Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/688DBA84577911EE8A10F47BC4F9AE02.roa
File:                     688DBA84577911EE8A10F47BC4F9AE02.roa (raw, json)
Hash identifier:          SCwmxfDWW09S/YLmleV15ds27OPWcfPLn9LjAT3VnRE=
Subject key identifier:   72:0A:B7:9D:DD:1E:4C:7C:7D:F6:58:0F:A4:EF:2A:4A:01:31:64:63
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       01CE
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/688DBA84577911EE8A10F47BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:38:16 +0000
ROA not before:           Sat 19 Jul 2025 04:39:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        103.226.244.0/24 maxlen: 24
                          103.226.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: Jul 19 04:39:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3ece8-94cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:6c:27:d8:6f:f8:70:29:ca:97:7e:53:bf:
                    47:88:98:c2:66:27:eb:fe:5b:14:32:83:ce:54:28:
                    bc:28:ee:d4:67:19:f9:5e:a7:72:0b:ce:0c:ed:ee:
                    d8:9a:e7:fd:7a:ac:9a:cf:3b:2a:7c:b7:07:47:79:
                    c5:30:b9:48:fc:b1:6a:bc:a7:c6:8e:a1:8c:84:38:
                    43:bc:cf:f3:0d:ab:48:58:04:53:95:09:e3:1c:bf:
                    fc:90:9f:19:f1:7c:ae:ff:83:90:8b:67:78:9d:05:
                    62:83:04:45:14:8e:1a:02:5f:8a:af:56:8f:6c:71:
                    b2:e5:4e:1f:5c:6b:c1:7d:cf:26:ac:b9:2b:8c:86:
                    5b:0b:1d:e7:8e:b1:0e:a3:8d:3c:e9:90:ff:d2:31:
                    30:d4:46:08:78:8d:78:68:4f:41:fb:69:d2:a5:b2:
                    99:2b:d1:b8:2e:3d:24:be:80:d0:ae:7f:8f:93:7f:
                    a4:9f:4c:6a:30:e0:89:0d:11:b4:94:3d:6e:7d:b1:
                    b0:02:94:cd:5c:6c:b1:de:d8:eb:0a:9d:66:e9:e1:
                    85:19:8b:bf:bd:4f:dd:85:50:8f:d1:f0:95:d4:b3:
                    01:ba:af:d6:b5:b8:20:b9:00:b4:ee:47:66:33:90:
                    03:76:9f:63:57:f8:9d:da:6c:13:1b:91:98:e1:39:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:B7:9D:DD:1E:4C:7C:7D:F6:58:0F:A4:EF:2A:4A:01:31:64:63
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/688DBA84577911EE8A10F47BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:dc:9b:fa:17:93:98:16:13:08:73:3f:b7:80:fe:a4:75:
         2e:fa:06:a5:33:31:ba:b0:a3:4b:4f:bc:a6:f0:5d:a1:3f:84:
         1d:9c:34:fa:99:6f:df:87:54:d0:17:5e:fc:fc:e9:b0:52:1c:
         c6:1f:cf:71:37:b4:b8:5a:15:5b:4e:e5:85:f2:5c:54:24:75:
         27:b1:e0:d6:11:a6:0e:14:c4:d5:b0:54:d0:6e:5d:0b:0a:0a:
         0a:fd:1e:18:4b:dc:52:e5:b3:09:d1:1f:d2:22:67:a5:42:90:
         07:cc:43:f6:9c:69:f9:05:7e:e4:6a:0c:2e:69:6f:30:0a:57:
         bb:66:38:fa:38:c9:aa:1f:e0:9f:ff:a1:ed:32:b9:eb:3f:76:
         0b:4d:39:70:4e:ea:14:ad:34:49:7e:72:3f:86:04:23:e2:7a:
         e7:80:f1:03:4d:dc:c1:1e:47:43:39:e6:2a:a8:c3:53:18:03:
         75:e6:8c:9e:00:a4:5d:72:3d:b9:4a:b1:f4:1e:01:cc:ae:03:
         b3:a5:3c:2d:16:3d:75:c8:d3:42:f6:6a:d8:ca:fa:6b:2a:20:
         fa:d9:2c:be:53:21:99:13:63:50:48:08:38:08:03:9c:d1:7e:
         70:af:71:83:11:2c:cb:97:59:e1:62:75:eb:37:5c:32:d7:d5:
         94:59:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:11 2026 by rpki-client