Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
File:                     378FB0D25B9211EEB8E7453DC4F9AE02.roa (raw, json)
Hash identifier:          9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=
Subject key identifier:   C4:5F:E8:E0:3A:46:B2:86:15:5D:D3:9F:87:43:EE:E1:3C:00:2D:8C
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02AD
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:54:13 +0000
ROA not before:           Fri 29 Aug 2025 02:49:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131275
IP address blocks:        103.203.88.0/24 maxlen: 24
                          103.203.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Aug 29 02:49:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a436f5-f089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:61:37:4b:e6:cc:fc:b5:89:72:7a:55:83:
                    e1:8c:2a:da:24:93:7c:2a:ac:4f:1e:6f:48:60:8c:
                    1e:99:2b:b8:b7:ca:ae:a0:9d:0e:83:d0:d2:ee:39:
                    96:b0:6f:fe:ce:28:44:f1:5b:29:7b:71:5d:23:d1:
                    4a:eb:ca:16:ef:c5:7a:10:08:b0:09:c2:2c:07:ba:
                    35:c6:99:f3:3a:a1:d3:6e:fe:a1:5b:1a:ef:d4:42:
                    b7:60:35:4c:df:90:59:87:5a:86:0a:46:a4:38:c3:
                    f4:31:82:92:65:09:f2:d9:44:ab:7f:66:ac:6f:40:
                    84:0a:a5:a9:2a:ea:13:04:b4:ea:09:18:c4:3e:e0:
                    89:35:c0:cd:91:6b:aa:da:17:62:e1:73:22:a8:a2:
                    c2:b2:fe:2b:cb:95:56:e2:94:84:13:48:cf:8c:aa:
                    7f:bd:7c:9b:76:28:ef:98:22:de:cc:f8:54:f8:af:
                    aa:04:0e:9b:98:5b:ca:a6:6b:76:f0:6d:9a:bf:16:
                    51:8a:e1:b8:8a:a4:60:3d:81:e0:7d:6d:ca:be:8c:
                    6a:74:d5:dc:46:24:7a:d5:f6:d4:a6:65:d9:33:77:
                    66:d3:a0:04:32:1b:cd:ed:3a:4a:a6:ff:a3:7a:97:
                    b6:73:cb:02:15:b6:30:72:a1:9c:8f:c7:b8:e4:8e:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:E8:E0:3A:46:B2:86:15:5D:D3:9F:87:43:EE:E1:3C:00:2D:8C
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:41:a3:c6:43:95:17:2e:59:0e:ae:c9:95:2d:3d:50:38:
         9e:93:8d:3b:d1:8c:cb:70:67:2b:bd:7f:a9:de:34:81:39:93:
         35:a6:02:1e:a0:61:fd:9f:5c:29:07:86:8c:01:4b:cc:2d:10:
         2e:4c:ed:0c:9f:68:70:9b:17:11:17:3e:f6:60:c4:1d:e2:b5:
         5a:00:71:5e:eb:ee:89:20:2c:a0:b7:e3:55:65:d6:61:eb:63:
         0b:2b:c9:33:97:61:95:dc:41:60:72:74:9a:03:c6:b1:d2:85:
         72:bd:d6:d7:5f:05:49:94:b2:d9:bc:e1:b9:13:6a:40:b1:d0:
         b3:42:03:11:85:69:95:29:29:c0:1b:51:26:a0:2d:b8:98:92:
         f2:fb:51:a5:73:48:f1:92:3d:b5:1f:f0:f7:da:af:ce:8c:08:
         1b:ce:7f:ac:de:69:6f:65:bd:14:95:81:c2:4a:19:eb:34:1a:
         f7:aa:ed:0b:c8:98:8d:63:41:89:05:10:08:88:4e:86:61:07:
         c6:b5:01:ee:87:57:de:8b:ce:cf:f0:45:6e:7e:31:8c:de:6a:
         68:ba:31:ec:ce:83:a3:d8:0a:6d:1a:75:9a:c4:ce:c0:43:76:
         95:e3:30:5b:94:12:b1:aa:41:44:bf:73:a2:7f:82:bc:7b:0c:
         be:0c:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:11 2026 by rpki-client