Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa
File:                     FF738C40C00311F08A308247C4F9AE02.roa (raw, json)
Hash identifier:          WwWfN8n49QXtx18GkQBNYqXSvXrwLDxQrddpbMjZfyE=
Subject key identifier:   94:02:4D:66:51:7E:BC:B0:BD:20:91:70:A6:44:61:2D:AE:85:AA:B5
Certificate issuer:       /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Certificate serial:       0362
Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:01:19 +0000
ROA not before:           Sun 22 Feb 2026 12:53:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137967
IP address blocks:        103.190.44.0/24 maxlen: 24
                          103.190.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
                          rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
        Validity
            Not Before: Feb 22 12:53:02 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47eef-a3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:44:01:fd:19:4e:d4:a2:72:3c:15:b5:7c:
                    d5:db:8d:45:54:66:c1:70:33:85:99:d6:d8:e8:ca:
                    91:fb:33:34:df:08:c6:41:86:36:ac:e8:56:61:09:
                    ea:17:4a:59:ac:ba:3d:fa:c0:b1:74:48:e8:8c:f8:
                    6e:07:6f:a8:5d:4a:22:b8:5e:c9:76:3a:e0:07:95:
                    53:26:fb:0e:d7:c4:08:86:61:31:08:03:73:9b:95:
                    a0:e8:82:20:75:10:68:76:67:25:58:f1:7f:78:f9:
                    77:f8:12:f8:46:e9:4b:1b:24:27:73:50:21:41:ce:
                    e5:09:af:77:af:1e:f9:a1:c8:db:23:01:18:83:8c:
                    7e:a1:2f:dc:a0:de:3c:70:74:b9:ab:e5:8a:53:34:
                    7b:49:19:45:7f:21:f7:e6:9f:1b:0b:70:82:49:a1:
                    7a:ad:de:3c:ae:c8:12:0e:de:a7:1b:d9:16:dd:21:
                    c1:69:22:18:d2:eb:93:c4:75:b8:df:65:a8:c9:96:
                    c2:b7:7b:4a:7c:fb:fc:cf:54:8c:38:be:1d:f5:26:
                    93:5f:16:6d:28:67:f3:71:aa:a8:69:a6:51:8f:9c:
                    c3:3c:7c:98:00:34:e5:5c:3b:06:33:89:f7:22:8c:
                    c2:46:fb:b5:cc:5e:6f:4d:20:13:95:5b:5a:be:aa:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:4D:66:51:7E:BC:B0:BD:20:91:70:A6:44:61:2D:AE:85:AA:B5
            X509v3 Authority Key Identifier:
                keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:66:97:f8:c3:63:59:76:ab:1b:51:74:2a:48:aa:e2:83:41:
         7d:30:17:8e:5d:98:01:df:0f:21:2b:f5:cc:47:c5:07:25:65:
         df:1f:14:a2:8a:e0:57:8d:9c:f5:b1:22:60:fb:eb:17:6f:26:
         4a:04:39:22:76:e0:38:c5:f7:f6:c4:e5:bf:22:93:21:1e:61:
         b1:c5:c5:7c:28:a6:91:6b:41:d0:83:6b:8c:1d:c2:d2:fe:ef:
         2b:73:a1:dd:7d:11:85:ea:39:e6:02:0c:4b:ad:72:29:cc:b1:
         01:f4:ea:2a:63:58:5d:ac:de:52:62:37:ef:fc:62:f3:42:9c:
         d9:52:98:1f:d6:e3:e9:4a:4e:9f:d8:f8:3a:a6:35:d0:4b:4c:
         c7:76:fb:c5:b9:3f:f0:4a:23:59:75:35:a4:a5:5e:27:8e:b9:
         78:92:3e:00:d0:e1:0b:aa:99:01:bc:45:47:ca:ee:90:28:6e:
         6a:64:4b:ff:c3:ec:60:78:88:8a:d7:ba:11:34:f2:46:dc:b9:
         fa:ce:04:42:c9:54:54:83:68:a7:13:81:d9:f3:a7:a9:1a:ad:
         69:7c:18:34:5a:ee:f5:61:a3:00:34:6d:a0:b2:fd:38:73:bb:
         14:9d:04:10:2d:89:46:c4:dd:d6:f4:ec:70:67:0d:70:bf:f8:
         12:44:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:58 2026 by rpki-client