Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
File:                     116B4B06282011E8BBA2F625C4F9AE02.roa (raw, json)
Hash identifier:          VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=
Subject key identifier:   F3:F8:2E:20:7F:03:DE:CD:FD:3B:25:D1:E6:E9:6E:F5:9C:91:68:E1
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       1659
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:35:20 +0000
ROA not before:           Tue 06 Jan 2026 17:13:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136219
IP address blocks:        103.83.228.0/24 maxlen: 24
                          103.83.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5721 (0x1659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Jan  6 17:13:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44ea8-7141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:08:33:00:df:d9:dd:ec:9c:29:19:8d:f6:
                    a0:a0:bb:86:26:6b:87:19:02:5e:23:63:18:63:99:
                    4f:29:1b:97:33:89:cb:87:aa:74:c4:97:06:37:f6:
                    c8:6f:5e:d5:37:b9:98:79:fc:83:ac:5c:b4:d4:75:
                    42:fc:9a:3b:24:47:d6:ca:cd:dc:bd:88:3d:78:b4:
                    6f:22:0c:c4:fe:17:3f:e1:e4:38:dc:37:bf:99:d2:
                    e6:69:1d:3b:20:6e:bf:9f:9d:23:b0:78:20:63:6c:
                    8a:b0:66:05:e3:fe:19:a9:be:9f:b2:ef:31:e9:4a:
                    07:82:40:48:ba:40:68:ec:ad:d7:c3:59:ac:ff:ce:
                    6d:b4:ca:a0:8f:98:d1:ad:ad:53:b7:88:cf:78:d5:
                    ce:ce:ed:52:75:1a:ee:29:94:cb:59:6d:76:77:4c:
                    1e:7c:91:b0:13:f5:7b:18:0c:aa:ff:6d:20:16:71:
                    09:53:16:5b:d8:d6:8b:b9:df:8d:30:91:01:09:86:
                    a4:f6:51:62:f2:be:14:26:fb:1e:de:b7:27:10:78:
                    0b:26:95:ca:60:6c:e2:46:98:9a:c1:b0:a1:eb:ae:
                    43:99:d2:45:bd:7f:f7:71:40:f7:f4:62:a0:43:f3:
                    3c:d0:f9:60:d4:14:e2:6c:04:06:b1:c5:2f:4b:cf:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F8:2E:20:7F:03:DE:CD:FD:3B:25:D1:E6:E9:6E:F5:9C:91:68:E1
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:73:a8:0d:78:c1:18:2f:68:4b:46:e5:fc:7c:83:da:9a:
         7f:8c:62:9c:8c:f6:38:61:cb:81:f0:d4:14:82:e3:87:c7:be:
         9d:fd:84:0e:51:56:c7:69:b0:2e:3c:9f:52:d6:dd:b4:f0:47:
         97:2e:80:cc:c2:d0:cc:7a:59:49:9b:37:33:80:c6:da:ab:08:
         e0:5b:cd:33:67:77:68:75:97:ef:a4:97:d6:6b:5e:f4:8c:78:
         96:9b:60:f5:08:33:ca:18:d6:f2:18:d7:df:60:01:97:e5:a4:
         37:80:dd:c4:eb:46:0b:92:c0:ae:88:46:5b:18:96:0e:0f:70:
         9e:5d:cc:1f:a2:7d:e6:47:47:d9:d4:b0:6e:ba:59:e6:3d:78:
         50:1c:85:ee:3d:72:20:13:f8:8a:bf:0b:20:b2:b8:fb:6d:7f:
         b3:2f:d6:a0:23:7e:40:d7:53:d3:ae:54:5d:56:f2:c6:f2:4e:
         0a:2a:3b:7e:25:78:b6:9e:f7:f3:e3:e3:f1:f0:4a:f5:25:3e:
         38:39:24:fb:b1:25:7f:21:9f:39:36:01:3b:07:d7:22:71:bf:
         f5:2b:6d:57:16:ff:3b:78:69:ee:72:64:89:70:3e:d3:32:24:
         cd:6e:84:b6:4a:ed:3d:bf:5e:d4:47:9b:42:70:eb:dc:b6:ce:
         66:51:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:26 2026 by rpki-client