Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
File:                     783C88A285FF11EEAFD34A2CC4F9AE02.roa (raw, json)
Hash identifier:          CyhUpuelxfurs175TzhNpev0g401OlIUHRIQIbAxz3o=
Subject key identifier:   5D:5B:7E:88:B6:0C:58:18:97:1F:3F:1A:FF:72:EE:B8:F0:5E:52:DE
Certificate issuer:       /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial:       04CA
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
Signing time:             Sat 07 Feb 2026 00:19:56 +0000
ROA not before:           Sat 07 Feb 2026 00:19:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     151332
IP address blocks:        103.179.36.0/24 maxlen: 24
                          103.179.37.0/24 maxlen: 24
                          2001:df0:45c0::/48 maxlen: 48
                          2001:df0:45c1::/48 maxlen: 48
                          2001:df0:45c2::/47 maxlen: 48
                          2001:df0:45c4::/46 maxlen: 48
                          2001:df0:45c8::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
                          rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
        Validity
            Not Before: Feb  7 00:19:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6986852c-83cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:54:38:6b:be:cd:a7:66:17:40:27:24:94:
                    3f:7e:61:9c:c4:dc:13:5e:8b:04:de:a8:5b:bc:95:
                    f9:c0:a9:a2:3b:3f:c0:ef:52:ca:93:7e:c3:da:eb:
                    c0:f2:4e:b8:e9:08:2a:53:3d:81:34:88:f0:63:fe:
                    b8:a1:d6:c2:10:1b:9c:a5:e8:61:ad:bc:4f:2d:4e:
                    a6:70:06:c2:f1:56:bc:27:b0:b5:22:01:ad:76:a3:
                    d5:56:4e:5d:39:f8:14:f9:21:a9:b2:ec:21:c7:11:
                    0f:c5:4f:79:b5:1b:df:54:00:2d:4d:07:a1:35:85:
                    bb:b6:7e:bc:52:1a:2e:12:31:67:fb:c5:d8:b3:dc:
                    92:f0:a4:8a:bc:af:e8:ea:20:5e:9f:87:d7:7a:1b:
                    7c:25:6a:e5:16:a2:b7:60:36:94:7d:11:ef:6a:2f:
                    15:a1:60:17:ff:64:69:b2:0a:c6:46:62:f1:8d:d0:
                    69:50:b1:50:91:b2:8f:90:c0:20:5f:d2:0e:85:90:
                    db:4a:dd:18:c5:90:c2:4e:b6:08:84:52:83:23:2f:
                    81:33:40:aa:37:83:b0:fa:7f:4e:d9:54:ac:c2:4b:
                    26:86:54:cf:8c:c8:f5:ee:23:dc:1d:7f:c1:94:5f:
                    5b:07:25:ee:cd:61:99:de:2a:9b:ae:5a:c8:48:85:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5B:7E:88:B6:0C:58:18:97:1F:3F:1A:FF:72:EE:B8:F0:5E:52:DE
            X509v3 Authority Key Identifier:
                keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.36.0/23
                IPv6:
                  2001:df0:45c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:41:f1:c7:99:8c:86:3a:73:fb:32:5a:a7:c2:ad:c7:ef:00:
         32:08:72:1c:1b:92:2a:84:eb:7e:24:3e:1e:3f:67:62:fd:e4:
         e3:4b:d5:ad:a5:c9:44:51:ab:ec:ca:6f:cf:0b:ee:16:ff:3c:
         5c:57:c2:59:96:4f:fc:f4:a9:93:73:c9:02:5f:a2:11:e7:1c:
         96:e6:5b:c3:ce:c0:28:97:52:14:92:03:bc:2c:f2:15:ee:9b:
         c9:1b:51:1b:cf:a4:74:76:50:4e:cd:14:c4:cb:bc:da:95:df:
         ba:62:ec:05:5b:0f:f5:7c:25:f9:3a:b2:14:92:97:b2:2c:a7:
         f1:e1:16:98:3b:0e:b9:59:da:62:d2:04:eb:c8:3c:83:57:11:
         d9:bc:ef:dc:1c:62:90:82:30:f9:84:7f:3e:06:66:36:6f:f8:
         d0:f6:52:5c:a1:6f:ce:cf:bd:e1:67:97:4b:e7:d2:e0:32:7d:
         b8:0e:fa:58:6d:2b:5e:5b:37:29:88:08:96:d0:33:a7:3d:f4:
         5d:61:e8:2c:97:40:30:ce:2c:7f:3c:97:45:f6:0c:33:d2:3d:
         61:75:16:92:22:6f:d8:71:68:d0:36:82:53:d7:2e:34:84:fc:
         ab:b3:ad:0b:34:b1:b6:e4:7b:55:2d:38:18:f1:cc:16:be:ec:
         0a:74:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:57 2026 by rpki-client