Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa
File:                     0294E1EADB0D11EE88489759C4F9AE02.roa (raw, json)
Hash identifier:          9DZA6kPOIrAY8e4rFQK1pMOYRt3f89rfc69PwA3YKl4=
Subject key identifier:   8D:8C:01:DA:83:9B:31:44:7A:D0:ED:A3:6B:AA:7F:D7:E3:42:6B:53
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0524
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:42 +0000
ROA not before:           Sun 05 Oct 2025 00:26:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152151
IP address blocks:        103.152.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Oct  5 00:26:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4806e-8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:27:1f:b8:69:e5:f6:db:6c:96:9d:44:49:
                    d4:14:49:6b:46:4b:a4:64:14:de:1f:68:e9:3d:b4:
                    76:11:ea:38:60:2c:00:81:2a:d8:ed:74:55:18:98:
                    4e:e1:09:b5:b7:51:f8:fa:94:41:30:c5:37:9c:26:
                    c3:d4:61:9b:7a:63:68:67:6a:5b:3a:f8:1f:3d:db:
                    bc:78:ee:46:85:37:47:25:a0:c3:ef:33:2c:3f:d5:
                    ba:0c:cd:35:78:42:3d:4d:09:ee:22:9e:66:d7:19:
                    cb:52:79:99:4f:80:31:3b:dc:ea:45:42:26:71:e2:
                    c2:cd:b4:c8:8a:3a:f0:31:f9:47:5e:7e:f6:11:0c:
                    39:42:26:43:53:52:10:e2:fb:98:8a:3a:84:fd:ed:
                    c8:77:8b:0f:96:cd:b6:74:ac:ad:14:ff:4e:7d:de:
                    8b:6c:28:e1:30:8b:e4:3b:06:69:04:53:ad:dd:1d:
                    cb:65:94:25:42:e1:45:5e:06:fa:2b:43:6b:4c:45:
                    c4:c0:e9:ab:5b:54:cd:1f:74:f9:da:39:df:af:84:
                    3d:11:e6:27:e1:97:6c:f1:1c:fd:35:b4:f4:b9:bc:
                    46:9e:47:c3:05:3f:50:97:c7:64:3e:87:d1:9d:7d:
                    4b:c2:7b:30:9c:c7:04:75:b6:2a:70:7e:8a:74:d6:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:01:DA:83:9B:31:44:7A:D0:ED:A3:6B:AA:7F:D7:E3:42:6B:53
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:36:70:48:54:1a:79:99:ba:3e:35:96:5d:bf:95:5a:50:e1:
         77:4e:fa:48:9b:d3:98:7d:68:19:b6:e8:9a:58:79:86:ba:bb:
         06:af:2c:c0:5c:b9:01:dc:6b:97:8b:57:3d:74:db:1b:2b:06:
         41:d5:bb:ff:8f:fc:cf:d8:b0:2d:6a:f3:cc:f3:a3:6f:44:57:
         3e:30:7a:69:0c:3c:c9:27:d0:c6:75:12:11:e2:50:b1:e0:4c:
         52:e7:dd:da:a3:3f:85:bb:a2:6a:5c:09:f8:19:01:23:6d:74:
         7e:12:ab:89:9d:22:17:40:81:8a:d9:01:23:08:d4:f4:c7:83:
         fa:ad:47:74:0d:5e:e3:06:8d:60:d8:c5:d6:8f:eb:2b:9c:81:
         3c:a3:fa:94:82:c2:a4:c2:33:c8:43:10:60:ae:72:39:8c:9f:
         2b:67:52:b6:6a:7c:9e:86:4f:f4:04:c6:3c:1c:47:e5:fc:b4:
         d1:48:57:61:69:d3:94:f4:a9:b1:41:27:c7:c2:97:0b:24:6a:
         97:e2:ac:66:16:f7:03:36:ba:9f:df:cd:0c:ef:cd:b2:f8:ef:
         2a:f1:69:39:46:23:4a:4d:f8:43:29:02:00:ca:e4:f4:ae:ea:
         81:6f:06:6a:ed:81:67:35:2f:e6:cd:e9:95:01:dc:72:4f:d0:
         c7:64:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:10 2026 by rpki-client