Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa
File:                     9EABFF288CA011F0B1F47C12C4F9AE02.roa (raw, json)
Hash identifier:          xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=
Subject key identifier:   A7:85:95:A4:C6:EA:33:53:24:12:85:67:4A:D9:DE:AF:C7:F4:56:54
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       059A
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:55:53 +0000
ROA not before:           Sat 04 Oct 2025 23:55:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     399870
IP address blocks:        103.73.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Oct  4 23:55:39 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47da9-0dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:13:c1:a5:31:c1:2c:21:15:57:e1:bb:96:
                    b5:98:bd:51:54:94:91:a1:da:16:2e:a3:d0:e9:dd:
                    b4:ea:27:27:6d:7d:24:83:e2:33:e1:bf:3b:79:3c:
                    a8:86:60:85:0b:1e:67:96:db:9c:e3:cd:83:9b:b9:
                    0f:83:fc:37:6e:ce:cd:92:98:fc:b9:cc:46:d9:5e:
                    a7:16:5c:28:da:8f:e5:fb:89:23:e6:bf:c6:c4:bc:
                    70:b5:88:51:5d:af:e7:8b:b4:a3:5d:27:c9:12:6e:
                    a5:f6:69:b3:3d:af:18:32:7a:c4:54:ca:42:ec:6b:
                    d0:67:e0:39:fb:4c:27:c4:59:99:d6:91:61:36:03:
                    41:9f:b8:5d:c5:d9:37:d8:47:a8:9e:49:ef:18:d2:
                    59:d5:d5:ac:5b:e0:6d:1c:a1:10:de:ae:7d:32:9d:
                    4f:9f:df:39:a3:27:cb:e4:81:19:d7:0a:d1:3a:51:
                    aa:8a:3e:49:6f:00:1c:a0:fb:b7:52:e5:89:74:88:
                    85:0c:91:c6:70:9c:44:1b:63:f0:84:78:a8:51:49:
                    d9:2d:18:4d:d4:96:78:5e:22:8a:21:d5:7f:9d:4a:
                    63:56:6f:26:fb:2c:87:b2:54:ce:f7:98:bc:9f:19:
                    5c:73:e1:2e:79:57:bd:31:f9:5c:f7:ed:63:1b:7a:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:95:A4:C6:EA:33:53:24:12:85:67:4A:D9:DE:AF:C7:F4:56:54
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:09:ca:e7:91:77:a8:84:26:50:b6:4c:a1:21:36:9d:36:
         97:b5:ea:a6:f2:f6:6a:2d:f8:cf:36:1a:37:85:f1:41:b5:df:
         85:d9:8d:e0:80:fd:eb:8b:1a:4c:55:d4:76:c3:45:f1:cb:ed:
         2b:54:30:3e:f7:b7:d2:72:82:2b:89:42:d8:9a:90:44:a8:e6:
         09:87:93:e9:0a:bf:f6:19:a2:88:db:18:66:8d:74:b2:15:c6:
         16:43:f6:6b:d2:6d:8a:b2:29:57:c6:3c:b3:cd:53:fb:c3:e8:
         50:20:73:08:b9:9b:2a:85:42:65:87:0e:40:e6:be:2c:78:02:
         aa:34:58:fb:97:5e:a4:02:7f:9e:29:a2:98:f8:92:58:cf:39:
         1b:d7:9b:2b:9b:77:84:26:28:75:81:51:70:f3:e0:9e:a7:2c:
         91:d1:f1:46:9d:86:33:a1:43:78:0a:bb:c7:e7:c8:1e:d2:2d:
         9c:90:7a:eb:7d:1e:71:ee:f5:d6:52:ea:2d:53:a7:e4:4d:e5:
         34:a1:3a:46:de:19:39:0f:fc:cb:5f:49:e0:5b:b1:f0:55:3c:
         3c:6f:c3:05:e4:2a:00:99:df:4b:33:98:63:ce:90:51:c8:03:
         a6:8e:49:be:a8:15:cd:56:a9:0d:7a:3f:76:48:f4:ac:34:89:
         14:a3:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:33 2026 by rpki-client