Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa
File:                     783907BC225E11EA8BD18A62C4F9AE02.roa (raw, json)
Hash identifier:          cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=
Subject key identifier:   0D:55:CB:6A:8C:92:CB:EF:D1:23:34:9F:79:A7:A9:23:DA:85:FF:17
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0C5B
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:22:08 +0000
ROA not before:           Tue 10 Feb 2026 19:15:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.145.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Feb 10 19:15:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a475bf-b254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:a3:23:9b:1c:4e:e2:b7:d0:77:93:f5:d8:
                    ce:e4:ed:95:91:c0:23:64:06:28:82:97:3e:ff:f7:
                    af:d7:ac:e2:66:dc:56:a9:2b:39:92:83:38:a1:5f:
                    da:cc:47:64:35:7f:57:aa:92:97:62:44:67:3c:d1:
                    bb:be:84:af:b7:28:33:6f:1d:26:b8:e1:40:f0:4c:
                    5a:d4:8f:ff:84:a1:ef:39:fc:4e:2c:07:ea:e4:0e:
                    36:1f:64:a0:45:52:4a:06:60:12:d6:ff:05:3e:83:
                    13:65:fe:e0:8e:0d:f7:14:95:0f:7a:93:f7:8c:ae:
                    ff:19:dd:2b:e0:ba:9f:64:d4:d0:ed:1d:9d:eb:c7:
                    ce:e4:e1:dc:5e:b2:82:62:b2:48:85:69:8a:f6:d3:
                    6d:1f:f0:3b:7b:ee:d1:69:8b:17:0b:aa:c3:41:ff:
                    c7:14:a3:57:08:7d:a2:c7:6a:fa:0e:f3:0c:b3:73:
                    2b:ff:23:b3:a8:18:7d:f1:71:f8:87:33:4f:17:be:
                    16:3b:3c:d1:0b:63:e1:fc:2b:8a:62:31:fc:50:66:
                    e1:a8:b2:0e:15:af:5d:ff:04:7c:7d:57:b8:fc:66:
                    bf:03:e1:7a:0f:bc:13:f2:ee:44:bd:3a:5b:0d:98:
                    58:a4:88:60:5c:ac:1b:bb:15:99:55:9b:53:9e:4e:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:CB:6A:8C:92:CB:EF:D1:23:34:9F:79:A7:A9:23:DA:85:FF:17
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:86:bf:20:c7:7f:22:d6:6a:e8:a1:80:12:8f:64:62:94:
         9e:4d:6b:0d:d3:2f:92:de:f3:11:ce:dd:9d:f5:cb:c2:f0:61:
         b3:bb:97:ab:64:c6:21:96:99:6c:21:e7:57:06:18:22:cd:47:
         04:45:c8:d8:28:ae:87:59:03:92:52:fc:f8:69:5e:d0:74:3e:
         16:6e:e8:3d:69:f5:e8:e7:da:82:99:64:a6:35:0c:07:af:f9:
         7e:ff:66:f0:7d:33:4c:70:c0:5a:8a:84:79:2b:f1:aa:54:ee:
         ca:1a:86:90:21:c7:31:7f:91:18:99:75:52:96:cd:8d:1c:8e:
         88:46:91:6b:82:57:8d:68:34:06:bc:c7:50:c4:3d:f6:5e:73:
         9a:2d:b2:b6:00:af:93:4c:fa:5f:56:72:a4:51:ed:35:15:9a:
         8a:75:d2:36:6e:4d:14:ea:47:8f:20:fb:c1:a5:a1:47:32:b5:
         88:9f:4c:51:f5:f9:76:d8:79:e6:31:9c:71:8f:fc:ae:fb:78:
         c5:a2:7b:93:a9:f7:e8:ed:9e:3a:1a:30:6e:f0:15:25:d6:f9:
         db:38:cc:08:54:ad:6e:fb:68:64:fc:3a:f0:e3:53:a3:08:c5:
         7c:34:5e:13:c9:4c:79:63:9e:ae:c4:f9:c5:27:ce:e8:f0:a8:
         7b:4c:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:50 2026 by rpki-client