Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa
File:                     289652667B7511F0A2592A6EC4F9AE02.roa (raw, json)
Hash identifier:          SF2C+YB+2OsCjgL1wRHHBqrGMEzPgqA1TH4Uv/sOgc4=
Subject key identifier:   FF:8D:CF:7B:D6:47:64:6F:7F:0E:1D:B3:0C:8A:4A:FD:B4:03:79:BB
Certificate issuer:       /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial:       01C0
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:04:53 +0000
ROA not before:           Wed 15 Oct 2025 07:01:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141209
IP address blocks:        103.252.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
                          rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
        Validity
            Not Before: Oct 15 07:01:36 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43974-8de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:d0:00:9a:44:3b:7c:90:e5:ae:a2:20:ab:
                    91:dc:32:32:c9:0a:a2:66:b9:8a:f1:4a:5c:17:12:
                    9e:81:72:85:c2:5b:ec:69:ec:22:0f:53:03:fb:8e:
                    78:a2:9b:d7:1f:b1:16:d3:16:91:c1:4c:fd:90:c0:
                    5f:b7:43:23:a4:06:0c:f0:24:7c:ed:8f:4c:fd:fb:
                    77:d1:a3:61:92:7b:6b:bc:03:e9:3a:38:c5:46:7e:
                    93:9e:68:f3:8a:b9:f4:5d:c2:e0:05:dc:d7:98:26:
                    43:44:c2:fc:70:10:ee:27:a5:9e:99:08:e2:16:a8:
                    77:e7:25:9a:77:e3:b0:60:62:21:ce:fe:6a:5f:a5:
                    c9:1c:5a:bc:9c:87:51:4b:9a:13:1c:19:c3:f5:d1:
                    c4:b4:0f:48:88:5c:24:4d:6c:2a:7f:80:4f:94:03:
                    08:bf:fc:ed:26:42:1f:01:5a:06:c8:1e:45:5e:a3:
                    87:ba:76:85:7e:ef:97:cf:fa:40:9e:72:8f:7a:68:
                    e8:4b:cd:8c:a0:90:5e:bf:b5:c6:e0:ca:53:41:f3:
                    3f:9a:04:33:b0:dd:12:96:23:3f:a2:d2:72:79:c5:
                    4c:ec:be:6a:e9:32:5c:86:a1:4d:3e:55:02:92:8e:
                    48:1b:62:84:0e:9c:6d:5e:72:fe:fd:27:61:24:61:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:CF:7B:D6:47:64:6F:7F:0E:1D:B3:0C:8A:4A:FD:B4:03:79:BB
            X509v3 Authority Key Identifier:
                keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:22:41:f3:05:28:ea:36:79:a6:2c:f5:55:f4:db:17:51:99:
         53:4a:10:35:ff:85:0a:d1:13:42:6a:7a:85:1c:2e:e4:98:30:
         a2:24:5f:17:46:78:5a:1f:3b:08:79:66:0f:63:6b:15:43:ad:
         0a:22:04:38:22:1b:cf:0f:13:95:dc:9d:5f:ac:1c:ee:27:04:
         5a:ff:cc:84:df:8a:e5:a5:c0:54:9d:80:8d:1a:ef:3b:5c:0d:
         bc:0a:b9:1d:d9:7c:b4:54:f6:0f:94:91:b0:3f:07:68:42:98:
         a7:08:fc:af:78:05:f6:63:f2:87:90:a2:d2:d4:9c:2b:40:84:
         21:6f:b9:d9:82:06:05:43:f9:cb:f2:a3:ea:c9:ea:b8:a4:f0:
         36:aa:d7:44:fb:a4:9f:94:99:d8:ff:cb:f3:81:a7:ba:7b:80:
         a5:76:75:dd:d8:af:a7:6f:66:46:30:05:72:5e:ed:08:7b:68:
         26:75:83:5d:fa:21:72:24:ae:87:3e:97:80:9f:6f:17:71:9d:
         3d:61:f6:f9:81:d9:7d:35:6c:44:fb:32:3a:13:2e:b2:12:3e:
         16:8d:76:1c:98:ee:2d:a6:ea:21:f7:e0:6b:c4:dc:4b:cb:e9:
         c8:24:86:a7:e5:a7:19:82:e1:f2:40:32:72:d3:ce:96:66:48:
         dc:22:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:46 2026 by rpki-client