Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
File:                     DFCE0CFC387311EBA0AC593EC4F9AE02.roa (raw, json)
Hash identifier:          thgZ084FdnfIjYuqblOzz/1teNd07/KOSxYxuCVdQEM=
Subject key identifier:   A5:C0:D1:35:E4:3D:D1:53:D9:03:93:80:32:2C:3B:7C:C0:6C:0D:74
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       07B4
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:53:55 +0000
ROA not before:           Fri 30 Jan 2026 21:18:36 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     141447
IP address blocks:        103.159.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: Jan 30 21:18:36 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a45303-5fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:f7:b3:62:6c:02:e5:a1:40:23:5a:c2:36:
                    46:00:32:53:2d:47:12:de:ef:cd:cf:d7:6b:eb:17:
                    47:f2:2d:0c:b4:23:02:8e:e7:dd:77:3a:32:fa:1a:
                    62:2c:12:96:83:42:cc:e3:86:33:e1:8e:e8:f3:cd:
                    22:6e:22:2e:d4:85:46:c4:22:07:30:d7:53:7f:c4:
                    dd:75:63:d0:10:75:c6:ef:63:ee:bf:a4:ac:30:65:
                    f4:57:f7:4c:f3:b0:15:5f:1c:9d:77:2e:17:c8:f1:
                    1f:db:da:36:32:99:86:84:cf:a9:bd:3c:f4:a3:23:
                    08:44:59:b1:87:22:a5:c9:cd:7b:46:00:fd:17:e9:
                    ef:d8:46:a2:7e:df:76:e5:f6:7f:0b:2f:5b:53:ae:
                    b3:23:89:5f:42:b4:ae:43:35:32:b1:fd:a9:87:d1:
                    47:e0:8c:43:33:26:2f:45:e4:8b:68:0c:df:12:be:
                    df:f1:cf:61:f0:73:6a:71:68:7a:45:89:0d:4a:64:
                    ee:ce:84:9e:80:c9:90:5e:3e:0d:0b:02:46:cc:a5:
                    cc:4d:39:e7:34:02:5c:3b:6c:a8:2b:cf:87:4b:16:
                    a4:23:72:b2:e0:89:cf:43:3d:2d:7b:8b:ad:4a:4a:
                    3c:07:92:8e:bd:82:41:e4:11:bd:50:66:fb:87:73:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:D1:35:E4:3D:D1:53:D9:03:93:80:32:2C:3B:7C:C0:6C:0D:74
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:81:e5:59:bd:00:34:27:5e:4d:4b:ae:c2:96:06:32:66:98:
         05:28:88:d9:06:25:0c:ef:28:72:93:86:7f:35:15:9a:ef:83:
         04:81:05:76:10:c9:a7:d5:df:27:5c:84:31:15:d9:97:e3:9e:
         af:09:c2:ab:f6:fc:43:9f:01:9b:d2:3d:0a:ae:1c:bb:ac:f2:
         cc:e1:00:1b:4d:25:6c:11:79:ad:c4:f8:ec:c7:fb:e6:58:03:
         7a:00:4d:3a:8e:a0:e3:9c:ea:b0:88:a1:24:b5:7c:40:73:c5:
         9a:af:66:bb:43:15:d9:cc:b6:29:94:00:0a:3d:dc:fe:66:d1:
         93:60:b8:fd:71:1f:9d:e2:5f:d6:17:ab:71:de:a0:e0:fb:30:
         30:f9:18:df:2a:1e:48:24:2b:07:cf:26:4c:6a:8b:b3:72:9f:
         cc:0a:1e:51:9d:ac:4e:ee:be:57:b7:dc:5a:0e:b3:26:83:1c:
         32:99:95:ba:8b:b5:5c:6b:a6:88:e2:f1:a0:c9:76:5c:97:df:
         e0:44:d3:ae:e4:c8:93:7a:3b:48:a1:9c:08:fc:a3:53:e5:74:
         a0:f1:85:8d:72:a6:51:ca:30:0a:11:62:48:ed:31:fb:2a:12:
         23:72:e5:71:50:fc:e4:a7:5c:0b:bf:ac:d9:ad:29:29:50:72:
         11:e5:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:15 2026 by rpki-client