Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/05CABF92A64111EAB544074CC4F9AE02.roa
File:                     05CABF92A64111EAB544074CC4F9AE02.roa (raw, json)
Hash identifier:          SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=
Subject key identifier:   26:47:57:90:60:3E:30:88:7E:80:A2:C1:55:ED:C6:68:9F:E4:22:CB
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       09A9
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/05CABF92A64111EAB544074CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:01:24 +0000
ROA not before:           Thu 05 Feb 2026 06:17:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45599
IP address blocks:        103.10.204.0/23 maxlen: 24
                          160.19.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Feb  5 06:17:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a462d4-bb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:aa:5f:75:0d:ee:c3:3c:29:ea:de:08:10:
                    54:cb:37:2f:86:13:0b:35:10:96:0c:f5:a9:8c:c7:
                    d5:6d:58:f8:59:98:31:07:33:7b:ca:9e:1d:fe:f7:
                    3f:39:41:d9:23:d0:be:c6:cc:87:4c:f0:5c:85:e9:
                    49:1c:61:39:a8:77:b5:4c:3b:2f:7f:32:5b:4d:b9:
                    cf:2b:57:b9:37:22:68:ee:ca:72:94:04:b7:da:8b:
                    86:61:d3:71:bf:f8:a9:44:58:12:08:e0:13:d9:08:
                    38:66:81:32:cc:3d:3a:8b:57:9e:0c:0e:44:d2:68:
                    3a:72:92:d6:79:ad:08:dc:65:67:d3:7d:09:d7:4d:
                    63:d7:f9:1d:42:6a:20:8f:81:68:c4:5f:ab:e5:44:
                    f1:52:03:84:66:ec:60:92:6a:3b:a9:a7:ae:f0:28:
                    21:d5:cf:2f:fe:30:d4:3f:4e:ae:58:0d:22:a3:63:
                    5f:64:6d:eb:76:95:c6:34:d8:ab:e7:56:0c:66:24:
                    42:52:04:84:da:00:50:e0:99:02:2e:af:75:11:86:
                    7b:06:35:ec:3f:1b:6d:64:8c:50:5e:b2:cc:b6:cf:
                    1d:be:cd:99:74:4d:d0:df:cc:40:15:ab:03:8d:a8:
                    6a:27:c1:93:42:a3:83:0f:96:73:c1:4b:a8:56:7d:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:47:57:90:60:3E:30:88:7E:80:A2:C1:55:ED:C6:68:9F:E4:22:CB
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/05CABF92A64111EAB544074CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.204.0/23
                  160.19.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:89:49:a2:49:26:f1:9b:67:9c:01:4f:ce:4a:2e:d9:fd:
         73:0b:d3:c2:86:43:f5:0b:e7:57:bc:17:8d:88:86:b7:be:4e:
         cc:a5:0c:bd:27:d4:d1:8d:94:0a:ae:0b:f0:e9:ba:4f:fa:ea:
         fe:38:28:72:ec:39:44:db:59:80:bd:97:46:93:de:9a:f4:bc:
         e5:aa:ed:7d:ec:cf:5f:69:a3:63:79:ee:84:7e:a0:6b:7f:73:
         d6:82:1d:de:d6:5a:a0:d5:f1:9c:48:f3:58:2b:c6:6e:0f:ff:
         2d:f6:16:64:2e:f8:17:53:11:2f:3c:41:01:e2:04:b5:e8:91:
         7a:f0:7d:70:ae:f9:35:8a:5f:dc:1c:43:81:5a:88:65:29:43:
         84:06:d6:75:df:a2:cb:d4:c8:db:06:b8:d3:4c:80:9f:17:12:
         7c:b9:0e:bb:15:4b:f0:0f:8d:39:38:b4:16:98:84:11:9d:a8:
         e6:a3:c8:ce:ee:bf:d1:46:75:ff:ee:2f:f2:82:34:29:1b:0f:
         de:d0:5a:c4:36:64:ab:c1:04:09:a0:7f:fe:01:bd:0a:a4:74:
         be:a7:ec:24:7a:c7:cb:7d:fa:6f:66:f4:56:74:35:1f:d8:34:
         da:ac:f0:c4:fe:f4:22:8d:f3:11:d3:2c:05:97:29:79:20:f5:
         95:5e:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:21 2026 by rpki-client