Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
File:                     EB292D8A6BF811EB8E899650C4F9AE02.roa (raw, json)
Hash identifier:          Y+1fvWj3nLlmoNV6cl239YJXWHECE8PMA09Art+Ouzs=
Subject key identifier:   8C:6E:FF:9D:44:B5:E4:89:DA:89:DB:9C:48:DC:3E:9C:47:DF:11:7F
Certificate issuer:       /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial:       0730
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:41:46 +0000
ROA not before:           Fri 04 Apr 2025 22:32:37 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132745
IP address blocks:        103.24.140.0/22 maxlen: 22
                          103.162.176.0/24 maxlen: 24
                          103.162.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
                          rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
        Validity
            Not Before: Apr  4 22:32:37 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fbca-6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:58:5d:72:02:4c:c6:51:fe:45:11:26:c2:
                    04:69:ec:52:dc:d0:a0:4a:83:92:49:7c:0a:7e:ef:
                    b9:80:43:fd:11:ed:0e:e9:0d:c0:f8:10:a0:27:35:
                    67:76:87:04:13:63:07:27:12:ef:d0:a8:32:8a:6b:
                    51:ff:3c:dc:b5:f6:62:82:3c:25:d1:ee:91:d8:65:
                    9c:e0:96:ce:bf:0c:5e:39:81:9e:a1:3e:02:6b:51:
                    09:2a:ef:ff:64:18:66:08:13:c4:35:e0:0d:4d:f1:
                    3e:40:77:82:e0:fe:1b:50:d2:ce:e8:31:88:58:2f:
                    07:f7:e3:0f:16:81:23:d0:72:bb:96:b5:14:49:7a:
                    aa:ea:70:44:9d:bd:e2:89:b0:ec:b6:a8:f7:63:67:
                    3e:6d:9b:82:c0:ab:97:0d:12:34:e6:7f:89:b1:3b:
                    4f:cc:41:6b:e0:11:5c:91:9e:0c:33:d0:28:78:c9:
                    a4:bc:bf:e5:f2:e0:12:8c:02:ab:ad:6e:8f:95:c1:
                    78:43:1f:a0:95:44:e6:c2:f0:a7:99:54:06:49:21:
                    5f:46:2d:f3:84:2b:db:de:04:12:f8:6e:1a:65:58:
                    71:42:0c:47:5e:2d:d5:86:65:6e:09:60:9c:e8:3d:
                    71:5d:12:b3:96:5a:3e:58:7d:01:ee:04:5c:99:7a:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6E:FF:9D:44:B5:E4:89:DA:89:DB:9C:48:DC:3E:9C:47:DF:11:7F
            X509v3 Authority Key Identifier:
                keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.140.0/22
                  103.162.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:d6:ff:ed:f7:b9:f7:11:fc:95:1a:ff:d7:2a:d3:c2:1e:
         e1:05:7e:7c:14:8e:20:48:cc:56:c1:87:ca:43:c0:41:29:3e:
         ba:af:ae:c3:f1:ef:d4:a3:8b:c5:77:3b:bb:f7:3f:1a:14:82:
         0f:4b:2e:2b:63:84:6f:e4:ac:56:b9:b2:01:21:61:e4:77:04:
         0a:4c:14:a3:f1:9c:28:8e:cd:fe:e7:fe:54:c4:11:fd:19:b8:
         05:68:85:78:4f:36:4e:f1:e7:25:c4:c0:14:c7:7b:b9:43:24:
         76:86:48:13:f1:59:26:64:3b:98:2a:cc:35:1c:27:fa:54:a6:
         59:f6:53:a5:e7:f2:fc:70:16:6f:32:3f:ba:6d:4d:55:68:ba:
         5e:a1:3b:38:a2:79:10:8f:42:21:2d:8a:67:63:6b:ae:c3:3e:
         fe:ba:99:41:96:80:23:39:eb:07:b6:0f:1c:e2:62:85:d0:7b:
         95:a9:de:ba:01:69:8f:87:a9:ab:c7:f1:96:86:9d:b2:5d:c6:
         19:49:92:e8:29:80:f7:f4:34:92:f5:51:a9:d6:29:27:5f:84:
         c1:aa:5c:1f:d9:ff:3f:91:46:6f:cc:de:c8:e5:08:39:fe:20:
         32:9d:f9:03:f3:f2:5c:3b:c7:fc:29:74:21:94:d7:11:f5:ac:
         55:08:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:00 2026 by rpki-client