Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa
File:                     5CE70ACC074E11ED99CF6642C4F9AE02.roa (raw, json)
Hash identifier:          q+aeOJgllUvaXxmahDweOCiCHQM4aB3x3nz/0WBTZiY=
Subject key identifier:   3A:96:D0:23:F7:C1:DE:47:F6:92:BE:9F:C1:45:84:1F:63:F1:23:47
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       031C
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:05:20 +0000
ROA not before:           Sat 08 Nov 2025 23:46:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63843
IP address blocks:        103.41.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: Nov  8 23:46:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42b80-abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:59:d5:a9:cb:8f:02:04:7d:b1:b1:e8:1e:
                    de:54:52:bc:5e:87:1e:47:40:de:0c:43:56:73:4a:
                    2d:d6:08:92:dc:89:da:b1:4c:0d:09:05:fc:01:df:
                    81:7e:0a:dd:35:1b:19:dc:e0:51:63:11:49:ef:1c:
                    85:9e:da:f9:c9:c6:83:e7:cd:74:cf:f9:1a:44:08:
                    86:dc:62:3a:79:4d:13:3e:81:b3:4e:45:00:2b:4a:
                    a4:f7:ea:dd:8a:59:53:2d:51:db:98:1a:c7:17:bf:
                    42:28:21:0d:17:54:c1:6e:53:f6:16:26:76:b9:38:
                    10:6a:fd:34:5c:66:a0:f7:34:84:25:c5:7d:12:a0:
                    8f:b3:de:13:c4:76:4f:14:e7:42:da:8a:44:69:77:
                    c0:1e:ff:52:d0:25:8a:96:81:18:dc:9d:1a:c2:99:
                    77:58:e8:15:7c:86:f2:2e:4e:35:eb:69:f6:3d:be:
                    32:6d:b8:cd:c6:30:c2:91:bc:41:d7:92:0c:ac:ac:
                    68:aa:d7:fe:97:2f:e0:87:21:46:fd:c0:49:36:56:
                    86:a3:41:6c:c5:56:2b:0b:08:47:ff:7a:b7:87:e5:
                    99:ee:7b:e4:a4:da:83:9e:1d:7a:7b:93:fd:85:2b:
                    de:4b:a0:4b:75:77:30:bd:ac:ef:94:3e:73:5a:72:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:D0:23:F7:C1:DE:47:F6:92:BE:9F:C1:45:84:1F:63:F1:23:47
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:06:56:ef:f1:ef:5e:88:f7:66:02:aa:7f:38:ac:18:1d:b2:
         53:a9:13:da:2a:f7:37:f5:5c:24:f0:74:82:cd:92:cd:4b:8b:
         ab:88:a8:ef:40:0a:ff:83:a2:49:16:77:02:1e:43:e6:56:4b:
         b2:28:96:b9:b9:12:90:5f:a7:10:0c:8b:ef:40:28:00:67:c8:
         e8:bc:25:af:17:99:9b:85:00:30:87:c7:55:6d:20:5a:d8:f2:
         6b:3e:95:0d:a0:fa:03:74:a1:85:1d:8d:0c:ad:1a:de:07:36:
         af:5f:0c:82:b6:bb:c8:ed:d6:88:88:4a:4e:f5:9b:73:68:a5:
         d6:86:d8:e6:be:ac:cd:d7:37:5b:30:a0:0a:b9:33:ca:57:02:
         38:e4:26:0f:98:22:f2:cb:e9:79:53:f3:1e:42:15:0c:f0:d7:
         06:a3:6f:e9:0e:15:95:58:e2:0c:1a:19:1c:2a:30:42:76:1d:
         3b:b7:be:26:3e:e3:0b:5c:de:cb:d1:fc:be:1b:64:bc:4f:9a:
         a2:0f:61:8f:e2:7e:a6:01:27:b0:0d:8c:55:6a:b9:f2:bd:84:
         95:e7:7e:ff:8a:b7:6f:af:ac:18:e2:7f:cf:8e:79:12:29:3e:
         4c:8c:ea:f5:bd:e2:a4:0f:e6:c3:84:43:91:38:f4:f3:85:2f:
         81:3c:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:11 2026 by rpki-client