Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa
File:                     E5692882C63411EB9E5F5F30C4F9AE02.roa (raw, json)
Hash identifier:          Bfub3yt6yxVtW1jhLiJdVPcr/N44DddSwKU3KzJPUtY=
Subject key identifier:   F3:57:60:05:CD:D4:F7:D5:24:12:29:7C:3A:7D:A0:9F:D0:B3:89:A8
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       064B
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:48:55 +0000
ROA not before:           Tue 24 Jun 2025 23:23:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138346
IP address blocks:        103.167.14.0/24 maxlen: 24
                          103.167.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Jun 24 23:23:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fd77-4fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:fe:6c:ea:85:52:32:96:91:69:ca:d3:3c:
                    a0:89:7f:11:cb:9f:ce:b7:7e:7c:eb:3f:41:b0:15:
                    b0:d5:95:f6:bc:f5:b2:89:da:b8:97:7d:e7:e7:24:
                    76:13:e0:fa:f0:05:c8:f5:ea:b5:54:f5:db:9c:bb:
                    83:58:14:09:6b:68:48:2b:39:92:98:38:27:1b:2c:
                    44:44:a5:d0:20:9d:99:c6:cf:35:82:cc:99:68:1d:
                    49:06:fc:94:55:03:a5:d4:f6:10:6d:de:a0:9a:74:
                    8e:ea:6d:e8:31:4a:93:4d:0b:71:60:b6:ba:bc:a0:
                    81:cb:f2:7b:d1:4a:d1:56:58:6d:c5:9d:3a:3b:58:
                    b4:98:14:62:53:68:fc:a5:94:fc:db:ba:16:5a:09:
                    16:e2:43:42:a8:ae:69:40:ef:9c:d3:83:42:fe:46:
                    07:90:85:80:9d:cc:c7:3b:e6:07:e2:d1:9e:f9:f5:
                    b3:22:b2:56:b2:3d:43:12:02:70:bd:3b:6d:73:5d:
                    df:f8:8b:21:0b:9a:11:a8:f2:a1:fb:26:d2:37:82:
                    a3:28:2d:e0:16:d1:3b:59:f3:60:3d:4b:08:60:38:
                    b8:63:1a:61:83:cb:22:b9:3a:52:f7:29:2f:80:72:
                    02:82:1e:08:c8:d9:2d:94:76:2c:ea:97:c1:be:32:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:60:05:CD:D4:F7:D5:24:12:29:7C:3A:7D:A0:9F:D0:B3:89:A8
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:38:60:19:3f:ae:9c:4a:ab:1e:b3:27:fe:65:0d:af:f7:
         85:7a:64:3c:74:06:7c:50:ad:f0:8a:82:f4:4d:29:c5:e7:de:
         fb:3f:30:7e:49:43:41:cc:25:00:3b:61:c8:02:ea:d2:30:81:
         d4:2f:42:fd:aa:e9:dd:53:d5:14:71:1b:84:6a:e9:bb:7c:af:
         7f:35:53:56:79:2b:f3:08:4b:6b:13:85:be:18:95:00:3d:15:
         fb:66:2d:c6:44:ae:51:12:5d:48:ed:a7:db:77:d2:6a:eb:17:
         b3:c5:88:69:d0:95:b8:b4:66:36:37:65:8f:37:f1:f7:48:65:
         4f:3c:25:ed:9b:70:31:d4:99:da:58:39:02:76:b6:f9:6a:73:
         da:d9:b9:70:e9:ed:21:80:03:fd:9d:e0:48:bb:19:42:e8:d7:
         91:3d:f3:c5:65:b9:79:59:4b:57:d1:dc:c1:4a:57:6b:62:c4:
         12:dd:1e:a8:07:c5:96:32:4a:8a:5e:1f:b6:a0:c3:43:53:45:
         d6:65:e2:e7:e2:24:0e:70:4e:26:ba:1e:4d:37:ab:43:97:c3:
         9f:0c:9d:06:03:91:e5:34:bf:0b:9a:1e:1c:f3:82:8b:d8:97:
         b3:7c:c2:1e:07:1a:cd:62:8d:06:df:2c:07:e0:a5:5e:db:29:
         5f:ff:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:53 2026 by rpki-client