Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
File:                     44BA2B8C671011EEB41FB227C4F9AE02.roa (raw, json)
Hash identifier:          uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=
Subject key identifier:   F8:53:CD:A7:38:20:8D:14:AF:60:53:BB:61:D0:D2:45:F8:DC:7A:A3
Certificate issuer:       /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial:       01CA
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:22:13 +0000
ROA not before:           Wed 31 Dec 2025 03:22:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137263
IP address blocks:        103.126.92.0/22 maxlen: 22
                          103.126.92.0/23 maxlen: 23
                          103.126.94.0/23 maxlen: 23
                          103.126.94.0/24 maxlen: 24
                          103.126.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
        Validity
            Not Before: Dec 31 03:22:00 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41355-a927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:9d:45:00:27:0c:9b:ac:9f:75:b7:3c:8e:
                    ca:20:ae:4b:f9:bd:d0:b7:c5:df:2d:17:b7:a1:09:
                    3e:cb:12:41:1b:e5:53:7d:a7:cf:db:9b:27:38:8d:
                    a4:2b:b5:fd:36:43:35:5f:b3:65:a4:ed:c6:09:20:
                    1c:c4:f9:6b:31:e8:04:e2:c5:7c:77:46:65:df:a8:
                    77:5c:69:04:00:80:be:5c:4f:47:1b:0b:bb:e6:74:
                    27:4c:3c:9e:9b:78:16:ca:27:f1:f3:95:14:f8:b0:
                    bc:bb:53:55:f1:ea:77:55:62:cb:83:c3:2c:08:76:
                    8f:6d:f8:00:9b:aa:bc:9e:e6:d4:8d:a4:20:c7:10:
                    1b:27:c8:3c:a4:83:94:0a:6f:5b:ef:43:81:c7:70:
                    fb:f2:0b:d1:c9:4e:a7:13:3d:13:96:49:ca:92:89:
                    52:1e:5c:f5:d9:88:da:fd:23:f3:e2:0e:1b:e9:a1:
                    d7:9c:ec:d3:02:48:65:8f:44:f3:f8:3d:85:dd:1c:
                    fa:39:8b:83:af:b5:8b:6b:d5:2d:de:a5:a2:28:61:
                    a5:67:0a:eb:98:1b:27:9f:1a:c8:a5:f0:2b:f4:13:
                    03:11:1b:42:a4:40:a1:42:30:b6:aa:8a:e3:d6:c1:
                    8e:b7:3f:b1:49:ce:04:7b:cc:96:b6:4e:5d:11:a6:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:CD:A7:38:20:8D:14:AF:60:53:BB:61:D0:D2:45:F8:DC:7A:A3
            X509v3 Authority Key Identifier:
                keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:90:ac:c2:e7:2f:3f:78:30:ae:c3:42:4c:d0:4c:4b:3f:bd:
         e1:05:45:b1:26:39:e0:a5:28:74:c1:e4:15:a0:13:cd:65:92:
         24:aa:36:32:6f:d9:d9:b9:eb:23:d7:2e:ec:51:58:ff:51:4b:
         f9:fb:98:fb:bd:bc:73:c9:db:4a:9c:ca:4b:b3:83:8e:37:9d:
         68:aa:eb:16:1d:5e:b3:e4:97:00:a3:e4:9e:42:41:a0:e0:4e:
         ff:85:f4:c5:20:73:49:7c:4d:4e:a8:ca:e0:f5:2d:b0:95:96:
         a0:9f:b7:5a:56:e6:d6:14:db:d9:30:20:a6:5d:b0:cb:86:8b:
         09:6d:b5:b2:21:c8:0b:2a:42:09:61:cb:d1:6f:16:c3:ee:cb:
         9c:5a:b3:42:8c:48:44:09:0b:83:f3:e8:35:32:83:3d:ed:af:
         00:90:42:25:8b:bd:77:28:6d:e1:2f:02:44:97:6c:5e:d6:ff:
         3e:63:4e:9e:9a:a1:46:0e:39:03:c5:6a:ed:c4:ee:3a:03:64:
         b0:45:14:e6:75:8b:22:89:b2:f2:1a:9c:4a:1f:c6:1e:1c:6a:
         29:5a:f7:a7:73:7a:f4:da:37:c7:b8:98:86:f4:e6:18:8f:ef:
         f5:08:16:72:e0:40:df:1f:0d:67:28:18:48:e0:af:a0:66:e3:
         a4:84:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:10 2026 by rpki-client