Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
File:                     026537E8861E11F0BC465F85C4F9AE02.roa (raw, json)
Hash identifier:          jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=
Subject key identifier:   02:54:05:3D:40:74:D3:06:22:33:C9:40:09:42:72:73:DB:5E:F6:AF
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       028D
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:26 +0000
ROA not before:           Mon 03 Nov 2025 02:17:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     149296
IP address blocks:        103.96.1.0/24 maxlen: 24
                          113.212.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: Nov  3 02:17:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48112-69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:54:9a:fe:9c:d8:25:6e:31:00:19:61:0c:
                    61:85:59:79:f2:e7:b1:00:34:ca:d0:06:61:2b:dd:
                    1f:69:5d:36:a6:c5:47:43:2b:9f:b1:d7:72:27:90:
                    5e:8e:ab:ee:8d:bb:9c:14:ca:9c:fe:0e:e3:28:e7:
                    14:7a:f5:bd:df:06:2f:d5:e8:29:49:72:a2:dd:57:
                    85:8b:7e:5e:2c:da:a0:27:63:91:f3:08:d5:c3:2b:
                    7b:ce:0c:73:19:7d:d6:dd:eb:28:a5:8a:e7:13:54:
                    a7:7f:21:0a:27:39:32:e6:f4:28:10:72:0e:ac:6e:
                    ae:b9:e3:5e:88:d9:3d:b1:bf:67:0e:ad:cf:66:64:
                    2b:06:88:22:8e:b9:f7:1f:c0:04:e2:e2:23:d5:bb:
                    15:b8:6f:fe:c1:43:7c:1b:b1:77:f4:b1:3b:25:c7:
                    0e:c2:3e:2b:9f:48:ce:ad:d5:61:03:48:6b:57:32:
                    26:42:3c:ee:dd:7f:1a:be:d0:e6:3d:5a:b0:09:48:
                    59:79:6c:90:98:fa:30:47:ab:1d:6e:f1:33:e2:29:
                    3d:3d:4a:44:78:a2:8d:c5:3b:67:d8:b9:22:49:e2:
                    4a:30:ef:54:71:4f:3f:13:04:ed:fe:c5:b2:d1:2f:
                    d3:ed:c1:d8:31:b3:3b:4f:e8:fe:7f:50:70:8b:ec:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:05:3D:40:74:D3:06:22:33:C9:40:09:42:72:73:DB:5E:F6:AF
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.1.0/24
                  113.212.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:22:9e:28:cc:2e:b5:70:e0:71:d7:17:36:97:9c:1c:ac:96:
         52:66:73:97:eb:23:b9:52:f6:61:7b:43:47:85:cd:41:e9:58:
         b8:9b:49:d7:09:30:9f:f1:80:cd:3b:c7:b8:d7:57:3f:25:29:
         b0:6c:5d:bf:52:0f:d7:bb:55:12:56:de:08:7c:13:e7:cc:40:
         1d:1f:b3:e2:09:bb:64:a5:01:76:dc:06:2b:1a:aa:72:8a:eb:
         6e:8f:de:3c:63:87:07:10:69:b1:73:4e:ef:5e:8f:79:90:1e:
         36:cd:d4:ab:8b:28:52:23:0f:1a:c1:cd:f0:f2:a4:b8:77:18:
         85:c9:65:57:ec:2c:8b:1f:ee:cc:2e:b2:cd:e3:4d:c0:94:61:
         66:c1:47:49:1b:6b:bf:50:06:41:d9:dd:0d:d2:86:30:07:c2:
         6b:ad:94:ff:5e:bc:1b:5e:11:9a:0d:d4:3a:ff:b4:a8:46:13:
         a8:30:b2:f9:0c:ef:72:7a:31:a6:ee:36:34:21:22:5e:15:57:
         4c:f5:97:bb:50:cb:f6:0d:05:4a:18:4c:0f:be:5b:87:cb:1d:
         25:ef:77:d3:1a:31:30:51:1d:2f:8e:eb:1a:02:28:93:a0:2f:
         36:cd:1d:7e:a8:bb:e4:3e:e8:cb:31:6c:4e:98:01:e1:8f:30:
         94:f3:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:20 2026 by rpki-client