Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/933DE524C2B811EEAA1FD486C4F9AE02.roa
File:                     933DE524C2B811EEAA1FD486C4F9AE02.roa (raw, json)
Hash identifier:          WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=
Subject key identifier:   07:0F:B8:1B:A7:DE:39:AB:0A:F6:CE:19:65:DE:D0:05:3B:C5:C8:87
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C22
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/933DE524C2B811EEAA1FD486C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:57:06 +0000
ROA not before:           Fri 02 May 2025 19:27:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139841
IP address blocks:        103.112.204.0/24 maxlen: 24
                          103.112.206.0/24 maxlen: 24
                          103.112.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: May  2 19:27:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a445b2-51f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:4b:f0:1c:b1:d8:82:ac:ef:d1:d2:eb:09:
                    ac:8e:41:55:c2:f7:7b:ee:52:da:26:ed:69:24:04:
                    cc:a8:68:2b:ce:56:7c:a5:3a:c5:fc:68:6e:d4:c6:
                    43:c3:6b:9c:9f:bb:25:f5:dc:a8:d2:54:38:09:97:
                    8d:9a:d8:85:91:b1:ed:73:04:52:af:31:b0:d7:9d:
                    12:1a:6c:09:9d:ee:57:13:1a:f2:d2:6d:b1:bb:73:
                    7e:1f:b6:45:50:6d:9e:65:98:0d:e2:ff:ac:10:78:
                    bb:6b:6c:84:15:05:35:96:d2:3c:88:87:12:bc:f8:
                    3c:db:9c:96:1d:ea:a5:3e:d4:a2:8a:4a:b9:c8:9b:
                    ac:fe:32:8d:b3:e0:94:a5:43:85:a9:ee:e3:88:e0:
                    b4:34:5a:78:c6:6a:27:88:6a:fb:84:fd:5f:56:58:
                    c8:34:44:ff:d1:4d:46:14:22:e6:e4:26:51:ac:5e:
                    0b:9d:2a:a3:34:f5:1c:09:0d:98:45:93:cf:4d:39:
                    e0:83:e0:ef:be:d7:9b:9d:2e:0b:a7:64:22:14:c3:
                    0f:dc:f4:e7:ad:85:c9:ec:ee:20:86:8d:f1:40:90:
                    f5:25:56:42:53:a5:3b:7b:13:5a:a0:f9:ed:7b:49:
                    51:bd:5b:a6:73:46:41:91:ac:d0:f5:e9:b8:24:5e:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:B8:1B:A7:DE:39:AB:0A:F6:CE:19:65:DE:D0:05:3B:C5:C8:87
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/933DE524C2B811EEAA1FD486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.204.0/24
                  103.112.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:83:b2:5e:95:6b:fd:99:b2:9f:bc:2c:c0:b8:fb:95:6d:
         72:cb:a1:c7:33:e7:a9:59:ee:c3:e9:0b:0c:c9:53:54:e1:7a:
         2e:ec:c3:e2:ec:fb:58:1b:bd:fc:a4:78:df:0e:53:fc:d1:42:
         9d:61:87:1b:65:4d:7e:31:8d:6e:59:84:72:98:a9:eb:0d:b4:
         d2:5b:46:8e:1e:f0:80:82:7a:db:b4:be:12:53:05:6c:d1:4a:
         ca:33:f4:15:d3:64:44:af:2b:4b:5e:07:b8:cb:6a:01:c0:4f:
         35:8b:9d:43:c2:f0:a4:0e:da:84:5e:c5:4f:d9:52:06:2f:a8:
         a5:84:fc:68:08:d3:09:48:c2:06:8b:83:10:ac:08:4a:27:7a:
         7d:90:2b:61:37:0a:1e:7b:4c:7a:b9:ae:aa:c0:35:02:5e:18:
         f9:37:8f:a4:c6:fa:d4:ce:9c:ee:85:b6:7f:d9:bb:ec:04:d0:
         a8:90:1f:93:3a:57:3e:81:61:32:83:22:19:b6:f3:3e:e6:3c:
         0b:f5:de:78:40:da:d1:39:6a:0c:4f:43:ea:85:5c:1b:1e:2a:
         dc:f3:66:dc:38:dd:ce:93:21:45:f4:8c:02:84:39:16:65:9e:
         04:d9:f9:c9:fb:6c:c2:76:4c:29:12:60:4a:f1:eb:31:64:b5:
         b3:c1:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:17 2026 by rpki-client