Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa
File:                     ED49BD3C649A11ECBDAC9565C4F9AE02.roa (raw, json)
Hash identifier:          rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=
Subject key identifier:   2D:89:B3:CC:6C:5E:BB:D4:A4:AF:47:0A:7E:2A:6A:F7:41:5B:C5:1A
Certificate issuer:       /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial:       0630
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:36:22 +0000
ROA not before:           Thu 23 Oct 2025 00:13:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        43.248.8.0/22 maxlen: 24
                          103.39.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
        Validity
            Not Before: Oct 23 00:13:55 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46b06-cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:0a:97:da:72:9b:58:f4:9d:da:63:d2:e0:
                    ca:a1:48:5c:88:23:7b:a5:2d:29:02:71:8c:a9:4f:
                    af:8b:9d:23:67:2e:0b:78:cd:b3:6a:2e:36:29:f6:
                    c4:aa:2a:af:41:4f:55:70:bc:c6:fd:cd:9d:58:b3:
                    ee:c7:2e:4e:c9:ba:d5:49:44:da:4b:0d:02:62:9b:
                    db:2d:b6:99:d1:c3:ce:89:bb:31:5f:91:3b:d0:c4:
                    19:99:4e:3f:81:25:fd:6a:ca:f8:82:a0:f5:28:c5:
                    b1:dd:f2:6e:9f:bd:cf:46:1a:a9:7e:d4:1d:7f:2c:
                    7d:56:5b:34:50:d4:f8:ef:d8:22:14:2f:bc:b2:6d:
                    7f:2f:8d:75:5f:fa:51:94:56:7f:ee:23:20:63:42:
                    bd:20:52:9f:4d:15:85:7e:5b:39:fc:6f:c9:38:41:
                    48:c4:ac:7b:e0:90:89:ad:16:b6:d7:b2:53:70:7d:
                    e1:95:0a:3b:67:f3:f1:bb:01:83:7d:00:71:32:29:
                    d3:4d:63:ac:52:a1:28:e2:1e:cf:74:26:23:0f:6e:
                    54:9e:b2:ed:5c:5a:da:a8:cf:2b:ee:fb:7d:16:bd:
                    11:77:98:a6:1b:a4:d2:a4:35:f8:89:46:cc:dc:ca:
                    df:ed:75:79:f4:d9:a8:29:d6:af:55:9f:de:bc:32:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:89:B3:CC:6C:5E:BB:D4:A4:AF:47:0A:7E:2A:6A:F7:41:5B:C5:1A
            X509v3 Authority Key Identifier:
                keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.8.0/22
                  103.39.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:6a:b2:ff:f7:25:ad:df:1e:86:f5:e8:7b:c4:04:44:81:
         db:e7:90:de:2c:c1:eb:e3:9f:9d:db:7e:a7:74:93:09:c3:3a:
         c2:39:54:73:37:22:01:e0:46:c4:b8:f1:b3:f0:ef:f9:06:4a:
         85:d5:f0:94:96:1d:9b:51:7d:bd:be:12:d4:e0:b4:ab:7d:42:
         89:cf:4d:22:6b:49:4d:42:d3:fb:99:97:95:84:e4:ee:4e:f8:
         a9:6c:d1:60:83:99:98:ca:37:76:92:3d:8f:8a:81:ce:e6:ec:
         97:3a:3b:c4:59:1f:bf:e2:4d:eb:9d:27:cf:bb:4e:f7:fd:9d:
         82:b9:95:42:05:ab:b4:3d:84:39:eb:19:78:ee:0d:79:10:80:
         ce:8d:b2:71:72:45:4e:2b:a8:ca:e7:25:6c:dc:68:52:b6:0f:
         83:e6:89:32:63:fd:46:7f:1c:95:cd:1a:72:5f:77:00:31:c7:
         3e:be:d9:09:42:06:0f:96:13:1e:1c:3a:8b:8e:f2:01:7e:4f:
         06:ed:85:79:6e:4e:e5:35:7e:dd:08:ce:cd:2d:ec:6b:1b:7c:
         6c:f2:e0:97:13:a7:b2:f0:6a:8b:e8:31:4e:21:46:25:c7:f8:
         d3:26:2a:6c:89:b4:d7:bc:43:1e:64:dc:b7:80:85:a5:be:3d:
         9d:a0:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:27 2026 by rpki-client