Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/28D36892B09411EAA964465EC4F9AE02.roa
File:                     28D36892B09411EAA964465EC4F9AE02.roa (raw, json)
Hash identifier:          uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=
Subject key identifier:   03:29:E9:81:8C:59:67:17:A4:FE:83:87:1F:3F:A4:9C:7E:73:7B:F0
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       097C
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/28D36892B09411EAA964465EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:32:25 +0000
ROA not before:           Wed 10 Dec 2025 19:43:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137269
IP address blocks:        103.106.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Dec 10 19:43:31 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46a19-c055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:49:17:7c:0b:9d:f1:d6:20:6c:d1:cb:f7:
                    4f:4a:b5:73:f1:40:d2:e8:d2:73:c8:27:1a:62:24:
                    c2:b0:c8:1f:12:80:95:da:fc:0b:ea:e7:c5:aa:9c:
                    80:13:f5:b1:7f:eb:6a:02:6e:19:17:a3:04:20:78:
                    af:5b:e0:ee:a2:ec:db:38:83:16:ae:a0:92:23:05:
                    ad:d3:25:a3:3f:68:dc:44:ad:7b:8c:0c:9f:37:a8:
                    2d:37:23:db:44:6d:cc:e3:52:b4:f0:93:29:bf:03:
                    09:46:de:f1:17:95:ce:9b:88:eb:15:78:9c:06:5f:
                    d6:07:0e:8f:d5:28:0d:bb:fa:e4:dd:ad:1b:8d:2a:
                    06:7d:e5:f9:1c:3e:c1:fe:45:0f:86:0a:89:be:9c:
                    66:5f:ab:e5:d2:f7:7f:f3:57:18:2f:42:d6:4c:5b:
                    73:94:8b:88:50:1c:0d:82:00:9a:78:6a:79:36:5a:
                    ae:5e:a0:89:e8:79:fa:6e:93:4f:41:cb:a9:3e:0a:
                    9e:cf:f6:d5:44:d6:93:4c:b3:2d:5d:0a:ad:d7:91:
                    3a:ad:39:0a:5e:42:2a:e5:5a:43:52:3a:05:47:f1:
                    82:76:16:db:91:d4:40:d3:50:d5:28:b2:56:5a:a8:
                    87:bf:25:0e:14:e6:72:25:df:d0:32:0b:79:b1:e0:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:29:E9:81:8C:59:67:17:A4:FE:83:87:1F:3F:A4:9C:7E:73:7B:F0
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/28D36892B09411EAA964465EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:71:83:22:0d:3e:62:3e:5b:19:a1:d4:88:a1:ac:34:87:
         f5:f9:58:64:8e:0a:a9:76:de:b6:7f:a9:58:6f:ce:6a:c4:d1:
         50:05:85:68:9d:fd:3d:22:c1:63:ed:04:f4:f7:43:24:86:48:
         e4:fe:68:fe:e8:d8:a9:5e:4a:8b:d9:9e:c7:e1:f3:48:4c:cc:
         84:94:cb:ce:a1:b4:be:52:24:a5:4f:31:92:5c:fb:e8:8e:26:
         eb:83:84:97:73:01:29:e7:26:34:39:30:93:8b:2c:27:53:fe:
         29:48:c7:f5:02:56:08:f0:7b:80:d2:c9:58:91:da:6e:f2:05:
         7c:05:81:08:c4:78:f4:65:09:9e:75:4d:dc:58:bc:28:cc:e4:
         af:f3:cd:f6:69:7f:c5:e3:9e:f9:b5:f4:bd:e1:de:d3:98:a7:
         1b:52:b8:01:ba:c8:e9:b4:ee:b6:fa:89:04:98:3e:56:20:94:
         2d:fb:a1:2d:57:50:0c:55:a9:16:43:3c:00:c9:5a:54:4c:4f:
         94:23:7b:b0:9e:d3:d6:ba:32:4b:26:de:36:57:ab:b8:67:a8:
         59:b2:7b:68:e7:bc:78:4b:d2:6f:7a:2f:b2:80:73:f9:3e:f1:
         b7:c4:d8:55:00:bb:8a:ab:f5:51:e4:a7:17:fa:87:df:ed:a4:
         3f:1f:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:42 2026 by rpki-client