Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
File:                     727EECD2678811EF99602F53C4F9AE02.roa (raw, json)
Hash identifier:          6TAMqIs4qomSbsapyEUsBhiHgXRJjHfMLf5Z2Vrii0o=
Subject key identifier:   83:C6:B9:C5:9D:97:AB:51:49:B3:30:AE:68:0B:56:D0:DB:51:85:D3
Certificate issuer:       /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial:       0864
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:36:30 +0000
ROA not before:           Tue 26 Aug 2025 21:31:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140948
IP address blocks:        103.153.196.0/23 maxlen: 23
                          103.153.196.0/24 maxlen: 24
                          103.153.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
                          rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
        Validity
            Not Before: Aug 26 21:31:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4089e-b5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:f7:3a:79:b0:14:64:c5:76:32:e8:49:0e:
                    7f:24:89:3a:32:e0:25:6d:3c:73:e5:95:0c:3a:ed:
                    ce:69:46:1b:17:42:91:24:a3:82:9b:fb:85:d3:34:
                    1f:f7:18:f1:c4:ae:8c:04:c4:4e:d2:b3:d6:38:94:
                    13:d0:1f:c5:52:27:32:8f:64:54:cc:eb:d3:d7:3b:
                    ed:bc:48:b9:f7:c3:e5:22:69:8b:11:76:e9:ae:5c:
                    83:83:82:28:0c:81:33:a6:ff:a8:c0:c5:fe:ea:bc:
                    b9:5a:d0:8f:d7:6a:e0:31:7f:8d:fe:f5:d0:3d:42:
                    e3:a6:d7:1d:11:2a:50:48:c7:65:b2:fa:58:db:29:
                    b9:d9:e5:b7:73:59:17:ce:04:ad:06:9d:9a:07:90:
                    72:40:dc:81:95:8b:a5:d4:05:66:08:ef:0a:f3:5f:
                    05:43:fb:4e:3a:b8:d5:99:37:d7:5b:1b:76:3d:2a:
                    52:ee:85:eb:24:01:13:a6:03:51:a7:77:6d:0d:aa:
                    28:5e:5c:ba:5f:b0:3d:69:fc:c1:1a:02:f3:1c:5d:
                    0f:2d:79:46:da:34:8f:da:15:8d:2d:4a:95:7a:b0:
                    2c:60:6e:15:d5:32:34:ab:4a:57:c7:82:ce:90:55:
                    73:0c:7e:3b:2f:d3:0b:16:07:79:3c:4e:7c:a7:24:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C6:B9:C5:9D:97:AB:51:49:B3:30:AE:68:0B:56:D0:DB:51:85:D3
            X509v3 Authority Key Identifier:
                keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:67:f9:aa:0d:8e:5f:ba:7d:97:b1:b4:11:93:14:f6:3a:68:
         f8:cb:fb:88:79:1a:4d:bd:db:6f:49:a1:3c:fe:77:d7:8c:bc:
         7b:e0:fa:68:fb:22:69:27:bc:b9:9d:5a:7a:59:0e:c1:4b:1b:
         22:90:19:cd:c5:3e:15:a5:4e:ca:2d:7f:e9:93:27:55:b8:12:
         5d:87:38:ce:7d:81:fb:06:1a:6d:86:7d:a9:79:40:8c:13:f4:
         20:08:b8:85:6b:f3:91:2a:49:f6:f4:07:6a:d3:78:3f:f4:30:
         d7:73:59:67:10:1d:ce:2f:fd:9f:a5:9b:8d:39:6e:11:d9:72:
         e1:e5:85:45:11:9d:66:27:32:bd:18:b3:df:a4:08:73:16:18:
         68:00:b7:30:fa:c2:50:03:c5:a4:97:9a:17:41:cb:e7:39:47:
         70:47:34:8e:d6:6c:c6:45:65:34:0e:3c:c3:93:d1:e2:5c:3e:
         5a:67:6d:3c:7d:ac:46:e2:2b:a1:0b:d2:5f:88:a3:66:35:00:
         14:3c:50:e6:8e:8e:2d:52:e8:ec:f1:b3:36:2d:24:83:ad:79:
         ba:8a:78:ac:26:4e:63:72:d0:ea:e6:14:b3:28:44:c7:4d:a2:
         0e:e7:62:27:5f:fb:2a:a4:02:85:03:99:77:27:78:27:72:7e:
         5e:db:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:57 2026 by rpki-client