Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa
File:                     575AA83EC89611EDB6E9F849C4F9AE02.roa (raw, json)
Hash identifier:          1gN7CzXzFayLJfn+orPzJasEGmQJHIe4stiEXs75r0U=
Subject key identifier:   9B:56:35:1A:9B:44:45:E0:4A:91:7A:3F:D5:6E:97:45:30:3F:68:84
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1C6E
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:54:44 +0000
ROA not before:           Tue 30 Dec 2025 16:13:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        103.80.220.0/24 maxlen: 24
                          103.80.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7278 (0x1c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Dec 30 16:13:30 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46144-c167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:50:b7:0f:50:d9:f8:89:73:61:5e:2d:54:
                    dd:a4:63:5e:7c:d6:2e:11:13:36:b1:58:bc:06:fe:
                    c6:76:ed:e0:ae:d9:da:31:1d:0c:ac:47:d1:03:22:
                    3a:82:d4:b5:4b:08:cd:ef:6f:14:3a:2e:c5:9c:29:
                    e2:78:a0:80:70:6d:55:52:f6:64:53:00:c4:36:38:
                    ca:7a:5a:ef:08:c1:e4:fb:80:59:22:67:6e:e5:22:
                    55:1a:27:59:16:e0:fe:92:2b:c9:4a:32:a6:a5:3c:
                    cb:1d:86:66:15:f5:75:6c:82:ba:10:1e:af:c3:33:
                    a5:ab:a3:d9:12:bd:2b:ca:29:cb:12:03:69:37:03:
                    ba:96:7e:be:f2:f1:50:8d:d6:74:e3:98:5b:af:34:
                    0d:88:ef:f5:d2:6d:ba:dc:34:63:f3:36:4f:4a:19:
                    c4:e7:1f:a7:99:e5:01:fd:b9:db:32:dc:3f:99:88:
                    1f:e6:7f:8d:b2:73:fe:42:aa:02:4f:f2:40:56:47:
                    46:22:31:14:f7:80:0f:1e:f6:b8:98:76:01:1d:76:
                    0d:4c:e7:fd:ba:89:e5:f2:4d:a5:49:69:8d:f6:16:
                    15:19:d7:6f:3a:e9:de:30:7d:b8:c1:f2:2d:d9:58:
                    81:5d:07:22:0e:c7:dd:ac:38:3a:ed:42:7d:0e:ef:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:35:1A:9B:44:45:E0:4A:91:7A:3F:D5:6E:97:45:30:3F:68:84
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:75:6f:8c:c7:ac:80:c7:e1:72:12:44:46:e6:26:a2:9a:
         5c:ee:a9:77:73:ab:c8:89:c5:b4:02:72:27:42:90:16:67:aa:
         1d:d4:ce:59:16:89:79:af:81:a9:c9:fe:d9:c9:72:a7:c6:17:
         46:eb:8a:16:9e:6f:8f:e4:0f:ab:94:5e:f6:32:eb:a9:7d:0c:
         34:0f:56:c3:94:a6:ef:2a:d9:a1:b1:60:45:45:74:b1:82:10:
         85:68:83:04:a0:29:8a:6d:00:21:48:a0:ce:c0:60:ae:0a:0b:
         ed:88:b6:41:c3:fb:5e:57:17:64:82:f1:ff:83:91:55:16:62:
         37:01:29:d5:52:f7:ff:19:e6:e6:69:e5:b2:d0:30:d8:76:a8:
         79:28:44:72:a4:84:3b:63:cf:ff:ed:40:17:32:e9:b5:b5:bd:
         67:79:0f:84:81:a9:59:75:93:66:db:06:47:1e:07:02:32:99:
         23:1e:86:29:a8:bc:c9:ff:00:ee:54:fe:26:89:f8:52:5a:80:
         a9:1c:a6:8e:e7:b1:7f:84:94:b0:12:b3:6c:7c:c5:03:d8:ac:
         3f:f0:46:8c:df:e3:82:e0:fb:c6:83:f9:c9:9d:e1:ac:82:0a:
         81:28:6a:77:eb:7c:48:d5:b9:5c:88:17:be:4f:60:99:da:eb:
         aa:25:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:57 2026 by rpki-client