Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa
File:                     3CD61DC8812D11ED9C04940EC4F9AE02.roa (raw, json)
Hash identifier:          XrZ4N/M1LSCE9VKWYDnBt6RYNFVGsidygZqs9QDvj7Y=
Subject key identifier:   9C:4E:88:99:09:95:E1:FF:73:0A:7D:19:D5:8A:F4:B8:94:F2:02:6D
Certificate issuer:       /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial:       025B
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:26:03 +0000
ROA not before:           Tue 05 Aug 2025 03:11:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150121
IP address blocks:        103.191.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
        Validity
            Not Before: Aug  5 03:11:16 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ea0b-cef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:14:6e:de:5b:02:0f:1f:f3:39:58:2e:d0:
                    31:50:5d:07:cb:c7:7a:69:6d:a9:33:28:bb:f1:67:
                    08:a4:be:a2:ff:38:48:a2:dd:a9:59:f3:e3:73:65:
                    90:d1:4e:6d:6b:83:d0:77:34:ae:a6:db:05:52:2d:
                    df:bb:af:ae:37:46:5f:ab:aa:f8:7b:ed:ea:ff:24:
                    62:81:41:20:fd:25:90:b2:f2:87:aa:c0:81:78:98:
                    31:95:07:af:1d:22:f8:e4:bc:78:6f:24:b2:c8:3c:
                    d1:da:d6:cc:f7:7b:6e:7b:4a:9e:29:20:cc:6f:3b:
                    71:dc:8a:3e:08:4b:d0:69:81:8b:8d:e4:aa:0b:7f:
                    c3:9d:3c:2f:06:b5:ab:f7:d6:5e:fc:03:c6:c1:ce:
                    41:ff:fd:0c:d2:29:63:c8:48:63:ef:4b:c4:d1:cc:
                    3c:03:25:ef:94:dc:9c:6f:40:9e:89:10:23:c0:1a:
                    93:b6:54:eb:2e:e8:db:f3:4c:de:39:b3:22:43:cf:
                    c9:5a:1f:5a:09:d9:2c:d4:06:a8:cf:ea:46:bc:2a:
                    7b:c9:7f:0c:e3:e1:d0:b7:c6:d9:56:49:2b:cf:b5:
                    3f:0d:09:57:ee:dd:df:37:3f:72:a5:02:4d:db:b4:
                    58:26:5d:6c:7a:46:c1:8e:11:1a:5a:be:9b:d5:89:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:88:99:09:95:E1:FF:73:0A:7D:19:D5:8A:F4:B8:94:F2:02:6D
            X509v3 Authority Key Identifier:
                keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/3CD61DC8812D11ED9C04940EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:32:f3:4b:d2:44:15:01:f5:69:14:89:e2:35:2f:a4:10:
         43:ed:5b:a6:3e:4f:02:24:25:f0:54:77:b0:f1:7f:20:77:03:
         cd:10:9d:dd:b5:3b:79:4b:b7:36:c3:22:ac:36:0e:85:16:05:
         d3:b4:a4:5a:9d:33:6f:40:63:bf:e7:36:b3:fb:68:34:0d:15:
         52:b4:a2:82:11:09:f7:e7:f5:39:e8:f3:51:04:b1:e3:81:3b:
         70:9b:e1:9a:e9:12:93:8f:d7:b5:7e:8c:e7:2b:4e:d6:d8:11:
         62:93:3c:a6:3a:23:91:b0:bf:78:49:da:5b:26:8d:ba:05:ce:
         57:83:91:da:f3:e9:a9:48:be:b7:b6:6d:bf:1d:8f:4b:0c:31:
         c3:bd:6c:46:2a:6f:c3:35:95:46:63:a7:81:1b:81:e8:f0:01:
         8c:e0:75:9c:b6:c1:d2:b4:e1:d6:cd:4e:e9:6c:0c:f4:5c:ff:
         d4:b0:2f:df:99:15:55:e3:37:bc:3a:1f:4b:2a:98:b5:47:ef:
         74:f9:b0:30:df:c3:5f:1b:4c:49:11:14:a4:bd:d2:08:10:ed:
         0f:14:16:fb:e7:3d:cc:5b:a1:83:ff:8c:3e:5d:79:cb:cd:e7:
         11:07:7e:ce:7b:88:76:18:89:fd:19:fa:7f:fa:66:b6:e4:7b:
         43:5d:7f:bf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkyREMxMTAvBgNVBAUTKDNFRDIyNkFFOTI3RjgzOTgxNzgwNTQ2Q0UzNjJGMzM2
OUVEQjI0QjMwHhcNMjUwODA1MDMxMTE2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWEwYi1jZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0oUbt5bAg8f8zlYLtAxUF0Hy8d6aW2pMyi78WcIpL6i/zhIot2pWfPjc2WQ
0U5ta4PQdzSuptsFUi3fu6+uN0Zfq6r4e+3q/yRigUEg/SWQsvKHqsCBeJgxlQev
HSL45Lx4bySyyDzR2tbM93tue0qeKSDMbztx3Io+CEvQaYGLjeSqC3/DnTwvBrWr
99Ze/APGwc5B//0M0iljyEhj70vE0cw8AyXvlNycb0CeiRAjwBqTtlTrLujb80ze
ObMiQ8/JWh9aCdks1Aaoz+pGvCp7yX8M4+HQt8bZVkkrz7U/DQlX7t3fNz9ypQJN
27RYJl1sekbBjhEaWr6b1YkzLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJxOiJkJ
leH/cwp9GdWK9LiU8gJtMB8GA1UdIwQYMBaAFD7SJq6Sf4OYF4BUbONi8zae2ySz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTJEQy81NjMyODdGNjgx
MjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1Z1hnRlJzNDJMek5wN2JK
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0SW1ycEpfZzVnWGdGUnM0Mkx6TnA3YkpMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjkyREMvNTYzMjg3RjY4MTI5MTFFREE1QjE1MDczQzRGOUFFMDIvM0NENjFEQzg4
MTJEMTFFRDlDMDQ5NDBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ79EMA0GCSqGSIb3DQEBCwUAA4IBAQAzwjLzS9JEFQH1aRSJ4jUv
pBBD7VumPk8CJCXwVHew8X8gdwPNEJ3dtTt5S7c2wyKsNg6FFgXTtKRanTNvQGO/
5zaz+2g0DRVStKKCEQn35/U56PNRBLHjgTtwm+Ga6RKTj9e1foznK07W2BFikzym
OiORsL94SdpbJo26Bc5Xg5Ha8+mpSL63tm2/HY9LDDHDvWxGKm/DNZVGY6eBG4Ho
8AGM4HWctsHStOHWzU7pbAz0XP/UsC/fmRVV4ze8Oh9LKpi1R+90+bAw38NfG0xJ
ERSkvdIIEO0PFBb75z3MW6GD/4w+XXnLzecRB37Oe4h2GIn9Gfp/+ma25HtDXX+/
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:24 2026 by rpki-client