Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
File:                     E91D4C42E19011EC8E1ECA75C4F9AE02.roa (raw, json)
Hash identifier:          vvOXur+AhOcfPnHC8rWZ286jK7+A7t0TjDADfDTLUAk=
Subject key identifier:   F3:39:33:D1:C5:DD:97:9D:85:17:AE:9A:9B:2C:3A:22:53:C3:8E:44
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0B9F
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:26:31 +0000
ROA not before:           Mon 12 May 2025 19:34:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59353
IP address blocks:        103.230.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: May 12 19:34:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40646-eccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:65:2d:69:0c:a4:4a:21:6c:c2:14:3c:bf:
                    2e:eb:44:19:cb:2e:b5:bc:ea:5a:6b:35:e4:3a:0a:
                    81:45:1e:02:34:3e:19:ce:28:d4:74:9d:1a:fe:0b:
                    59:0e:e5:50:1a:15:35:89:32:e6:3c:71:32:a0:e7:
                    98:ab:a6:0d:ff:48:48:48:17:b2:0e:b7:83:f0:88:
                    41:6c:9e:77:bb:ec:9a:d8:50:1f:3b:76:a0:e5:cb:
                    8c:d9:9b:56:4f:96:7f:32:2c:8f:82:4d:5f:82:27:
                    2c:e2:9a:2e:5d:45:75:55:46:32:3f:74:13:94:91:
                    ee:15:75:1a:01:fc:dc:30:4a:9d:28:08:b5:f1:47:
                    09:eb:03:2b:82:97:0c:ef:cb:d8:76:3e:a2:a3:95:
                    64:4b:1b:b4:d6:e9:fa:81:8a:93:5e:90:02:96:a4:
                    e3:e1:16:66:7c:41:70:f8:2c:0d:ae:ca:01:b5:af:
                    36:d0:fc:51:64:c0:32:60:8c:9f:99:90:aa:d3:3d:
                    70:aa:e6:99:05:e3:93:62:47:8a:67:38:b4:b1:5f:
                    34:fc:e8:7d:00:fb:c9:14:9b:26:b7:d6:54:ae:d1:
                    8b:8c:1a:07:e4:9c:b9:fa:ba:39:c3:d6:57:15:f3:
                    d7:93:54:3a:e3:ea:f3:64:ff:6e:5e:ff:90:a1:ff:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:39:33:D1:C5:DD:97:9D:85:17:AE:9A:9B:2C:3A:22:53:C3:8E:44
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:21:3a:38:c3:33:c9:42:e4:eb:c9:66:ba:9b:11:6c:6d:
         d6:ac:67:f7:a0:4d:1d:37:f8:1d:dc:22:cb:f6:79:7f:87:d0:
         f4:e9:bf:15:37:f7:78:31:a1:b9:b3:12:00:84:8b:e6:2e:24:
         05:70:04:70:5d:b2:5d:99:ee:37:b9:a6:60:a2:36:40:21:ef:
         09:3d:0b:aa:9f:a3:ec:c9:0b:66:b6:e0:df:36:39:b0:25:b4:
         e2:be:9f:23:46:00:20:84:c4:86:71:01:ec:5a:1b:f5:a4:bf:
         3e:0b:e2:7d:f7:32:1c:7c:1b:b4:df:e2:0f:d8:d5:72:d9:65:
         ab:eb:a0:49:ff:ee:5b:c9:b0:9e:fb:46:ca:e2:5b:74:87:ab:
         13:cb:c2:1c:6b:1f:30:72:c2:a2:9b:26:3a:8e:8d:6e:ae:dc:
         f4:b9:91:5d:a8:2a:1c:3c:f4:e7:ec:7c:ea:7d:c2:34:ca:5f:
         8c:ff:41:dd:4e:d0:2b:fc:c1:51:8a:cb:99:15:40:47:55:44:
         b8:25:82:a2:a1:56:bc:25:27:02:e6:cd:1f:6e:3d:bf:fa:4d:
         f5:87:47:df:a2:08:bd:5e:ec:bc:74:35:78:ef:22:5e:0c:ed:
         1c:5f:d6:0a:0e:a6:18:ee:6f:f3:dc:ec:0d:97:ca:6c:52:7a:
         5b:61:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:16 2026 by rpki-client