Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa
File:                     064042F259F511EDB22E3F2BC4F9AE02.roa (raw, json)
Hash identifier:          0SaUic0cFmBX4GJg5caQlZtmFukZYlTwm6y1EfuxlnQ=
Subject key identifier:   77:6C:BB:1E:15:A2:BC:D8:26:C6:C4:91:06:92:54:3A:34:F2:BB:D1
Certificate issuer:       /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial:       0278
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:56:54 +0000
ROA not before:           Mon 03 Nov 2025 02:16:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150393
IP address blocks:        103.29.182.0/24 maxlen: 24
                          103.29.183.0/24 maxlen: 24
                          2001:df1:7840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
        Validity
            Not Before: Nov  3 02:16:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41b76-9a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:df:9d:55:e3:1a:3b:76:b8:a9:64:51:c8:
                    de:41:3e:03:bc:30:1d:d8:3c:f6:42:53:c7:26:c9:
                    73:76:96:2f:ad:72:96:c9:71:c8:14:24:13:7b:b9:
                    37:d1:b4:17:4b:a5:cc:03:04:75:6c:f5:e6:6a:5a:
                    fe:6c:f7:6f:a7:e3:55:c1:23:8d:73:38:74:98:73:
                    19:0a:8b:79:ae:f0:6a:b7:dc:c7:c6:e0:af:3c:0f:
                    f6:e7:e3:3e:cd:0f:07:68:36:b1:6e:f2:31:15:6d:
                    56:f4:66:c7:2d:d9:45:4b:c4:b0:ce:a7:bb:42:69:
                    ec:ac:2b:5d:df:33:ae:2b:23:d1:a5:8c:59:a5:6b:
                    d2:fb:90:8d:69:56:96:b8:f4:69:43:d8:d6:46:06:
                    2c:59:43:1d:ba:e6:73:29:c1:d3:38:8b:a6:fb:7b:
                    32:bd:00:16:1f:61:a3:8e:c0:c9:27:b9:69:fd:70:
                    ff:71:20:b1:8d:9f:02:ab:19:a5:d1:ba:49:34:b6:
                    43:45:56:7d:cc:b7:90:1b:bd:52:a9:47:71:71:c1:
                    41:c4:91:c6:1c:c3:10:84:c5:4f:98:a6:73:7c:f2:
                    42:8d:65:a4:01:f6:c4:1c:88:07:19:d6:c7:c7:93:
                    92:d3:94:04:8c:32:d2:0b:53:6e:e0:73:3c:72:92:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:BB:1E:15:A2:BC:D8:26:C6:C4:91:06:92:54:3A:34:F2:BB:D1
            X509v3 Authority Key Identifier:
                keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.182.0/23
                IPv6:
                  2001:df1:7840::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:ed:7e:9c:3e:b3:ff:f8:7e:97:2c:6b:b9:a3:cf:69:0e:
         a4:c6:f9:91:07:5a:1f:9e:a6:3c:db:48:c5:dc:c6:f9:89:c4:
         bb:bd:18:26:48:cd:01:46:d9:c1:7a:39:e5:fa:e6:16:4e:e1:
         31:a2:a9:49:87:4b:6f:e1:e0:5c:bf:72:6d:23:99:fa:c6:dc:
         15:67:11:a9:35:cb:ee:3e:33:7f:f2:be:b8:1e:32:31:aa:dd:
         39:04:5f:44:c4:db:02:b4:d5:96:62:00:c9:6d:5a:75:69:54:
         da:ce:60:f3:37:04:de:ea:c3:50:81:76:88:dc:99:eb:5b:40:
         61:72:38:a6:12:ed:a7:0f:56:36:ef:6b:69:05:e3:25:96:58:
         9d:6f:74:85:dc:13:b1:69:9b:d4:72:78:ce:c0:bc:6a:65:85:
         0b:46:76:4e:62:d8:af:09:73:35:7b:fd:af:da:0c:48:6d:f5:
         a8:16:74:21:4e:a9:80:83:b3:40:6f:de:84:5e:2a:a2:f6:ba:
         1e:00:c6:18:70:28:ab:ae:ee:a4:04:4a:5d:98:02:23:4e:c2:
         9c:a3:b6:82:19:72:7b:27:0e:21:db:16:96:8c:be:70:8c:e7:
         b7:74:d6:94:32:92:fd:6a:2a:49:46:3a:6b:a6:0a:e4:3d:cd:
         79:a6:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:56 2026 by rpki-client