Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa
File:                     3FF7C9468C9211ED8D052619C4F9AE02.roa (raw, json)
Hash identifier:          aQw0D37afO5neo4AokVg/IzSK3eNpaf2rox5ksNIBBY=
Subject key identifier:   5F:8E:53:0F:41:B9:58:67:9D:7B:05:87:E6:B0:C0:BB:5E:93:0E:67
Certificate issuer:       /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial:       0253
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:07:01 +0000
ROA not before:           Sun 05 Oct 2025 02:28:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147037
IP address blocks:        103.173.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
        Validity
            Not Before: Oct  5 02:28:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a40fc5-66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:db:ec:1b:19:c3:2d:8b:dd:8b:b4:30:4f:
                    2e:f0:4b:4c:c4:08:01:68:0d:af:f3:cf:e5:1a:bc:
                    d3:a6:6c:14:6e:3a:77:e2:4c:82:db:fb:78:cb:ae:
                    b6:31:d3:cf:f2:d7:f6:01:9b:25:b9:2a:f4:fe:34:
                    2f:9b:04:fe:75:cd:37:89:f5:e5:fb:8d:2e:68:99:
                    ba:d8:a9:c2:01:a1:45:fe:9d:30:59:fa:dd:11:d3:
                    1f:7c:e9:7a:3f:7a:a4:2b:a4:ca:59:7d:cc:ec:97:
                    ac:ea:6e:1a:e7:1f:e4:44:96:60:ff:fc:2b:b5:ec:
                    26:25:5d:c8:ee:bd:57:1b:fc:54:dc:d2:97:5e:94:
                    82:44:3e:bc:54:5a:c0:32:86:26:e2:74:35:ed:76:
                    d2:6e:18:d8:03:dc:27:39:ce:32:07:5e:33:cd:58:
                    8e:3e:d7:dd:3c:18:7b:d8:8c:68:14:ce:2f:e4:e9:
                    02:46:05:06:91:fa:86:b7:80:2e:85:1b:df:fa:a8:
                    a6:62:99:d6:4c:97:9c:07:b8:7a:43:c2:c2:32:bb:
                    74:29:e6:d4:e4:c8:cd:f0:5a:fd:14:83:7f:ca:82:
                    3e:76:ce:f7:0f:83:f4:c6:d4:58:0f:b3:3f:e5:58:
                    1b:4c:8a:89:77:d9:41:41:71:51:87:a7:43:ec:10:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:53:0F:41:B9:58:67:9D:7B:05:87:E6:B0:C0:BB:5E:93:0E:67
            X509v3 Authority Key Identifier:
                keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:92:f8:79:0c:76:da:44:06:db:8a:5f:f8:aa:75:1e:7e:8a:
         9a:c9:6e:32:68:87:5c:a1:00:fb:34:15:7c:33:cb:47:21:a2:
         fb:e5:a6:3a:9a:7c:94:ab:50:b0:7a:05:80:70:45:d8:c3:ed:
         30:55:83:56:8f:f7:3b:ad:72:5d:17:1a:6b:c1:a4:40:b7:0a:
         55:73:45:50:22:5d:09:10:05:2a:bb:21:53:cd:e6:57:d4:d9:
         2e:49:e2:3b:00:cd:8f:d1:d6:51:e3:d5:06:7d:67:ba:14:e9:
         1f:20:9e:d6:06:a9:3a:15:f3:22:28:f5:45:17:34:73:1a:ed:
         00:a7:2d:d2:66:bb:a2:24:a2:72:f0:1b:f0:0f:0f:51:c4:04:
         4a:3b:9a:f1:da:3a:34:4a:68:de:1a:85:09:04:d4:72:ca:a2:
         1d:6c:11:63:81:70:e3:40:7c:cf:5c:ef:28:06:1c:09:e7:8f:
         8d:43:51:7d:48:73:dc:d5:6f:d2:26:3e:78:d0:a9:02:30:fd:
         03:5a:06:4c:ff:32:a7:79:35:31:85:4b:bd:c4:02:2c:95:c5:
         b5:0f:6b:2c:4f:75:20:b3:0c:85:53:5d:bf:dc:05:e9:e8:7f:
         01:c0:e1:b5:b5:ce:b7:30:56:e4:c9:78:52:df:ce:22:4a:22:
         7a:ec:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:48 2026 by rpki-client