Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/73E164B0F78311F08252E67A4C6F56BC.roa
File:                     73E164B0F78311F08252E67A4C6F56BC.roa (raw, json)
Hash identifier:          G+ObB5wiY0RZq1BlygyBu8U8dT9wJLTIM9sck3J/+9U=
Subject key identifier:   6D:75:56:2A:0C:3B:6A:9E:49:F6:98:9D:A2:4A:10:9A:38:53:69:CF
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0BE7
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/73E164B0F78311F08252E67A4C6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:22:25 +0000
ROA not before:           Thu 22 Jan 2026 11:14:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.245.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Jan 22 11:14:00 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a483e1-74f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:62:99:d5:6c:7f:33:27:17:3a:92:1f:6a:
                    bf:65:61:0a:b3:21:59:36:00:d0:bf:da:83:7a:37:
                    dd:b0:83:a7:66:2a:21:bf:f1:c7:18:7c:07:10:ad:
                    9f:e8:99:8b:80:2f:30:76:09:22:9b:f4:46:68:4e:
                    50:3b:c5:90:6c:b7:ac:7a:5c:92:58:10:9f:fa:41:
                    f4:18:32:86:ca:55:c8:2a:4f:73:28:6b:12:20:6d:
                    0a:8b:20:84:4a:ec:4b:76:ed:2f:bd:af:ad:b9:20:
                    e2:d1:a5:45:c3:24:8a:c8:78:e6:b5:03:a3:14:c3:
                    70:c6:0b:58:14:a6:31:c4:e1:2f:99:a8:73:cb:d6:
                    f3:b1:ae:3b:9e:f1:38:5d:16:4f:47:69:3a:08:61:
                    22:dc:50:9a:43:bc:07:3b:80:c9:3b:30:c9:14:8e:
                    a2:18:a3:ee:bf:66:9d:6d:ea:37:bb:d7:d0:4f:25:
                    fd:95:fd:13:b4:d1:ae:15:97:27:90:79:7d:66:1d:
                    e1:2f:cd:9e:25:d4:8d:08:78:eb:f7:02:7c:c7:5c:
                    60:2c:47:68:f4:ab:4e:9b:48:a9:8c:4a:9f:c1:ea:
                    1a:09:90:1c:eb:de:d9:f1:c8:61:0d:35:92:74:0d:
                    3f:8d:cc:dc:86:38:53:e5:94:75:fa:93:03:da:9e:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:75:56:2A:0C:3B:6A:9E:49:F6:98:9D:A2:4A:10:9A:38:53:69:CF
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/73E164B0F78311F08252E67A4C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:46:03:0d:1b:f7:47:89:5e:a9:61:f5:e9:92:98:9b:6c:e1:
         14:0a:9d:29:10:fb:b6:d1:40:51:61:c1:47:ca:f5:8c:0e:e9:
         05:10:60:35:cd:bb:a0:fc:70:c9:ba:2a:12:66:06:f0:6f:c1:
         c9:ec:cb:92:62:40:5a:1f:2b:67:a2:c3:2d:a9:7c:13:48:56:
         cf:5a:92:f0:12:89:4b:63:c0:de:eb:6d:26:e6:be:31:11:d3:
         ce:83:8f:8d:70:e7:ab:bf:b8:47:c9:31:a6:de:2f:a2:83:68:
         e2:1f:12:10:b7:b7:1d:f8:a1:22:22:69:22:51:88:de:9a:eb:
         17:16:66:b9:0a:53:a3:b3:cc:67:16:37:2b:a3:3a:67:b7:03:
         cb:2a:72:05:8f:d7:37:84:8a:df:52:fe:0a:e8:1e:2d:fb:38:
         84:d2:2e:c9:88:e4:5d:85:41:7a:7e:98:71:be:a9:3e:a0:af:
         15:4c:8d:f3:5e:8d:c3:00:ac:ad:e8:26:c8:e2:4d:db:5a:e2:
         2c:19:bb:87:dd:79:19:70:2c:ec:3a:3a:8f:51:1d:5c:f1:5d:
         73:c7:cb:b6:f0:ec:b1:6c:69:9b:ac:08:3a:fa:1b:e2:ca:d4:
         83:3c:02:ad:1f:a4:be:eb:46:dc:64:dd:83:be:c7:34:cb:2a:
         66:68:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:44:53 2026 by rpki-client