Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/A9E2BE54567B11ECB346816BC4F9AE02.roa
File:                     A9E2BE54567B11ECB346816BC4F9AE02.roa (raw, json)
Hash identifier:          26ebyWae8kFMiBM0QnNKySSkX8UzW3r5Z0rGEmFhGYg=
Subject key identifier:   71:C5:6F:3D:9E:CA:28:FC:19:D0:F9:A0:E8:25:02:53:14:9E:EE:0B
Certificate issuer:       /CN=A91D4D97/serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Certificate serial:       04DF
Authority key identifier: 72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/A9E2BE54567B11ECB346816BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:47:07 +0000
ROA not before:           Sat 13 Sep 2025 00:36:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132146
IP address blocks:        27.123.228.0/22 maxlen: 24
                          103.71.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.crl
                          rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4D97, serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
        Validity
            Not Before: Sep 13 00:36:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4354b-4bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:75:9a:a7:d3:b0:84:bb:e0:1d:66:af:e6:
                    32:46:80:c4:34:91:cd:64:f1:ac:af:7b:95:7e:06:
                    cd:ed:e0:f9:ae:d0:ed:f2:9f:9b:c0:ee:a5:87:57:
                    80:81:2a:34:67:83:01:4e:40:fa:8b:18:77:1c:cf:
                    0f:8a:80:10:20:09:90:99:50:df:81:a4:7b:7c:dd:
                    59:e5:9b:8e:69:70:d5:a7:3e:df:48:26:9b:95:64:
                    4b:67:2a:4b:44:5a:e6:94:1d:27:56:36:22:c2:cd:
                    f8:73:e0:4d:60:8a:bb:83:b2:78:93:2d:30:a1:4d:
                    aa:83:01:1d:ee:7e:5a:a3:48:fe:d0:34:77:b2:59:
                    57:18:65:04:22:97:1f:df:a5:19:b2:28:19:e4:cc:
                    80:56:66:75:00:9d:ce:fc:ef:47:75:d9:a1:7b:be:
                    c9:42:77:f3:34:80:ea:da:0d:59:5c:f3:5f:6a:b7:
                    96:c2:9c:6d:1d:9e:34:4c:63:fb:52:7e:70:8b:e7:
                    51:9c:77:87:01:9c:0d:fe:af:fd:ad:88:a8:8b:83:
                    0c:74:f1:b4:bf:a5:87:68:da:9d:f1:43:72:4f:ac:
                    4a:5f:59:49:68:aa:fb:67:43:f5:b8:de:be:f5:90:
                    fd:6d:28:97:dd:99:ff:0b:0b:0e:b7:3e:71:41:da:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:6F:3D:9E:CA:28:FC:19:D0:F9:A0:E8:25:02:53:14:9E:EE:0B
            X509v3 Authority Key Identifier:
                keyid:72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/A9E2BE54567B11ECB346816BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.228.0/22
                  103.71.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:7f:bd:5f:ff:36:18:b0:91:0e:d3:19:bc:f7:23:0c:83:98:
         4d:44:2a:ea:92:9a:2a:83:bc:ed:c7:11:9e:f7:fb:9b:b2:fa:
         33:b6:ee:37:13:50:90:66:28:b5:ae:91:7f:35:86:23:1d:60:
         07:99:b8:f4:24:c9:97:47:99:39:c0:df:22:c2:a9:62:12:f3:
         16:4c:2f:ed:ce:03:0c:e1:3d:4c:65:30:e0:2c:07:5f:f0:58:
         b2:55:d3:7d:85:9d:bc:d3:40:08:50:e0:5a:8a:e1:9d:ba:96:
         c3:24:be:60:32:ce:97:f3:44:f8:1b:5a:49:fd:7e:45:19:b2:
         93:d1:ff:2d:59:3b:0f:17:ce:b8:81:27:36:67:54:96:be:03:
         c9:45:0d:6e:1a:a8:6b:c2:d9:58:39:97:bd:0c:4d:04:c9:3b:
         aa:89:a9:07:59:98:f2:62:1e:52:60:27:bc:32:5d:fc:3e:65:
         a1:67:bc:4b:40:00:f1:ea:24:54:17:77:e3:c4:63:e6:2c:4e:
         3e:ec:63:68:ef:74:44:0f:d4:d3:15:91:2b:98:f0:0e:46:5f:
         15:c5:71:c6:76:2e:66:4c:fe:08:6e:ae:38:cc:a7:e8:7e:48:
         4c:4c:14:aa:a7:1f:76:d3:fa:f2:c1:14:a7:24:1d:62:29:92:
         4e:73:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:16 2026 by rpki-client