Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59230714DE9B11EC9AE23269C4F9AE02.roa
File:                     59230714DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=
Subject key identifier:   06:E8:C4:3B:94:25:9F:66:DC:4D:94:F5:37:4D:31:61:35:C5:59:AD
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       04DA
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59230714DE9B11EC9AE23269C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:30 +0000
ROA not before:           Sat 07 Feb 2026 00:20:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     205960
IP address blocks:        103.80.132.0/22 maxlen: 22
                          103.80.132.0/24 maxlen: 24
                          103.80.133.0/24 maxlen: 24
                          103.80.134.0/24 maxlen: 24
                          103.80.135.0/24 maxlen: 24
                          182.161.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Feb  7 00:20:08 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483aa-c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:07:45:82:0e:64:6e:16:04:6a:c9:22:cf:
                    1b:57:0b:37:ce:77:0f:d0:d8:95:62:84:00:9c:ba:
                    09:1b:04:ea:16:1f:9d:61:f6:76:1e:51:47:db:77:
                    b9:0e:c4:ab:71:f1:c1:6d:fd:69:9b:51:36:6f:e9:
                    1d:11:f7:1b:b9:de:37:61:1f:3a:98:a0:7d:b1:57:
                    1f:8e:bd:44:c3:45:14:02:97:fd:84:b0:85:a8:94:
                    4a:6a:f2:a8:4d:b4:88:05:a5:a8:3b:39:90:b9:b5:
                    f9:6c:37:66:e9:92:7e:f8:c9:43:3d:c1:f8:b2:8a:
                    3a:d4:99:a9:a4:19:57:69:a8:f9:01:6f:6d:b2:ba:
                    f8:9d:07:f1:d5:04:38:48:81:d2:39:2d:20:44:51:
                    86:60:ff:9e:42:d5:8d:c1:a4:48:77:99:84:f8:96:
                    c5:31:82:56:f5:a3:4b:6e:4d:f3:c5:13:d0:d2:b9:
                    ba:8e:43:f3:91:ca:0d:cb:a3:84:b3:71:80:16:6a:
                    ca:41:50:56:24:bb:07:98:52:b1:4c:dc:6a:df:c8:
                    a0:58:9b:a3:6a:46:05:86:48:ec:b5:2c:f3:46:74:
                    a4:3b:f4:dd:61:e5:0c:a8:b0:99:2e:23:64:d3:2b:
                    bd:97:b0:63:6a:cb:c6:4a:e1:d8:3c:24:66:8f:e7:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:C4:3B:94:25:9F:66:DC:4D:94:F5:37:4D:31:61:35:C5:59:AD
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59230714DE9B11EC9AE23269C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22
                  182.161.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:37:25:8e:9d:22:cb:1c:c7:a7:d9:8b:7b:31:ec:f2:43:fd:
         a8:02:92:44:2c:0d:d5:6b:cb:50:72:e5:68:cc:b2:07:33:03:
         6f:ee:ab:cb:cd:11:39:4f:41:c7:21:1d:d3:17:68:4b:7c:73:
         35:61:09:09:b9:04:f5:fe:b3:5d:52:e4:8e:38:f1:e8:12:99:
         cc:57:4e:92:d2:61:bb:07:15:8b:81:b6:5f:0a:5c:d6:af:de:
         28:a2:84:eb:fa:59:01:8c:10:8a:33:2c:36:c0:2a:87:ac:a1:
         87:86:a6:69:ff:e4:04:48:07:24:b3:e5:9d:3e:b1:1c:0b:8a:
         58:dd:84:09:6c:1c:a2:c5:5f:c7:0d:4b:29:cc:16:18:8c:9a:
         25:1e:df:44:a8:d7:a0:ce:e3:9b:2e:2d:9f:0b:5d:5c:39:29:
         75:c2:b6:e9:ce:d3:44:6c:40:04:d0:63:f7:c0:8c:6d:d5:9d:
         22:e2:bb:22:2d:41:14:20:cc:a6:df:9b:63:a3:58:e7:b2:33:
         6e:36:c4:11:5b:1b:15:61:3f:20:97:b7:57:a5:21:32:56:72:
         bf:f0:b1:9c:a8:be:ad:a9:84:f4:4b:e4:bb:7c:1f:df:eb:34:
         53:b1:80:40:ec:0b:87:ed:9b:f4:63:e7:db:7c:5a:73:ea:aa:
         c1:79:ae:c3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2
NERBNTBCMkEwHhcNMjYwMjA3MDAyMDA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNhYS1jNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt28HRYIOZG4WBGrJIs8bVws3zncP0NiVYoQAnLoJGwTqFh+dYfZ2HlFH23e5
DsSrcfHBbf1pm1E2b+kdEfcbud43YR86mKB9sVcfjr1Ew0UUApf9hLCFqJRKavKo
TbSIBaWoOzmQubX5bDdm6ZJ++MlDPcH4soo61JmppBlXaaj5AW9tsrr4nQfx1QQ4
SIHSOS0gRFGGYP+eQtWNwaRId5mE+JbFMYJW9aNLbk3zxRPQ0rm6jkPzkcoNy6OE
s3GAFmrKQVBWJLsHmFKxTNxq38igWJujakYFhkjstSzzRnSkO/TdYeUMqLCZLiNk
0yu9l7BjasvGSuHYPCRmj+evcQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAboxDuU
JZ9m3E2U9TdNMWE1xVmtMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx
MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzk4QTMvRTIxOUI2MUM3MTEzMTFFQ0JDMzA4OTE5QzRGOUFFMDIvNTkyMzA3MTRE
RTlCMTFFQzlBRTIzMjY5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ1CEAwQAtqFCMA0GCSqGSIb3DQEBCwUAA4IBAQA3NyWOnSLLHMen
2Yt7MezyQ/2oApJELA3Va8tQcuVozLIHMwNv7qvLzRE5T0HHIR3TF2hLfHM1YQkJ
uQT1/rNdUuSOOPHoEpnMV06S0mG7BxWLgbZfClzWr94oooTr+lkBjBCKMyw2wCqH
rKGHhqZp/+QESAcks+WdPrEcC4pY3YQJbByixV/HDUspzBYYjJolHt9EqNegzuOb
Li2fC11cOSl1wrbpztNEbEAE0GP3wIxt1Z0i4rsiLUEUIMym35tjo1jnsjNuNsQR
WxsVYT8gl7dXpSEyVnK/8LGcqL6tqYT0S+S7fB/f6zRTsYBA7AuH7Zv0Y+fbfFpz
6qrBea7D
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:59 2026 by rpki-client