Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa
File:                     21884064C42111ED91F8CA85C4F9AE02.roa (raw, json)
Hash identifier:          AxnVqCp/RhPTMLm2lR4QXo6EIhkF5hyiAtcRBsKCDM4=
Subject key identifier:   AE:9E:67:42:E4:A8:DF:61:DC:2E:5F:74:80:67:D0:F4:06:6C:A4:13
Certificate issuer:       /CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
Certificate serial:       0242
Authority key identifier: E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:37:52 +0000
ROA not before:           Fri 19 Sep 2025 03:40:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138914
IP address blocks:        103.236.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl
                          rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975B6, serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
        Validity
            Not Before: Sep 19 03:40:21 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a592b0-77e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:1c:f9:d8:f5:9a:fc:06:02:3c:51:da:7e:
                    33:74:a8:88:f5:80:02:b8:83:c9:2b:5b:21:89:bc:
                    f6:49:6f:56:4f:ba:a0:c2:5a:97:48:55:15:98:75:
                    6a:7b:80:ab:8d:42:f4:45:95:09:f4:1a:7c:d2:aa:
                    f1:13:c0:c4:ac:17:78:f9:76:28:63:50:9e:f5:05:
                    10:96:65:e6:72:e8:f4:71:39:63:bc:51:a5:ec:f0:
                    22:a6:90:0d:05:31:a6:bc:75:b1:67:6a:23:00:1b:
                    d1:d0:f4:f0:63:4e:30:31:14:dc:c8:db:92:13:df:
                    e9:de:43:91:91:c2:55:40:f8:4b:4d:69:ff:32:d1:
                    6a:ff:6d:3b:5a:52:ca:0e:e9:8b:5d:3a:08:57:50:
                    ce:6f:8c:28:f6:28:a3:6f:92:cb:8f:26:8d:cf:83:
                    57:39:68:69:30:32:28:a9:f7:ad:89:1e:66:4e:45:
                    2f:51:55:ca:14:ae:36:39:f5:9b:19:fd:de:a2:53:
                    c1:45:bd:72:fc:9b:ec:51:a4:00:a5:6f:1f:00:7d:
                    90:b4:54:f2:1f:ca:ef:de:52:d7:b9:0c:48:22:49:
                    4b:8e:f5:9b:89:6f:f8:3a:c1:06:95:b5:b7:26:4b:
                    e5:62:83:b6:38:8c:35:e1:55:34:ac:0d:b7:8f:45:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:67:42:E4:A8:DF:61:DC:2E:5F:74:80:67:D0:F4:06:6C:A4:13
            X509v3 Authority Key Identifier:
                keyid:E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/21884064C42111ED91F8CA85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ef:f6:93:84:e7:56:84:fd:51:52:66:5e:29:8d:0a:14:7d:
         0f:29:43:c4:07:55:3f:cb:77:8d:6d:27:d5:a7:48:53:0f:79:
         dc:d4:e0:d6:2c:83:dc:ca:15:60:84:38:e8:3e:f7:0a:c1:64:
         0e:ee:13:7d:ff:d0:0e:4b:50:ff:82:8d:42:8c:5c:2d:10:10:
         fb:31:11:6d:e6:bd:45:8a:11:bd:1e:92:89:5a:01:b3:3b:ef:
         53:cf:70:12:9c:b8:2b:a2:64:f5:95:87:b5:1b:43:f7:a2:28:
         51:da:bb:c0:df:e6:75:5e:55:0e:58:55:c1:71:5d:c6:19:67:
         8a:db:d9:2e:3c:3d:9f:2c:7a:7c:7d:cf:6a:54:14:9a:8d:f3:
         4b:c4:21:8b:9f:e1:4b:fe:f2:fa:2d:e4:cc:35:92:72:16:8e:
         fc:a2:8d:11:29:1a:3e:f2:03:6c:99:85:4e:d8:db:38:26:22:
         4b:0e:fd:e7:7d:c5:7c:76:19:50:1c:0f:7d:48:97:fc:08:33:
         62:a0:11:80:8b:3e:49:4c:42:08:5d:e2:bb:98:b0:8b:82:11:
         30:d9:22:8c:1a:c7:33:e0:cd:d6:14:d6:52:ab:71:53:78:51:
         ea:8c:b0:46:45:69:d9:3f:fb:f9:99:c3:28:8e:28:44:3e:32:
         77:25:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:53 2026 by rpki-client