Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa
File:                     C9811862D9C311F09C41289D70D3641D.roa (raw, json)
Hash identifier:          MqlUvUemQZaIaUMEF8dOrNDnhzZfz8Yjj783as3wBls=
Subject key identifier:   C6:D0:96:4E:E0:68:F8:74:31:23:6E:3A:7E:0B:40:2E:04:0F:1F:E8
Certificate issuer:       /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Certificate serial:       34
Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa
Signing time:             Sun 01 Mar 2026 05:58:14 +0000
ROA not before:           Mon 15 Dec 2025 14:38:57 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        144.79.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
        Validity
            Not Before: Dec 15 14:38:57 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d576-04a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:11:6f:68:04:c5:8e:2f:4e:d5:a3:e5:82:
                    f1:2f:56:b5:ed:fc:b5:e7:d0:7f:9e:d7:c1:97:50:
                    01:71:4e:6a:4c:27:4d:32:15:5f:3b:41:d0:6a:69:
                    d5:50:36:d9:15:ab:21:a1:0a:c9:ff:5d:7b:81:2e:
                    52:cf:2e:e3:2d:9a:13:d3:e3:81:cf:28:5b:5f:dd:
                    b1:a1:2d:87:88:ac:bb:26:9d:05:2d:ca:b1:ef:30:
                    3b:c5:35:e1:c1:e2:70:bb:12:70:6c:94:11:a2:f4:
                    6b:7d:2d:38:68:86:c4:4c:e2:e7:f7:f1:fd:aa:77:
                    7d:13:11:0a:57:eb:c5:16:a9:79:3a:9d:15:9f:73:
                    00:87:43:69:b1:22:e5:10:df:64:00:7f:40:69:e3:
                    77:c1:79:e6:51:fe:75:56:3d:ce:bd:05:a6:bf:da:
                    2f:3a:eb:9e:7e:08:ee:26:99:9d:de:e2:b6:a2:92:
                    73:33:24:b8:c5:76:fa:e6:27:86:46:28:f0:74:82:
                    14:1d:14:af:e7:f0:f0:25:f6:e9:e7:4d:4c:75:41:
                    29:7b:b0:f1:79:80:5d:df:25:e1:8b:23:8b:bf:b9:
                    6f:42:de:6c:bf:cc:7a:a6:aa:45:9a:c0:01:41:1b:
                    08:85:1b:e9:0e:53:92:bf:7d:81:ae:af:77:d5:a4:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:96:4E:E0:68:F8:74:31:23:6E:3A:7E:0B:40:2E:04:0F:1F:E8
            X509v3 Authority Key Identifier:
                keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:95:28:98:42:6b:a0:80:f0:db:9a:1e:14:b5:fb:a2:23:
         6b:bd:df:3e:a3:f2:ce:f3:ae:e1:75:68:88:20:58:61:cd:4c:
         9e:89:bb:5c:74:09:b6:b2:d0:b9:2e:89:91:3e:e7:d6:6f:70:
         80:2e:e3:9a:ff:4a:b1:80:3c:03:48:0a:8e:d5:f0:a8:5e:bb:
         9d:90:ca:c9:6c:d5:52:e3:95:58:ec:b0:5d:72:27:31:71:1c:
         9c:04:ef:27:a3:30:1e:bd:bc:2c:4b:1c:6c:3c:2c:f6:0e:91:
         56:80:59:91:b0:e7:4c:bd:b0:b4:b4:95:1e:06:82:45:c8:6a:
         a3:b2:f2:d5:4f:50:45:36:c8:0c:29:a0:fc:34:42:2a:e2:06:
         be:d3:8f:8d:1e:93:d5:37:0b:71:6b:17:61:0e:59:09:bf:cf:
         2f:20:9a:f9:6a:3c:7f:83:6e:25:17:d9:72:2a:e2:a0:9e:a4:
         e6:27:11:d0:4c:c5:99:04:86:80:68:9d:d0:80:82:1a:25:ea:
         bf:98:10:63:33:1e:5f:ee:88:c5:84:af:ae:44:b2:ac:d5:42:
         a5:9c:05:4d:82:e4:42:46:c6:45:84:81:47:73:6f:3b:68:74:
         89:bf:0a:0a:b8:fb:46:6b:27:48:3d:79:e2:c8:12:ac:1d:2b:
         18:d6:9b:d1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OUU1ODExMC8GA1UEBRMoQjMwRjk2MzAyNTRFQTdFNDI5MURGNkZDNjRBNjk4OTgx
ODM3NUZDMjAeFw0yNTEyMTUxNDM4NTdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNTc2LTA0YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMBRFvaATFji9O1aPlgvEvVrXt/LXn0H+e18GXUAFxTmpMJ00yFV87QdBqadVQ
NtkVqyGhCsn/XXuBLlLPLuMtmhPT44HPKFtf3bGhLYeIrLsmnQUtyrHvMDvFNeHB
4nC7EnBslBGi9Gt9LThohsRM4uf38f2qd30TEQpX68UWqXk6nRWfcwCHQ2mxIuUQ
32QAf0Bp43fBeeZR/nVWPc69Baa/2i86655+CO4mmZ3e4raiknMzJLjFdvrmJ4ZG
KPB0ghQdFK/n8PAl9unnTUx1QSl7sPF5gF3fJeGLI4u/uW9C3my/zHqmqkWawAFB
GwiFG+kOU5K/fYGur3fVpOCJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUxtCWTuBo
+HQxI246fgtALgQPH+gwHwYDVR0jBBgwFoAUsw+WMCVOp+QpHfb8ZKaYmBg3X8Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0U5RDNGQzk4RDY4
OTExRjBBMkZBMzcwMzZDRDM2NDFEL3N3LVdNQ1ZPcC1RcEhmYjhaS2FZbUJnM1g4
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvc3ctV01DVk9wLVFwSGZiOFpLYVltQmczWDhJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUU1OC9FOUQzRkM5OEQ2ODkxMUYwQTJGQTM3MDM2Q0QzNjQxRC9DOTgxMTg2MkQ5
QzMxMUYwOUM0MTI4OUQ3MEQzNjQxRC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACQT2cwDQYJKoZIhvcNAQELBQADggEBAJKLlSiYQmuggPDbmh4Utfui
I2u93z6j8s7zruF1aIggWGHNTJ6Ju1x0Cbay0LkuiZE+59ZvcIAu45r/SrGAPANI
Co7V8Kheu52Qysls1VLjlVjssF1yJzFxHJwE7yejMB69vCxLHGw8LPYOkVaAWZGw
50y9sLS0lR4GgkXIaqOy8tVPUEU2yAwpoPw0QiriBr7Tj40ek9U3C3FrF2EOWQm/
zy8gmvlqPH+DbiUX2XIq4qCepOYnEdBMxZkEhoBondCAghol6r+YEGMzHl/uiMWE
r65EsqzVQqWcBU2C5EJGxkWEgUdzbztodIm/Cgq4+0ZrJ0g9eeLIEqwdKxjWm9E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:14 2026 by rpki-client