:5d:d6:86:6c:02:14:2f:b2:14:d3:
                    b4:9f:0b:d6:38:d1:44:0b:54:0e:a1:1a:15:3c:44:
                    df:8f:d2:c0:d1:b2:2b:23:65:64:6c:90:52:f8:c3:
                    ef:09:3f:54:56:4a:da:84:1b:f0:8e:60:8d:05:ad:
                    3c:cf:82:7f:18:18:ea:6a:f7:75:48:4d:b0:20:1c:
                    5e:c0:af:da:4f:11:5e:15:72:d5:c6:41:27:12:40:
                    15:c3:8a:09:75:d5:c6:7e:e2:d0:f8:26:2f:7d:da:
                    d1:94:41:be:66:79:3b:c1:c7:81:fe:db:fd:eb:11:
                    ec:3b:77:02:5a:76:d3:c7:70:45:de:34:39:44:c8:
                    34:84:ad:65:87:b5:3e:61:ab:71:f5:c8:ed:f7:ad:
                    47:a5:4d:02:d1:bc:29:c1:a1:76:30:71:d2:34:8f:
                    52:02:74:35:f1:5e:92:87:d3:11:18:78:62:c9:6f:
                    3a:23:57:aa:3a:2a:2e:ac:1d:a6:17:9f:9b:14:f0:
                    cb:c4:f5:21:3b:24:6b:93:11:4b:40:59:4f:26:79:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:9E:C2:91:A8:E5:F1:AE:B3:CE:5B:38:C2:7C:7C:29:BA:E5:F8
            X509v3 Authority Key Identifier:
                keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/0D3A9110829911EABD93A72DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:de:83:14:e3:f8:31:af:f6:f7:43:b6:56:d6:ff:05:34:
         e2:70:34:69:f0:23:af:ef:33:4e:4f:6d:e8:7d:ff:ec:cc:89:
         0a:bb:0c:79:d5:74:31:ea:2d:e0:ca:93:2e:ee:21:13:fb:6a:
         16:50:eb:3d:a5:16:ec:83:f9:71:ae:28:a7:f2:2d:c6:9e:03:
         a7:c6:b2:e0:ac:ba:d4:97:bb:44:d9:f2:3f:e4:d5:7f:0b:ab:
         c3:ca:6a:4b:7d:52:ed:5e:57:c1:ad:f1:42:1c:18:d5:d1:09:
         55:e3:cb:60:cf:f4:4d:a7:59:86:73:3e:c4:4e:9a:e0:c7:d0:
         c4:32:f1:53:09:07:e5:14:5b:54:22:fc:73:28:77:b2:a9:78:
         14:d1:9c:fd:73:54:86:a3:f8:4e:59:d9:73:98:a3:5d:f0:58:
         12:68:1c:58:b1:00:62:e5:49:6a:cf:ed:15:23:93:80:d2:e9:
         14:05:30:97:e3:9b:45:16:7c:9a:f8:bf:aa:df:8b:c4:9e:f7:
         e6:05:63:7e:d0:5e:f9:ae:b2:52:74:34:d7:d8:47:44:b0:91:
         b1:bb:55:0d:ec:5c:48:2b:e3:9a:37:b3:b4:23:85:20:b5:03:
         64:4e:c7:8c:d5:3b:ff:a7:de:55:64:30:b1:53:02:c3:9e:39:
         bd:7b:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:40 2026 by rpki-client