Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa
File:                     E0BC0B4C011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier:          TQPUr83+4QFfxrmveT7ts0ztgC3olEi7fsnrMHT3vIA=
Subject key identifier:   9B:07:BC:FD:5A:1A:A8:70:DB:99:6D:1C:5D:38:4F:D2:C3:6C:79:96
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0CF8
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:52:38 +0000
ROA not before:           Tue 08 Jul 2025 18:58:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131996
IP address blocks:        103.69.208.0/24 maxlen: 24
                          103.69.209.0/24 maxlen: 24
                          103.69.210.0/24 maxlen: 24
                          2001:df3:5a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: Jul  8 18:58:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a444a6-8cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:99:03:dd:ea:e3:49:68:5a:d1:7d:ee:f0:
                    77:a9:2b:f2:a8:94:c1:35:60:39:c1:68:f7:de:7a:
                    ed:f0:09:9d:8d:6d:47:4a:da:c2:cc:f6:fc:75:e5:
                    fe:18:3b:46:9b:8b:f8:70:44:ae:94:1d:65:f5:eb:
                    b8:1d:73:2d:39:76:56:63:4f:a5:4e:27:a5:27:be:
                    a5:f3:ea:b4:16:c0:18:0c:d9:c3:5c:9c:2a:d6:75:
                    28:bc:93:48:d0:f8:ea:0f:47:9e:cc:21:b7:f1:bb:
                    7f:9c:df:59:67:32:0b:41:d6:66:dd:f3:94:9e:93:
                    24:36:e1:5e:94:57:5b:4a:89:92:70:c5:c0:da:93:
                    8b:75:0e:91:9d:85:62:d7:19:fd:a7:a6:61:80:20:
                    51:d8:34:58:3b:d2:7a:c7:d7:69:a6:eb:14:10:fb:
                    94:83:81:40:6a:8a:20:44:1b:3a:dd:f6:b9:a7:be:
                    58:70:e0:5c:d8:94:b6:9e:a1:ce:27:c0:65:0d:a2:
                    a5:3d:31:b5:1b:64:f6:8c:a1:0d:d2:38:5f:d0:18:
                    24:05:3e:b8:1c:8b:70:e5:e5:cc:70:ed:7c:1a:a5:
                    61:9b:37:89:6e:25:49:46:09:dd:ba:8f:d8:61:fc:
                    48:39:c0:16:a0:99:6c:db:0e:8c:22:14:7f:6d:58:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:BC:FD:5A:1A:A8:70:DB:99:6D:1C:5D:38:4F:D2:C3:6C:79:96
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.208.0-103.69.210.255
                IPv6:
                  2001:df3:5a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:8d:da:d7:e0:d6:95:0b:ea:d1:d2:39:00:a4:da:4b:1b:
         fa:01:f0:ad:37:23:22:c5:92:b5:c4:6a:70:af:a4:99:aa:16:
         b7:a2:2e:e9:e0:35:ad:48:66:84:2a:79:2f:dd:66:62:75:fc:
         f4:3b:0c:6e:99:17:1e:ea:02:35:74:9d:2d:21:47:3b:d2:b7:
         d5:2c:bb:b4:22:61:1b:d6:b6:6b:6f:3c:11:4a:d5:cd:9f:21:
         a0:69:56:a2:c7:33:22:83:0e:4e:da:fa:d6:39:d2:cd:0d:05:
         5b:1f:62:00:0a:2b:cc:07:53:fe:5c:43:58:26:b2:41:c0:0f:
         b6:35:4f:f5:3d:4a:a1:5b:af:f2:ce:29:d0:80:2c:5d:c2:5e:
         62:cf:78:04:fc:10:51:24:9e:e7:fd:44:eb:87:b3:3b:f1:8b:
         02:51:95:a1:d2:32:95:72:3c:53:8c:00:c3:95:ce:bb:fe:25:
         0b:c1:a9:24:d8:f9:64:5d:f7:92:4c:d9:e7:26:f9:f0:14:4f:
         ba:ba:4b:54:be:84:d1:03:3e:a5:f1:46:9c:a6:c6:f6:bf:12:
         6d:8a:1f:5e:35:9e:79:4f:86:3d:f6:69:78:bd:56:2a:1c:dd:
         91:94:55:f1:36:79:bb:d6:ff:1b:a1:d5:03:8c:8b:e0:ea:4f:
         9f:ba:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:46 2026 by rpki-client