Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
File:                     95C751AAC99F11F098604B44C4F9AE02.roa (raw, json)
Hash identifier:          UHvpsaid7Pmo6YPIbYpolV2HsVFbpaGyjeGlBmkMR7I=
Subject key identifier:   A6:27:22:87:37:18:73:49:67:84:CA:42:60:06:44:26:2C:9C:9A:B3
Certificate issuer:       /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial:       38
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:01:18 +0000
ROA not before:           Sat 13 Dec 2025 08:04:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     58372
IP address blocks:        103.29.204.0/24 maxlen: 24
                          103.29.205.0/24 maxlen: 24
                          103.29.206.0/24 maxlen: 24
                          103.29.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
                          rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
        Validity
            Not Before: Dec 13 08:04:58 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d62d-b53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:41:76:0b:b0:60:a0:27:1b:a6:2d:56:97:
                    92:6b:3e:22:72:ca:a6:66:50:6c:0f:5e:9b:cb:38:
                    3e:cf:1c:34:c5:1e:cb:44:2a:6d:1b:17:de:fb:05:
                    d6:54:f6:c2:14:0b:16:a4:0c:cf:14:cd:89:42:a0:
                    f8:16:87:b0:0d:ca:13:81:63:85:27:e6:22:10:5b:
                    15:2d:db:82:30:d0:87:65:4c:4c:5e:d3:ea:79:f7:
                    4a:82:03:2b:01:d2:9a:0f:c5:fc:4b:c0:79:43:d6:
                    a2:26:33:ce:79:4a:4a:31:18:e7:e9:15:55:c3:b5:
                    f6:34:27:2d:cb:8b:c6:dc:ec:5a:a5:30:1f:f6:ee:
                    2e:d1:a0:a4:4a:ea:82:dd:c9:c8:07:eb:08:89:6e:
                    a7:94:3f:d0:b0:f6:78:06:94:58:2a:c7:85:4c:67:
                    b0:8d:03:18:ad:b1:7f:e7:07:82:2a:9f:cf:25:7e:
                    49:90:e6:1b:3c:f9:20:c0:03:9f:7a:d4:ea:da:06:
                    14:8f:b4:f3:7e:f2:0a:6b:ea:be:36:47:5a:43:ec:
                    0b:32:d2:8d:33:2c:c6:5b:92:2b:7f:19:68:bb:33:
                    7d:be:64:af:a2:5b:e5:81:b4:68:86:00:e3:95:c3:
                    4b:17:ed:e3:f3:83:14:26:ba:b0:39:29:b2:3b:9d:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:22:87:37:18:73:49:67:84:CA:42:60:06:44:26:2C:9C:9A:B3
            X509v3 Authority Key Identifier:
                keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e3:aa:72:b7:58:97:d3:90:57:69:d0:4e:e8:00:00:22:0a:db:
         4c:d5:b0:7e:db:46:0c:8d:6d:9b:b9:6c:2a:0c:ab:69:5c:72:
         b5:94:8c:05:04:89:10:10:5f:a9:97:a6:19:ba:9d:63:28:1a:
         39:fd:b9:0b:fe:dd:d2:9f:98:97:93:84:e3:85:9a:4f:f0:bb:
         8f:4b:17:44:30:10:87:d2:13:2b:fe:43:3d:76:7b:a1:56:01:
         43:94:4a:fc:20:81:c0:01:fb:03:1e:9b:ea:97:09:f2:ee:36:
         89:c0:ac:21:86:11:77:0a:43:cf:84:0f:b4:b4:4c:d6:30:2f:
         56:db:08:32:8d:26:18:1d:fb:fe:e9:f8:a2:f2:37:0c:b6:45:
         e8:f8:f3:c4:d0:ef:4f:c7:2a:9d:ae:d3:1c:86:36:42:c8:21:
         95:ce:d7:39:84:16:02:ec:b5:2f:4a:c6:a3:66:39:fe:d0:17:
         78:1e:34:4e:30:6a:b4:4f:e3:f4:b0:ef:4f:59:c4:ca:c5:87:
         0e:12:e4:ef:9b:75:f2:02:5d:5e:82:3b:fe:f8:a2:d1:b8:a0:
         a3:94:23:a0:d5:46:5b:18:fb:5c:ea:6a:c2:54:1b:da:3c:17:
         08:cc:6f:a4:2c:27:e3:14:11:2c:8f:f3:63:9c:f7:9d:35:93:
         b4:60:ac:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:50 2026 by rpki-client