Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa
File:                     A3205106142511EB8FED0427C4F9AE02.roa (raw, json)
Hash identifier:          8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=
Subject key identifier:   11:0F:F8:4A:D8:8C:98:99:1A:4E:9B:11:CF:00:DB:40:0C:DB:87:F3
Certificate issuer:       /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial:       0814
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:22:57 +0000
ROA not before:           Tue 12 Aug 2025 22:03:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131286
IP address blocks:        103.68.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
                          rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
        Validity
            Not Before: Aug 12 22:03:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41381-a835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:67:8e:f2:96:5f:71:8c:9c:ee:61:16:8e:
                    9e:ad:77:7b:49:ed:60:15:84:7f:2d:2a:e4:58:5c:
                    a9:20:52:d0:1a:39:45:57:44:73:f5:dd:6e:1e:ac:
                    a1:75:bd:f3:9a:24:e4:4b:99:68:73:83:b8:d2:08:
                    5a:ee:89:e9:3c:ac:f2:2a:91:b1:24:31:af:dd:d3:
                    d4:29:83:e3:1b:ab:48:16:d4:20:8c:fc:bc:28:1b:
                    43:4e:8d:23:fc:78:a9:d3:4d:c8:31:20:b0:a3:68:
                    d3:b7:8d:a2:07:98:13:25:93:18:b6:79:de:89:24:
                    36:57:a6:67:7b:f3:f6:2f:c2:b8:47:40:f1:ed:8c:
                    95:b7:ec:ba:bc:0d:00:f8:2c:01:c8:bb:ac:52:22:
                    23:8e:33:68:1f:ad:30:33:e6:9e:31:11:ef:88:81:
                    5f:dc:53:22:c8:67:13:9a:6c:aa:7b:f4:1f:5b:8e:
                    68:83:4d:22:51:b5:5c:d2:1d:1f:2a:bc:12:b9:37:
                    ad:12:67:07:78:ad:01:21:b3:e1:0d:7d:9c:06:ac:
                    22:1e:77:1b:87:3a:c2:c4:43:e2:73:90:9d:a8:21:
                    73:b0:35:d6:de:79:55:b2:57:b0:5a:6d:d6:8a:ec:
                    79:7e:2d:9d:68:75:e9:aa:be:2e:87:a1:47:fe:af:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:F8:4A:D8:8C:98:99:1A:4E:9B:11:CF:00:DB:40:0C:DB:87:F3
            X509v3 Authority Key Identifier:
                keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/A3205106142511EB8FED0427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:47:8b:73:18:be:42:eb:64:2e:49:b6:32:c6:8a:76:4c:
         c3:8a:bc:b9:b4:36:02:36:f9:0c:93:31:6c:26:64:7f:e6:be:
         4c:c7:9b:98:f9:cd:61:61:35:d1:e5:67:f6:09:51:bc:af:c3:
         c9:7e:eb:b9:75:c9:a5:1b:73:28:ce:e1:01:40:01:18:19:cc:
         04:4f:37:ea:8b:a4:4a:cc:9e:95:0e:42:46:ee:09:50:d3:33:
         fd:fd:c1:e2:dd:c0:ab:c2:d2:46:79:eb:6f:36:e1:57:ab:1c:
         6b:68:41:90:f4:f7:40:5e:fb:e5:46:34:dc:c6:d1:7e:82:52:
         2d:2c:6a:62:1e:3a:32:2c:8a:88:04:60:2f:9b:1b:9e:2a:c1:
         f0:6e:9c:50:3f:8f:8b:c6:2d:e7:45:eb:06:be:07:3f:c8:1b:
         eb:96:c0:90:c6:40:42:29:af:88:9b:ea:a2:0b:38:da:3b:0e:
         d7:6c:90:06:ba:d6:74:e0:bf:bb:15:55:67:22:08:46:43:15:
         a1:44:25:4f:d4:6f:53:f5:39:12:4e:06:2a:e4:66:ff:d7:36:
         c4:86:98:8c:34:08:65:25:d1:c7:c2:ba:46:b3:1d:9d:d5:07:
         b5:52:84:95:d0:70:ae:ad:8e:a5:4a:a9:73:21:ec:bd:31:21:
         5b:44:8a:20
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz
REU1OTFFQ0IwHhcNMjUwODEyMjIwMzAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTM4MS1hODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA61FnjvKWX3GMnO5hFo6erXd7Se1gFYR/LSrkWFypIFLQGjlFV0Rz9d1uHqyh
db3zmiTkS5loc4O40gha7onpPKzyKpGxJDGv3dPUKYPjG6tIFtQgjPy8KBtDTo0j
/Hip003IMSCwo2jTt42iB5gTJZMYtnneiSQ2V6Zne/P2L8K4R0Dx7YyVt+y6vA0A
+CwByLusUiIjjjNoH60wM+aeMRHviIFf3FMiyGcTmmyqe/QfW45og00iUbVc0h0f
KrwSuTetEmcHeK0BIbPhDX2cBqwiHncbhzrCxEPic5CdqCFzsDXW3nlVslewWm3W
iux5fi2daHXpqr4uh6FH/q8TkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBEP+ErY
jJiZGk6bEc8A20AM24fzMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0
MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTI4NEUvRTkwNURDQjAxNDIzMTFFQjlGQzRDMjI0QzRGOUFFMDIvQTMyMDUxMDYx
NDI1MTFFQjhGRUQwNDI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0SzMA0GCSqGSIb3DQEBCwUAA4IBAQBqxUeLcxi+QutkLkm2MsaK
dkzDiry5tDYCNvkMkzFsJmR/5r5Mx5uY+c1hYTXR5Wf2CVG8r8PJfuu5dcmlG3Mo
zuEBQAEYGcwETzfqi6RKzJ6VDkJG7glQ0zP9/cHi3cCrwtJGeetvNuFXqxxraEGQ
9PdAXvvlRjTcxtF+glItLGpiHjoyLIqIBGAvmxueKsHwbpxQP4+Lxi3nResGvgc/
yBvrlsCQxkBCKa+Im+qiCzjaOw7XbJAGutZ04L+7FVVnIghGQxWhRCVP1G9T9TkS
TgYq5Gb/1zbEhpiMNAhlJdHHwrpGsx2d1Qe1UoSV0HCurY6lSqlzIey9MSFbRIog
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:28 2026 by rpki-client