Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
File:                     69DD27F6A66111F0BF55D666C4F9AE02.roa (raw, json)
Hash identifier:          YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=
Subject key identifier:   79:CF:43:A0:97:BB:2F:12:37:59:91:89:E3:41:BD:6A:1D:23:78:7B
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       02F3
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:25:22 +0000
ROA not before:           Fri 09 Jan 2026 01:20:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139358
IP address blocks:        103.82.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Jan  9 01:20:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47682-f006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:ff:1b:c1:7c:13:9f:95:e7:7a:e2:1a:54:
                    b6:93:a4:34:77:3b:2c:98:01:c2:2f:08:e5:77:20:
                    a3:8a:b9:71:a5:33:e6:0e:54:e2:7b:02:86:4d:e8:
                    49:6d:cf:cc:31:ad:11:a6:ff:d8:0c:8c:6f:22:58:
                    42:61:a3:58:09:2f:8e:9b:cb:80:6d:19:20:5f:2f:
                    1d:93:49:62:d0:49:87:c3:ff:e0:01:0c:36:19:a6:
                    f1:9b:c0:f4:74:a5:db:eb:5a:4f:cd:63:53:bb:6a:
                    98:0e:59:12:de:da:8b:ed:14:8a:5f:00:fc:5f:7e:
                    f7:56:c7:7b:c0:57:eb:4f:8c:97:74:b1:92:f4:eb:
                    2c:63:bc:f1:be:7b:b9:6a:bb:c5:0a:05:b7:2a:bb:
                    51:9e:9e:60:89:8d:a1:42:50:d1:ed:90:a4:ef:29:
                    8a:93:32:6d:b6:9c:01:52:0e:36:18:ee:f6:bc:a6:
                    b7:cc:16:52:76:43:ea:0b:d6:6d:62:01:08:a6:7e:
                    b5:3d:e8:85:ef:d0:bd:ec:0d:bb:c6:4e:4d:72:45:
                    55:e7:bd:b9:fb:8e:b1:f3:b1:ec:b0:a8:6b:e2:0a:
                    20:3b:e9:58:1b:5f:e5:fb:e0:1a:f2:38:94:74:ff:
                    a5:c6:d0:76:da:8c:84:88:61:7a:b6:8e:ea:f7:bd:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CF:43:A0:97:BB:2F:12:37:59:91:89:E3:41:BD:6A:1D:23:78:7B
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:84:1c:6a:33:87:9e:f4:7e:81:81:d3:d1:f1:ae:05:b0:d9:
         c4:54:8d:8c:9f:75:bf:e9:6d:03:83:0c:cd:18:be:17:62:17:
         8b:47:b9:44:e6:cf:c8:0e:61:6b:56:7f:19:b3:ee:38:af:a7:
         f8:bb:71:aa:86:d3:08:80:9a:46:3b:84:2e:c3:91:c2:f4:29:
         3b:81:06:f1:36:ce:65:a6:c6:74:65:95:7c:05:47:35:4c:5c:
         04:7a:be:45:af:48:07:03:16:52:89:db:13:5f:c9:01:1c:50:
         3e:2d:e4:d0:ae:df:3e:63:b1:c5:0b:75:41:37:36:5e:91:82:
         3d:4b:0c:1a:8b:21:fe:7b:72:b6:77:d8:03:b3:01:ce:05:36:
         62:00:d0:a2:4a:ff:73:13:80:49:92:24:7c:c7:7d:04:00:ff:
         e6:f6:17:02:cb:16:82:68:2f:a5:39:c7:8a:d1:73:67:6f:f5:
         f8:ca:54:51:0b:7c:42:b0:02:3d:5e:73:19:60:d6:1e:16:27:
         ed:14:a2:01:2d:59:c9:5c:0c:ea:da:8a:95:3b:8a:23:e4:6e:
         90:03:ae:1c:41:8d:cd:d4:76:1f:49:e5:71:f3:47:b8:9b:ae:
         8d:54:a3:de:61:d6:ab:84:7d:14:2e:53:ad:36:6b:c1:26:a1:
         0e:44:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:16 2026 by rpki-client