Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B111111288B411EF80480527C4F9AE02.roa
File:                     B111111288B411EF80480527C4F9AE02.roa (raw, json)
Hash identifier:          ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=
Subject key identifier:   23:A0:8F:CE:6A:8E:77:6A:11:61:8E:87:B8:A6:3B:BF:B3:73:07:8A
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03ED
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B111111288B411EF80480527C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:46:11 +0000
ROA not before:           Wed 25 Jun 2025 01:28:04 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132335
IP address blocks:        103.26.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jun 25 01:28:04 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48972-311f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:09:7b:a0:83:a7:f7:5a:6e:6e:70:b3:52:
                    c9:08:5f:f7:b0:3e:1d:e1:d5:9a:c4:85:dc:eb:60:
                    9d:03:2b:69:62:8d:be:59:06:72:eb:62:53:d9:ea:
                    63:22:04:81:cc:bf:b4:ee:6c:ad:fc:68:21:04:5a:
                    29:6a:3f:a3:98:e8:08:5c:e1:98:60:b9:c5:d4:c3:
                    92:69:1f:4a:c9:83:cd:c3:11:c8:c7:97:28:d5:7c:
                    01:bd:d5:09:af:db:ba:4f:01:ec:0b:c8:b2:03:35:
                    af:41:68:5b:41:f6:84:e9:03:ce:66:4b:85:27:89:
                    f7:74:c5:af:91:cf:e9:9c:21:6d:3e:8d:3b:94:b2:
                    cc:10:d1:68:01:6e:64:07:68:e6:52:1c:20:de:fd:
                    8c:12:c4:4e:63:29:b9:53:7d:c9:95:69:5b:1b:87:
                    ce:49:3d:f0:d2:86:8f:e9:1a:ee:24:40:59:b1:e4:
                    76:ec:7d:77:14:03:9a:28:98:48:c2:ff:3c:0f:64:
                    b5:9c:d4:eb:8f:0f:24:26:5a:87:05:c7:38:03:d9:
                    59:4f:8b:cc:39:4e:fe:73:b2:5c:03:9a:71:45:59:
                    a2:18:0b:b6:d0:b5:75:46:a2:97:bd:48:7d:4a:79:
                    40:0f:46:58:f0:f2:8b:9d:06:b5:2d:9e:70:a6:a9:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A0:8F:CE:6A:8E:77:6A:11:61:8E:87:B8:A6:3B:BF:B3:73:07:8A
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B111111288B411EF80480527C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:10:99:5d:e0:03:d2:15:79:97:be:72:bc:ac:27:cb:24:b7:
         02:1e:b7:d4:90:86:e6:54:ed:10:5e:03:3d:b4:31:48:9b:67:
         a3:cc:f8:63:76:b3:da:c5:25:a3:ad:e5:d3:78:65:79:2f:d5:
         43:48:93:2e:ff:ed:69:c5:50:ff:31:d1:f9:8d:0f:b7:37:bf:
         30:b4:81:d4:9b:45:78:4f:32:8d:b7:48:87:d8:28:fe:32:4c:
         1b:b4:f2:af:a4:43:e0:13:11:58:f2:29:22:22:1e:f3:81:56:
         bf:8e:17:a5:a2:c4:eb:37:5e:6b:95:83:bd:16:dc:53:9b:c4:
         e7:a0:c1:ac:bd:b6:fd:04:20:60:39:04:5f:d3:a1:8a:37:b7:
         ee:b2:2e:16:10:13:cc:cc:a2:e2:3a:be:c5:be:7a:be:38:7b:
         d1:e3:2d:ab:01:fb:9a:80:95:65:7b:0b:8f:be:d3:9a:82:36:
         ab:de:da:2f:44:0c:8c:5f:0b:2d:ca:f3:f9:fc:28:16:0e:b2:
         c0:04:d6:f5:06:b7:26:b2:94:89:ac:67:1d:62:54:04:a4:74:
         5f:88:cc:00:ef:1a:e9:5a:3d:40:9b:ff:d9:ef:9e:60:80:90:
         ab:d0:07:a2:a5:ab:ff:b7:e0:be:c4:06:41:29:a9:b2:98:1f:
         f3:36:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:22 2026 by rpki-client