Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/B968820A15E911F1A71181CD1E3D8C67.roa
File:                     B968820A15E911F1A71181CD1E3D8C67.roa (raw, json)
Hash identifier:          lzUBR9PZzGF4F/9Oay0+bj2HpXMAev4YS+9Bp7TZ4YA=
Subject key identifier:   3D:B6:20:ED:62:5B:67:A9:D5:F0:01:93:26:A6:FF:E5:5F:F9:43:05
Certificate issuer:       /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
Certificate serial:       0727
Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/B968820A15E911F1A71181CD1E3D8C67.roa
Signing time:             Mon 02 Mar 2026 03:41:41 +0000
ROA not before:           Mon 02 Mar 2026 03:41:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134734
IP address blocks:        103.109.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl
                          rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD544, serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
        Validity
            Not Before: Mar  2 03:41:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a506f5-3122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:cc:4c:b5:27:ea:93:29:d3:9a:54:86:f9:
                    5d:59:0d:9a:8d:4e:32:f5:55:a2:54:6f:7d:7f:e2:
                    a2:4b:e5:67:cb:24:10:10:04:01:47:eb:9b:98:51:
                    fc:a9:54:ab:61:30:3f:d5:63:10:19:38:2f:51:8c:
                    a1:15:8e:b3:9b:97:b2:85:66:97:18:a3:aa:26:19:
                    6b:f6:1e:ad:18:b9:5e:54:8f:13:c3:7e:b3:e7:65:
                    3d:79:5e:fb:32:7f:7d:a9:b4:39:85:a2:bc:ae:92:
                    e5:88:b6:26:77:d4:eb:cf:fc:4b:ec:64:b2:2f:26:
                    b7:16:73:9e:9c:82:90:84:dc:87:b5:5e:b6:18:3b:
                    ea:93:36:ba:63:85:89:df:db:09:bf:05:1d:3a:49:
                    bd:40:4b:84:91:1a:ca:63:cf:16:3e:af:83:3a:70:
                    fb:b6:18:fa:38:a7:4b:40:e0:c3:ba:5a:88:8a:60:
                    cd:15:51:30:4b:e5:5d:0d:ce:2e:f7:f2:5a:38:35:
                    09:f6:8e:1d:3f:67:84:3d:50:be:ad:ff:e6:ce:21:
                    34:a2:a9:e9:ab:ba:32:0f:7c:61:53:41:53:06:49:
                    da:bb:ee:91:8d:9e:b4:bc:f8:0a:50:4e:56:f7:92:
                    e2:f4:fb:1e:9e:26:43:15:51:db:b6:ce:2f:4d:6b:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:20:ED:62:5B:67:A9:D5:F0:01:93:26:A6:FF:E5:5F:F9:43:05
            X509v3 Authority Key Identifier:
                keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/B968820A15E911F1A71181CD1E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:44:5e:f9:1d:16:1a:b7:a1:3c:48:2f:ad:66:f2:22:9a:
         23:6f:5b:42:45:39:82:02:28:78:98:f1:29:e1:11:8b:7a:52:
         02:cf:96:91:1e:a6:61:4d:1d:3b:b9:72:37:07:19:46:12:0a:
         20:9f:50:4d:25:c4:33:4a:9d:5f:62:aa:24:c1:61:fe:58:2e:
         e2:23:ab:d9:7b:be:a8:ba:55:0a:ad:70:3c:de:26:e6:57:14:
         05:13:82:51:07:50:f9:de:1c:6f:f4:47:35:d7:ec:72:be:b9:
         1e:3f:77:99:05:b2:30:a2:c8:9f:c2:2c:67:e9:1b:71:3b:ec:
         01:42:08:d6:9e:c9:9b:2a:98:f0:74:d0:cd:5d:b2:2f:38:55:
         64:67:69:f2:d5:f4:be:a3:cb:e0:9c:b1:0f:32:a5:77:9f:40:
         98:56:c7:22:25:98:73:8c:ea:42:75:6e:ad:99:fc:1e:07:4e:
         71:0e:31:2e:ad:85:8b:cb:36:35:29:16:0e:d0:f6:52:f1:14:
         8f:d6:3b:a4:a0:88:47:b9:db:b2:dc:e1:66:6b:9c:49:7d:0b:
         39:38:96:73:8a:7f:08:6e:8e:2b:a3:77:46:2a:2a:77:4f:81:
         35:ec:45:1c:28:4c:e7:be:f5:c2:1e:67:2c:6a:4c:25:21:26:
         e1:c2:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:08 2026 by rpki-client