Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File:                     A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier:          5mWLwGRdM4+MiU3n5noR2shwywCob7tkJRGtd6/4Wbw=
Subject key identifier:   A3:40:1A:77:B8:DF:43:87:B9:D5:45:F5:6C:EE:82:1C:3D:77:0A:9C
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       1970
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:00:30 +0000
ROA not before:           Wed 10 Sep 2025 16:55:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3223
IP address blocks:        103.118.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6512 (0x1970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Sep 10 16:55:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a470ae-d868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:6c:9a:85:3b:9a:25:97:41:26:24:52:70:
                    a8:17:f8:ab:db:dd:1c:b4:a9:73:9e:fe:0a:f9:6b:
                    cf:fe:e1:68:9a:ea:ae:f9:3d:80:41:9a:b7:45:56:
                    dd:cd:93:50:35:fc:62:6f:43:04:03:4a:57:f4:02:
                    f7:4f:7c:29:a5:ac:ea:ba:ab:f7:80:79:2c:cd:62:
                    37:b8:cc:d9:74:85:73:b5:e8:d6:7d:20:40:5a:49:
                    f4:02:cd:88:0b:7f:ce:d2:04:52:4e:78:c9:5c:08:
                    d5:bc:92:ba:69:ff:5b:2a:30:77:11:9a:d5:fb:ff:
                    66:5f:33:52:de:f1:44:2f:27:c2:53:e6:fc:e3:ee:
                    f7:35:9c:a1:30:31:a1:d3:c8:e1:20:a0:e0:4a:f6:
                    e9:4b:be:c3:15:c9:66:84:09:71:ea:b6:af:5f:4c:
                    5a:7c:ce:d4:37:cc:52:7e:a5:14:83:a7:98:74:37:
                    92:5a:c8:eb:f0:65:4a:75:77:75:bf:4e:d1:f4:37:
                    78:2f:95:c3:79:24:3e:cc:0b:65:28:41:ea:95:8a:
                    64:2b:85:3a:69:96:34:59:51:3e:95:89:2b:b9:f2:
                    70:70:2d:48:8a:b0:d7:c8:73:ff:9d:6f:90:7c:39:
                    5f:6d:65:e7:13:d3:8b:1e:8b:04:40:2f:96:b1:ab:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:1A:77:B8:DF:43:87:B9:D5:45:F5:6C:EE:82:1C:3D:77:0A:9C
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:d9:3e:c5:74:f2:62:3f:3b:bd:a1:b8:bb:d2:0b:9f:fc:
         e1:e3:ad:6e:b3:28:fd:25:3b:99:df:e5:50:a4:66:4b:62:27:
         5d:d2:8e:fe:13:0c:78:85:a4:9a:60:9d:7e:a6:8e:41:a3:5c:
         ac:ff:73:9b:15:76:18:1a:36:9f:94:92:45:3e:f8:24:2d:a7:
         d4:a1:13:dd:a3:0c:d0:4c:23:df:45:5a:e2:53:9c:33:7b:54:
         ca:28:14:34:7b:69:5a:0f:46:c8:f3:90:64:82:ad:bb:00:fd:
         01:b1:1e:15:59:6a:da:e4:75:d1:6e:cc:46:12:b3:10:e3:a3:
         19:db:4f:ec:da:ef:fc:b5:60:65:98:2d:7d:54:1c:5a:4c:18:
         84:f8:d6:6c:b6:48:5d:6f:3f:17:59:2e:88:2b:b4:a2:16:b2:
         29:48:9c:e4:f1:7f:35:54:da:4f:f3:6f:92:f8:1f:37:a6:38:
         ae:34:33:9f:c6:f6:6b:c0:1a:61:41:fe:60:56:52:65:7c:56:
         ae:23:f5:2e:ce:39:64:14:03:85:3c:13:64:ed:89:07:b3:86:
         50:60:3e:3b:40:c2:e7:d1:81:70:84:9f:f8:ca:72:74:17:da:
         e1:90:e1:50:7e:37:18:2e:e8:5e:54:c5:34:da:d5:c4:fc:85:
         32:2d:f6:f6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG
OEFCQUQxQjAwHhcNMjUwOTEwMTY1NTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzBhZS1kODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qpsmoU7miWXQSYkUnCoF/ir290ctKlznv4K+WvP/uFomuqu+T2AQZq3RVbd
zZNQNfxib0MEA0pX9AL3T3wppazquqv3gHkszWI3uMzZdIVztejWfSBAWkn0As2I
C3/O0gRSTnjJXAjVvJK6af9bKjB3EZrV+/9mXzNS3vFELyfCU+b84+73NZyhMDGh
08jhIKDgSvbpS77DFclmhAlx6ravX0xafM7UN8xSfqUUg6eYdDeSWsjr8GVKdXd1
v07R9Dd4L5XDeSQ+zAtlKEHqlYpkK4U6aZY0WVE+lYkrufJwcC1IirDXyHP/nW+Q
fDlfbWXnE9OLHosEQC+WsavOHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKNAGne4
30OHudVF9Wzughw9dwqcMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2
REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RFQjMvNUQ3MzVENDY5NkRFMTFFN0JBN0QyQTc3QzRGOUFFMDIvQTZBQ0EyOTg4
NTg5MTFFODgwMjZCNDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3ZQMA0GCSqGSIb3DQEBCwUAA4IBAQAV+dk+xXTyYj87vaG4u9IL
n/zh461usyj9JTuZ3+VQpGZLYidd0o7+Ewx4haSaYJ1+po5Bo1ys/3ObFXYYGjaf
lJJFPvgkLafUoRPdowzQTCPfRVriU5wze1TKKBQ0e2laD0bI85Bkgq27AP0BsR4V
WWra5HXRbsxGErMQ46MZ20/s2u/8tWBlmC19VBxaTBiE+NZstkhdbz8XWS6IK7Si
FrIpSJzk8X81VNpP82+S+B83pjiuNDOfxvZrwBphQf5gVlJlfFauI/UuzjlkFAOF
PBNk7YkHs4ZQYD47QMLn0YFwhJ/4ynJ0F9rhkOFQfjcYLuheVMU02tXE/IUyLfb2
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:55 2026 by rpki-client