Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/24E9EF3C9C0B11EFABD74439C4F9AE02.roa
File:                     24E9EF3C9C0B11EFABD74439C4F9AE02.roa (raw, json)
Hash identifier:          Jw2/8hFCb7UkBZKdXroqCm0fztt63pPdu28ak1gMp9I=
Subject key identifier:   A0:A4:88:A9:D7:29:1E:96:70:4A:DC:EB:50:67:3A:AB:B6:35:17:02
Certificate issuer:       /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial:       F9
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/24E9EF3C9C0B11EFABD74439C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:55:07 +0000
ROA not before:           Sat 19 Apr 2025 06:32:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        103.52.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
                          rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
        Validity
            Not Before: Apr 19 06:32:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e2cb-b496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:99:03:30:33:33:36:21:1a:a0:7a:c5:48:
                    7e:6b:90:c0:83:00:51:7d:e3:bf:ae:5b:df:63:cb:
                    df:7c:00:78:cc:89:4f:56:02:9e:40:f4:ae:2f:32:
                    8c:4f:5a:35:86:c7:00:c9:c6:97:15:2d:92:15:06:
                    4c:74:88:9f:c1:dc:ec:0b:99:6a:ac:5c:85:29:d8:
                    01:5f:76:3f:ee:87:76:10:39:e7:c5:7a:7c:6b:0f:
                    2b:52:a8:37:67:34:6d:96:87:2e:43:c2:a9:69:53:
                    c3:68:d8:94:84:a0:e7:f3:f3:e5:6c:6a:4a:a2:cb:
                    ac:11:3f:11:39:5f:06:04:6f:9d:06:d0:93:79:44:
                    3b:a0:28:ef:d2:0b:8e:be:c7:76:8e:90:15:78:f5:
                    15:59:f9:85:21:17:34:93:57:7d:83:a7:00:82:b8:
                    c1:69:f2:29:be:db:4e:0b:9d:9a:0e:88:20:20:dd:
                    d9:77:24:e7:dd:b6:6f:58:24:b9:b4:ad:eb:dd:52:
                    cd:d0:9a:7b:3e:6f:9a:e6:dd:18:4d:64:0d:a3:ed:
                    3e:f0:c5:47:7f:59:69:c4:c7:b5:b6:32:3a:07:22:
                    6a:82:93:29:fe:61:8b:3f:cb:33:d4:bb:9d:cd:3e:
                    80:cb:10:ca:b2:fa:f3:50:1e:13:a2:47:4b:e4:54:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:88:A9:D7:29:1E:96:70:4A:DC:EB:50:67:3A:AB:B6:35:17:02
            X509v3 Authority Key Identifier:
                keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/24E9EF3C9C0B11EFABD74439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:40:1e:6c:d5:fd:cb:d0:ff:6a:b3:77:1c:3d:12:21:43:46:
         33:83:fd:3a:16:19:cc:f0:87:a4:28:88:4a:dc:af:bb:89:85:
         40:ec:e3:24:17:98:2d:56:1a:0c:28:84:18:e4:4b:d7:63:1e:
         35:5e:95:50:6a:f6:5c:17:fd:f8:e4:2e:87:e3:2f:f2:f3:71:
         de:ff:57:84:f1:98:45:e0:62:16:fc:0b:cf:72:d7:ac:c2:71:
         73:66:4a:23:9f:46:b7:f4:97:9e:9a:25:66:7f:70:95:6a:ee:
         3e:d2:93:2c:ca:19:e9:f4:f0:57:a4:15:b8:a0:95:e1:90:48:
         80:af:bd:5f:71:12:0c:97:1f:7c:ac:c1:03:62:18:8e:3d:e5:
         07:4d:fd:f2:e2:31:8c:81:78:dc:ea:c5:71:de:d0:40:94:a3:
         ec:a1:65:04:06:53:97:f4:9e:58:b7:fe:a6:ad:bc:0c:e2:17:
         c9:8f:0c:6f:59:cb:b7:24:bd:0f:c8:f4:b7:c8:c3:72:1a:0f:
         11:1b:84:48:45:09:4c:5e:cb:b6:05:5f:cb:06:ad:32:97:c3:
         69:6a:0d:f1:62:c4:06:a1:33:da:60:96:92:21:a3:ee:08:2b:
         3d:9f:63:63:97:0f:db:66:c2:3f:b8:79:f3:88:d7:bb:d2:5c:
         d8:9e:f2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:42 2026 by rpki-client