Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa
File:                     3DD8C628940111F09204AF71C4F9AE02.roa (raw, json)
Hash identifier:          rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=
Subject key identifier:   33:A4:39:A7:F4:75:88:78:C9:BB:B5:D7:5E:3B:46:D4:D7:33:D9:35
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       038C
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:06:04 +0000
ROA not before:           Wed 17 Sep 2025 20:02:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134371
IP address blocks:        103.154.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Sep 17 20:02:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48e1c-e904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:dc:99:e5:03:ab:c7:31:f6:ef:8e:50:a7:
                    60:9e:5a:f9:a4:e8:1f:8e:b3:c4:cb:f6:31:3f:3f:
                    26:a0:56:70:d4:40:fd:d1:48:de:5f:60:fb:a0:24:
                    6e:71:2d:e0:9e:f6:be:8d:81:7d:b6:be:ca:57:c7:
                    14:4a:0c:cb:d5:ef:29:0b:d1:92:83:7b:ad:1e:43:
                    7a:f5:d7:ea:50:ac:d5:41:f2:1c:ad:ef:9a:b9:cf:
                    d9:cd:4c:63:85:e3:f1:5d:1a:82:27:80:2d:d6:56:
                    ff:78:c1:99:29:42:38:39:7c:ef:35:02:76:26:d9:
                    eb:d0:46:69:de:38:72:b4:2d:88:89:65:16:0e:21:
                    41:13:85:8a:e0:9a:66:4c:85:ea:de:95:ba:c4:66:
                    e0:37:e4:51:01:8b:a1:3c:95:d7:7c:5d:6c:25:19:
                    37:a9:8c:b1:32:f3:0b:c0:e6:3f:f8:41:88:9f:a5:
                    d3:7d:db:d8:58:90:be:a9:4e:c8:e5:d2:eb:73:4a:
                    12:d4:48:85:b0:ce:af:d2:67:e1:58:85:48:35:e0:
                    9c:6c:7e:d4:dd:43:ec:f5:dc:b6:cf:c3:8d:1c:79:
                    6d:ce:09:1f:f1:a8:d5:9e:b9:a0:89:01:38:94:35:
                    05:b2:18:25:e9:ae:a1:57:19:77:bd:11:6c:49:a8:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A4:39:A7:F4:75:88:78:C9:BB:B5:D7:5E:3B:46:D4:D7:33:D9:35
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/3DD8C628940111F09204AF71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:fb:cc:cd:21:ac:0b:86:ff:73:e3:2f:43:b7:0a:57:b8:
         03:fe:ed:eb:91:87:2c:c6:65:d5:c9:84:87:1d:63:94:be:db:
         7d:e3:aa:12:59:44:92:eb:96:0e:21:84:96:37:b2:3c:22:76:
         ca:35:55:2c:5c:a5:39:46:6f:70:fe:91:ac:2c:47:a9:b5:81:
         c5:ae:7c:2e:de:e7:fd:8a:85:ce:43:a8:f7:92:f0:48:ec:65:
         0c:54:93:5c:3e:bf:43:37:f0:b3:00:32:bb:98:e1:0c:f6:8a:
         3d:6e:07:89:76:9b:97:01:47:d7:dc:16:22:c1:18:5a:47:3f:
         e1:ae:46:17:f8:d5:18:6f:79:2b:fd:78:75:f0:61:14:f2:e2:
         bd:fb:0d:d8:10:af:5d:86:d9:03:ee:03:cd:55:31:fe:04:ba:
         d5:0c:46:e0:5f:6c:9c:5b:e3:11:d7:6a:a9:c5:a9:c4:e8:07:
         f6:a7:a4:98:8c:35:8f:e0:5a:28:63:83:d7:32:ab:c6:89:c9:
         fd:99:c8:86:81:73:0d:c7:f3:11:8e:23:b7:ef:1b:f8:49:3f:
         e2:d3:1d:b8:c2:d1:a4:46:b3:21:ec:f6:8e:25:3b:9d:d8:db:
         f1:30:a6:93:0d:da:4d:ee:23:18:ad:2f:8f:04:94:78:ef:89:
         44:12:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:07 2026 by rpki-client