Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
File:                     D10DBCB2475C11EEBF5FB180C4F9AE02.roa (raw, json)
Hash identifier:          w+dWahSYH/nwFg8ywBlpCH/uzBzau9TppkYVuitg46M=
Subject key identifier:   D3:A7:AB:44:82:F1:1C:2C:F6:3B:4B:A3:F7:FC:10:97:A1:2D:60:04
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       378B
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:36 +0000
ROA not before:           Sat 22 Mar 2025 15:00:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134489
IP address blocks:        59.103.36.0/24 maxlen: 24
                          59.103.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14219 (0x378b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:00:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48554-8048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:cb:91:77:18:8d:ba:c9:9b:de:f1:ba:6b:
                    37:93:f1:3c:ea:5a:f8:dd:60:91:8c:bb:a4:ba:9d:
                    b9:68:62:08:bd:e2:3a:42:d8:0c:2a:ed:8b:fa:46:
                    6f:d0:51:37:c6:c4:0e:bb:be:57:78:27:61:78:e9:
                    a8:28:35:29:4a:f7:a9:73:1a:49:fa:6f:54:e6:c6:
                    ac:56:27:49:e8:fe:6b:51:15:bd:ef:1c:c0:90:4b:
                    f5:08:86:14:6f:82:e7:73:96:65:b2:c9:5d:14:af:
                    e8:77:a0:52:08:fc:95:0f:a1:04:ce:28:35:f3:46:
                    61:fe:61:e7:1d:4c:53:70:a1:52:a0:3a:6a:1f:5c:
                    64:c8:ab:ea:4c:13:09:3e:e4:c6:80:91:b6:90:4e:
                    e4:81:aa:f1:3b:74:52:23:59:09:61:b8:37:7c:3f:
                    ee:38:1f:92:9a:09:b2:48:ab:d1:89:e7:8f:fc:37:
                    d2:40:a1:bc:a2:05:a3:f2:46:88:8b:88:c8:0c:f7:
                    c0:f4:e4:dc:bb:1c:b9:4a:63:44:f6:da:30:0d:8a:
                    9e:bf:14:89:45:b8:fc:68:7f:39:61:ba:f8:39:4b:
                    4f:b3:0f:58:2d:aa:62:7f:db:91:47:87:0a:05:32:
                    7e:4e:b4:cc:87:65:6a:85:b7:e4:28:64:bf:1d:73:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:AB:44:82:F1:1C:2C:F6:3B:4B:A3:F7:FC:10:97:A1:2D:60:04
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:1b:22:87:f7:7a:93:89:03:a7:c5:7f:42:5a:ca:dd:2b:74:
         50:fe:f8:49:6c:9f:6a:83:82:a9:20:86:d1:5d:0a:c9:6c:34:
         0f:b0:1e:d9:0f:c9:1b:70:48:ae:10:62:9f:4f:d5:ea:cf:e9:
         64:93:ca:f5:7a:94:89:44:eb:c5:ec:d0:bd:a0:c1:d2:1e:d5:
         6f:1a:54:85:ed:b1:a3:95:f0:b6:8d:08:99:22:39:e5:4f:72:
         03:ed:a1:6e:99:63:e4:dc:02:2d:05:0a:6a:3b:e0:61:30:2f:
         5f:b4:be:31:e9:4e:82:3d:e8:30:c1:b9:a0:4c:90:15:81:32:
         7e:db:84:96:3b:bb:8b:7c:f6:3b:f8:e3:d6:6c:e4:cc:1e:cf:
         d4:7d:10:63:0f:26:5a:ce:66:e6:1d:5d:11:d0:9c:51:de:74:
         74:75:31:56:c1:88:d0:35:03:1d:c7:f4:18:32:61:76:68:94:
         d8:34:c6:37:d8:d1:80:71:a9:a6:fb:40:5d:2d:26:45:06:10:
         17:65:03:3a:c5:c8:1d:ba:d0:7c:0e:45:7c:20:54:d6:a0:05:
         6d:44:d8:9a:17:07:5f:f6:7a:2c:0a:4e:94:e4:3e:85:24:15:
         c8:23:a1:33:03:b7:3e:8a:03:c4:27:fa:65:80:8c:af:4d:f2:
         af:5b:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:15 2026 by rpki-client