Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/234205EA327A11E8A1143B79C4F9AE02.roa
File:                     234205EA327A11E8A1143B79C4F9AE02.roa (raw, json)
Hash identifier:          +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=
Subject key identifier:   EA:2E:AD:AD:30:29:F2:EE:4B:F7:FE:A1:E2:52:4C:E1:4A:21:F8:6A
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1AB9
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/234205EA327A11E8A1143B79C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:41:57 +0000
ROA not before:           Mon 22 Sep 2025 16:35:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.241.84.0/24 maxlen: 24
                          103.241.85.0/24 maxlen: 24
                          103.241.86.0/24 maxlen: 24
                          103.241.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6841 (0x1ab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Sep 22 16:35:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46c54-4d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:fc:ec:36:d2:08:ac:d0:ce:c0:0b:60:f4:
                    16:3a:35:5a:22:e8:7c:6a:25:54:1a:d8:32:f3:45:
                    60:c0:f0:b8:52:75:25:e4:71:7c:ea:d1:f3:d7:3c:
                    5a:0f:ef:af:65:c8:e4:63:4d:03:e0:29:71:a6:b7:
                    a6:7b:63:80:fe:6a:65:5a:f1:00:73:ae:7e:6c:4f:
                    92:7c:d8:6e:7b:44:c3:dc:a6:97:7b:d8:ee:bf:c9:
                    2a:06:40:c8:4f:16:a7:21:b1:e6:34:7a:bc:46:f7:
                    4d:ca:da:79:9c:92:b4:ad:74:06:b1:d7:00:ab:ea:
                    47:52:8c:0c:60:ac:63:68:f0:c1:24:74:29:0c:20:
                    27:e0:81:08:e9:87:3b:3b:3f:c1:ac:3e:a8:3b:70:
                    7c:4a:c4:2d:48:a1:12:64:a0:6d:e2:37:87:97:eb:
                    6a:11:6f:a6:18:c7:cb:dc:d1:b8:4e:fd:04:c5:1e:
                    6f:7d:12:f0:e5:8f:e8:96:cb:59:c5:9c:f4:7e:99:
                    f4:65:2b:18:08:ea:e1:4a:18:58:64:42:2c:14:e5:
                    d9:51:ee:73:5a:0d:07:86:d6:c9:4b:6f:b4:ca:16:
                    7c:f0:2d:54:21:4e:e5:bf:6a:b9:0f:fa:32:aa:02:
                    cc:55:7e:9b:82:88:5c:eb:0c:1d:9c:2a:2b:d5:53:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2E:AD:AD:30:29:F2:EE:4B:F7:FE:A1:E2:52:4C:E1:4A:21:F8:6A
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/234205EA327A11E8A1143B79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:1e:0f:43:90:9e:e4:1b:bd:ca:f5:13:08:c8:f8:72:36:
         c7:17:71:32:e2:21:2d:08:01:73:4d:ca:e4:f1:b1:6f:71:ef:
         4a:5f:84:b7:82:23:8d:c2:e7:97:9a:38:46:b6:d3:b9:bd:fd:
         64:54:ba:9e:1e:50:bf:95:d8:68:ef:20:ae:d1:1a:4c:b2:a4:
         ff:2e:85:3e:60:a6:05:0a:f0:03:42:44:73:55:de:85:46:6e:
         98:ff:cb:f1:88:0d:14:ae:44:12:c5:93:3e:fa:5c:a5:54:40:
         88:12:b2:a8:2b:7f:38:6b:1c:14:a6:c4:a4:53:43:92:2c:9a:
         9a:c5:cf:6e:c5:92:fc:3f:bb:31:a3:62:6a:eb:37:45:9f:c7:
         8d:e0:1c:4c:59:9d:62:81:2c:d8:17:4c:87:b4:04:ec:99:ec:
         d8:d9:a0:3d:49:f7:9f:a8:b5:0e:95:bc:64:92:c5:19:38:a3:
         8d:48:db:5a:29:43:9a:8c:58:fc:00:d2:af:7f:d8:f9:dc:72:
         18:30:e3:2b:1a:38:71:d8:88:d1:d2:d0:b4:cd:e7:d2:48:79:
         aa:1e:b5:90:3f:48:27:2c:41:45:e9:d7:6d:27:9a:06:0e:6f:
         c5:ac:c3:6d:00:ef:20:20:16:ee:10:d5:c3:b6:88:9b:53:33:
         80:13:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:50 2026 by rpki-client