Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa
File:                     074283A632A511EF84ECD41AC4F9AE02.roa (raw, json)
Hash identifier:          BpixEa/JuFiCLMxqdvIYTJdkS4M3EeEjH0jQFqgcvxY=
Subject key identifier:   29:A5:4F:99:D5:19:6C:24:23:17:CF:85:9C:D8:8F:7D:35:3F:78:7D
Certificate issuer:       /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial:       015E
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 05:43:02 +0000
ROA not before:           Fri 03 Apr 2026 05:43:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133396
IP address blocks:        103.226.252.0/24 maxlen: 24
                          103.226.253.0/24 maxlen: 24
                          103.226.254.0/24 maxlen: 24
                          103.226.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
        Validity
            Not Before: Apr  3 05:43:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf5366-ba76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:e8:c4:30:3c:1e:e0:25:f3:1b:b6:74:75:
                    98:47:1e:49:2b:00:41:7f:cd:2b:f9:26:51:f9:ed:
                    18:22:26:c4:2d:f9:ce:43:25:f8:e7:3d:c6:eb:c2:
                    43:65:04:91:b8:30:39:f1:f4:4f:7b:c9:f5:f8:36:
                    39:09:a4:3a:6d:fd:a1:73:1c:3f:c2:64:58:71:18:
                    28:2d:24:20:91:11:89:81:7c:db:46:88:e1:5f:db:
                    ed:48:1d:bf:13:06:91:56:a5:ed:66:07:cb:f4:29:
                    c8:10:81:e7:c3:06:41:f0:0a:cd:04:0a:3a:97:d8:
                    26:d4:77:d1:3e:a3:5a:30:6d:80:b0:3d:de:db:93:
                    9a:0d:b0:92:80:9a:61:fc:23:03:74:47:f8:f3:33:
                    1f:df:bf:e9:4c:72:9b:23:63:e1:b6:e3:c3:83:a4:
                    77:ed:22:54:ac:9a:82:cf:9e:be:51:3a:1d:18:9f:
                    3d:7e:20:84:4d:00:d2:b2:80:4d:98:ac:17:e7:0e:
                    0f:a7:9e:a6:d0:77:18:76:3c:ac:10:18:74:73:91:
                    cd:9d:e9:ec:b6:b5:fe:c5:2e:31:33:9d:0b:cc:5f:
                    d8:2c:05:ad:f5:37:88:c1:a1:8b:29:f2:30:40:c7:
                    bd:57:e2:79:cb:52:ea:df:29:ac:99:1c:52:a3:de:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A5:4F:99:D5:19:6C:24:23:17:CF:85:9C:D8:8F:7D:35:3F:78:7D
            X509v3 Authority Key Identifier:
                keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:83:fe:6b:d7:bc:88:1e:8d:79:2c:99:81:83:84:88:e8:e5:
         8a:85:c8:c5:1b:f9:b7:a1:8c:19:03:21:6a:20:e6:92:61:d7:
         ab:97:ae:c7:90:d7:18:3b:92:7c:b3:50:9c:8e:34:77:3e:06:
         b5:2f:ff:9c:8c:06:b2:5f:90:0d:7e:8a:54:4f:5c:43:f8:fc:
         5e:ea:b2:a1:d7:fd:4b:b4:57:ee:94:3b:16:ca:e9:2a:e6:de:
         ed:7e:75:ef:d0:51:4c:32:93:e9:c9:03:16:64:96:2b:6e:cb:
         34:3a:c8:1f:72:08:46:25:b6:3d:92:7d:c2:d6:d8:89:06:ac:
         3c:17:22:1a:f4:3c:d0:78:1a:78:ce:7c:bf:14:27:b9:08:6a:
         8e:76:e1:16:90:ff:a8:0f:33:d3:04:46:39:12:d9:7c:68:46:
         a9:66:f1:bb:af:5c:83:80:37:bc:9a:f9:86:51:52:f9:d8:fe:
         ff:3e:e7:1f:c4:cd:70:5b:d4:e8:29:52:5c:84:b6:b1:55:0e:
         9c:b9:ea:1f:0a:d2:3f:6a:e5:87:f9:bf:08:ff:24:84:28:3e:
         37:ba:41:21:9a:97:fe:8b:b2:a5:31:45:67:9f:e7:e7:ab:60:
         8d:80:d2:87:e6:79:a6:82:4c:38:22:39:8b:05:66:b7:b7:fc:
         c0:ea:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:56:45 2026 by rpki-client