Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa
File:                     01103988FB5911EF8B32E613C4F9AE02.roa (raw, json)
Hash identifier:          8EV1VLtLBlEaJHQ3U9D0VT0g5wensyUoRtgw8FYCQZo=
Subject key identifier:   24:88:AA:E5:51:3F:D7:9E:5A:36:54:23:49:0D:75:88:64:C3:BD:1D
Certificate issuer:       /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
Certificate serial:       C1
Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:17:17 +0000
ROA not before:           Thu 05 Feb 2026 16:25:40 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135357
IP address blocks:        103.17.116.0/22 maxlen: 22
                          103.17.116.0/24 maxlen: 24
                          103.17.117.0/24 maxlen: 24
                          103.17.118.0/24 maxlen: 24
                          103.17.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl
                          rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
        Validity
            Not Before: Feb  5 16:25:40 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4203d-0cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:71:99:dc:09:c2:58:e7:60:8e:87:5e:12:
                    fc:92:d6:20:18:b0:b7:19:b5:2d:06:9d:8f:b1:c1:
                    91:d6:8f:f5:7f:39:8f:25:22:58:ba:96:27:26:b2:
                    fe:6f:3e:cc:ba:81:54:9c:a3:fe:f0:36:7d:38:fb:
                    1f:85:26:29:47:31:f7:3d:0e:ed:9e:f4:37:98:0a:
                    72:48:de:f5:9e:f5:1e:77:b9:d2:4f:45:44:53:6c:
                    53:c6:88:7b:43:aa:c3:4f:11:2c:c2:5c:c9:0e:36:
                    39:7e:34:c5:1b:ea:8b:e1:6c:67:40:f8:6b:69:62:
                    2a:22:8b:82:ec:e5:06:a9:21:04:da:e2:a8:c0:7d:
                    e2:9b:b5:ed:a6:13:91:35:f7:ed:f9:b6:83:6f:1b:
                    de:90:1e:ab:94:54:83:1d:7c:0b:e8:12:d5:4d:d5:
                    07:f6:f0:58:28:98:c7:1b:86:73:ba:7d:3a:c0:7d:
                    ab:9d:d6:5d:10:55:6c:c2:a8:51:20:d7:9f:c0:f1:
                    11:d2:1d:0f:13:0f:e9:9a:7f:0c:8f:06:c8:fd:38:
                    27:6f:95:37:74:68:6e:7d:28:3f:75:83:af:6a:9e:
                    7e:e3:09:51:5e:d9:77:04:0d:ee:72:bc:41:9b:d8:
                    1c:fc:b2:79:89:0a:d7:57:82:3e:6e:90:ec:86:9f:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:AA:E5:51:3F:D7:9E:5A:36:54:23:49:0D:75:88:64:C3:BD:1D
            X509v3 Authority Key Identifier:
                keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:57:55:ef:2d:b2:21:4a:b7:f2:55:4d:5f:b9:c2:b7:4f:
         97:98:a7:0c:02:6d:2c:1a:77:da:8a:9f:8a:6b:3a:62:4b:d6:
         f4:4d:9f:b2:f3:70:3c:e8:5c:14:7e:de:60:5a:49:fe:b1:60:
         40:70:6c:5a:c2:ab:57:31:da:b8:11:00:a6:d1:f9:68:fd:4b:
         08:df:68:7a:ad:db:8b:56:77:33:30:0f:36:77:89:b4:00:49:
         c9:ff:de:6c:d1:8a:73:71:aa:45:7f:e8:ae:82:52:6b:1e:08:
         7f:84:be:f2:c6:9c:62:cf:f9:60:89:54:0f:7f:da:9f:27:4c:
         bd:92:3f:6a:05:7e:2b:ad:c1:93:a4:ef:48:b5:e4:23:fc:7e:
         4f:4c:f9:1c:76:4d:7f:d1:9c:53:fc:c7:75:07:bb:a1:61:f5:
         6c:ba:e0:3a:4e:2d:60:4e:5f:6a:1e:5b:0c:d9:c1:da:05:70:
         90:2d:23:6c:bb:1c:8b:83:c1:de:97:2f:67:46:1a:c3:40:89:
         2c:b5:ad:1b:ea:44:e7:80:cf:27:6e:85:c1:0b:ba:e7:6a:2a:
         ec:13:d4:94:95:55:b3:4f:1f:1d:8b:5f:cd:59:b7:c0:ae:5d:
         a8:b2:fb:7e:2a:f6:cc:a6:41:34:ab:de:0b:44:f4:ff:0b:cd:
         a9:84:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:08 2026 by rpki-client