Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/91B81F1EC2BA11EA8A079767C4F9AE02.roa
File:                     91B81F1EC2BA11EA8A079767C4F9AE02.roa (raw, json)
Hash identifier:          Ybw0Lq22zicclqXDmrKHYTCaBweUOu/zlikKr8ACL+s=
Subject key identifier:   96:B3:B8:95:AE:48:17:70:82:8E:C4:5B:9A:4F:17:55:74:C2:BB:1A
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       091D
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/91B81F1EC2BA11EA8A079767C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:20:50 +0000
ROA not before:           Tue 10 Dec 2024 20:49:41 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136234
IP address blocks:        103.84.132.0/24 maxlen: 24
                          103.172.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Dec 10 20:49:41 2024 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42f22-96fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:11:86:13:16:ea:2c:48:6c:3a:1e:09:5d:
                    35:a4:21:99:cb:c1:98:4b:2a:4c:e5:fe:e1:00:97:
                    8a:3f:72:9e:c0:74:f5:bb:5f:1d:07:66:81:d0:0f:
                    f4:e2:06:5a:f8:cf:23:5c:5f:03:40:94:fc:f5:c6:
                    3a:ed:42:e2:39:2e:6e:6d:3b:38:62:a6:13:6f:68:
                    c6:09:0c:98:58:7b:e6:ea:45:7a:a2:30:17:b8:72:
                    32:1d:c1:9f:58:ab:0c:1b:89:20:93:cd:e1:90:6c:
                    a1:e0:9f:59:3b:a7:1f:e4:7b:27:59:d5:f0:b3:4d:
                    d2:6a:b8:33:f5:aa:ca:86:0f:da:db:eb:b4:5c:4c:
                    91:2f:94:e0:8c:ca:73:41:a8:cd:6a:2a:ef:d0:c9:
                    36:6e:26:f2:b2:60:05:71:18:18:e8:13:4a:0d:2f:
                    96:bf:b3:1c:55:a5:05:66:c8:e1:a0:26:46:c2:b2:
                    4c:cc:18:17:02:93:63:6e:e5:bf:99:6b:e7:31:f9:
                    69:58:8e:51:4a:4a:a4:8b:19:0e:f5:91:f8:14:95:
                    8b:19:bc:30:43:88:d5:1d:10:c0:07:64:2c:b3:5b:
                    cd:7c:ae:35:b2:72:a0:65:cb:fa:0c:18:3f:86:bd:
                    b2:cf:03:db:15:c0:b1:17:79:f2:68:8a:38:e1:88:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B3:B8:95:AE:48:17:70:82:8E:C4:5B:9A:4F:17:55:74:C2:BB:1A
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/91B81F1EC2BA11EA8A079767C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.132.0/24
                  103.172.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:fb:5c:0f:e0:bb:57:7d:ab:d8:96:34:be:31:95:02:02:
         5d:58:df:89:57:3b:ff:5f:50:d1:3f:0e:74:67:0f:65:37:d7:
         04:e7:d1:ae:ad:3e:19:b7:45:04:51:c0:c5:e0:0a:66:13:f5:
         e2:fc:c0:23:fa:99:11:91:cb:7e:37:fc:3b:14:9d:c2:f7:c4:
         13:41:b3:74:8d:f7:f3:c9:9d:5b:fe:10:49:09:1e:5e:d7:03:
         45:bb:0d:3e:59:5b:09:d0:be:f2:c1:3e:21:cf:69:c2:9c:46:
         c2:08:9f:93:2c:16:db:52:27:e2:b3:7a:a1:a3:31:c1:ed:70:
         c9:b1:eb:f8:f0:e3:d1:c9:5d:51:65:11:c7:b5:44:7e:5d:65:
         a1:fd:65:e3:0b:2b:f0:9e:6f:1b:76:35:46:eb:f0:ac:b3:c9:
         79:92:83:aa:f4:eb:02:0e:96:fa:45:8b:f7:48:21:d9:db:12:
         6b:d9:4d:e4:24:4c:b2:4a:eb:2b:e1:32:ce:16:f8:da:c2:74:
         59:1e:5f:15:02:e1:c4:db:16:ee:73:a0:ed:dc:2f:4b:b8:c1:
         42:24:b3:96:87:b9:88:12:fe:92:3d:52:a1:68:02:52:10:cf:
         b0:f5:39:89:25:14:e6:18:84:fd:12:59:e3:f0:54:28:df:19:
         b6:24:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:37 2026 by rpki-client