Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa
File:                     D5D64BB0FB6811EC863B8150C4F9AE02.roa (raw, json)
Hash identifier:          Uh7RounuLjLEs7PZV85Xjp+xSucg2VsyDoPk68Nkps8=
Subject key identifier:   A1:5D:F0:A4:4B:C3:B9:91:95:99:A0:B1:3B:FC:F6:7E:51:E4:C4:B2
Certificate issuer:       /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial:       033B
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:22:41 +0000
ROA not before:           Mon 03 Feb 2025 01:35:37 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     133212
IP address blocks:        103.224.104.0/24 maxlen: 24
                          2001:df0:ed40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
                          rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
        Validity
            Not Before: Feb  3 01:35:37 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3e941-91e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:ab:34:bf:d4:30:f8:21:62:30:7e:b5:ef:
                    a0:5a:49:8c:59:7d:04:c4:ff:14:f3:90:1b:7b:a4:
                    88:bb:41:91:cc:76:fa:d1:74:0b:a1:74:1f:8e:ef:
                    c3:53:9d:5d:74:a2:dd:17:76:69:8a:b8:fe:71:8f:
                    85:b2:a5:ce:5d:96:d0:ec:e7:d0:03:5f:3d:52:55:
                    f1:73:58:25:1b:d4:b7:17:3e:f8:2f:69:59:ba:2a:
                    05:3b:21:2d:de:7a:71:8b:69:87:15:b8:37:a5:b0:
                    1d:ab:61:d9:5c:47:c2:48:cb:ec:cb:99:a9:6d:74:
                    35:e0:2b:11:e9:d1:42:b8:18:78:c5:ee:f4:6a:62:
                    76:bb:3f:10:b2:a2:4e:e1:e9:74:a7:75:bf:7b:74:
                    1c:65:46:d3:dc:04:84:30:25:76:f7:18:57:b8:3e:
                    99:ca:d3:99:43:31:4d:d9:79:6c:b7:ed:c7:7e:e3:
                    ab:70:b0:d3:78:08:56:aa:67:1c:21:b7:43:87:44:
                    78:89:f4:00:2d:17:78:de:1b:69:0f:39:21:c9:7a:
                    57:44:e5:f7:3a:68:5b:41:ca:ce:72:d8:78:f7:4d:
                    5c:fc:07:2b:1a:73:dd:13:d6:66:06:93:ac:de:81:
                    f1:1a:a0:8a:4d:1b:bc:b9:c9:82:59:1f:7b:81:b7:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:F0:A4:4B:C3:B9:91:95:99:A0:B1:3B:FC:F6:7E:51:E4:C4:B2
            X509v3 Authority Key Identifier:
                keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.104.0/24
                IPv6:
                  2001:df0:ed40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:1f:f9:ab:99:35:46:36:db:ec:7d:c8:64:b4:f4:e7:d5:
         c4:d5:85:f2:fc:9f:c0:21:a1:09:e2:8d:be:e1:db:4d:bf:ae:
         01:43:ec:4d:62:be:25:43:36:4b:0d:da:de:c6:bd:79:64:b6:
         06:11:ba:da:49:67:8c:d9:54:11:e0:1f:d0:80:1f:11:5b:60:
         e2:c4:73:6d:d2:be:e0:d8:2d:89:66:99:21:d7:0d:0c:5d:91:
         ec:55:1d:3c:40:a1:b9:f4:06:e4:08:4c:30:c2:d4:b5:03:6d:
         87:d6:76:d6:9d:ff:ef:51:b5:9e:a5:ae:4e:ce:e4:94:14:7b:
         29:a6:9d:f4:da:d3:03:8d:59:9e:f9:36:9b:e5:d6:66:8f:ed:
         4e:ad:df:68:8a:bb:75:db:d2:15:0a:a6:32:bb:97:b8:2d:cf:
         60:bd:d5:36:25:c2:8e:37:60:f8:09:b1:7c:24:0f:8d:7d:8b:
         ac:64:26:2f:0c:ed:63:36:c7:02:08:ec:ed:5b:e4:42:17:03:
         d3:29:ec:71:25:4f:c8:86:af:47:4c:cc:c1:c8:98:e4:f6:47:
         80:22:d2:b3:ce:e6:b0:aa:2b:c5:d3:ca:10:a2:5b:f6:ff:c5:
         bf:9e:9a:f6:9f:ee:3f:4b:ff:ba:a1:41:f2:77:7f:ae:74:6f:
         af:b0:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:01 2026 by rpki-client