Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa
File:                     2B8EF9AA083911F0A051CE72C4F9AE02.roa (raw, json)
Hash identifier:          L0al7k74eWiWJ3CDPsdhftXr9mpgHroxqH7auSGrGNY=
Subject key identifier:   DF:20:1A:B7:4E:FD:22:90:E5:2A:BC:12:CA:B8:F5:42:B7:32:03:D9
Certificate issuer:       /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial:       0253
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:59:10 +0000
ROA not before:           Thu 29 Jan 2026 02:22:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138039
IP address blocks:        103.176.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
        Validity
            Not Before: Jan 29 02:22:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4381e-544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:ac:1a:9c:84:ba:86:49:0a:f3:c2:75:65:
                    2e:70:5f:25:e6:a3:1e:55:bb:a1:b5:73:62:b3:59:
                    bb:4d:f7:5a:d0:a3:80:0f:97:37:0e:c1:f7:52:18:
                    f1:c2:f7:11:73:ae:5f:95:7a:f8:ec:d1:52:71:6b:
                    31:ab:78:04:14:2a:b1:33:31:82:e7:e4:16:53:ff:
                    2d:55:3d:7b:9f:b0:a5:36:c1:ac:bb:1e:b9:ac:27:
                    d4:70:bf:1a:93:6f:c5:cd:8b:a3:46:a1:9d:bd:ab:
                    9b:21:1c:37:0e:0e:ed:7b:6e:b9:f5:9a:f4:8a:2f:
                    f6:92:ed:cc:c3:01:ed:77:73:a4:8e:88:40:f9:ef:
                    f8:63:cd:96:50:4e:5d:ab:79:58:c0:d4:8d:48:f7:
                    57:d4:37:e2:fa:7c:2a:51:cb:cd:dc:d5:a2:8f:c2:
                    6e:56:56:d4:5e:e2:57:40:af:d9:34:a9:b9:9e:53:
                    85:c5:8f:2b:38:31:b6:76:bd:6c:2e:7b:9f:d4:5c:
                    12:1b:8d:9d:84:7e:1f:68:51:ee:90:85:a3:a4:b2:
                    23:77:d7:d5:a1:6c:48:6c:26:db:ef:8f:48:0d:af:
                    59:cf:f2:e1:c1:37:f2:cc:e8:3d:02:c0:da:a2:45:
                    e6:ca:4e:c7:ff:99:1b:5f:32:17:05:72:d9:b4:30:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:1A:B7:4E:FD:22:90:E5:2A:BC:12:CA:B8:F5:42:B7:32:03:D9
            X509v3 Authority Key Identifier:
                keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:11:9b:7a:1d:bc:9c:a5:18:89:9a:3c:fa:4a:4f:cd:db:
         e8:9a:f3:b6:58:40:ae:e7:aa:d8:98:bc:32:50:5b:50:27:81:
         46:5f:16:9f:7c:5e:c9:3b:3e:e3:c0:7b:c4:c9:cb:c2:38:49:
         c9:20:09:23:27:45:53:70:2f:fc:d0:53:1e:eb:0b:4f:56:c4:
         f1:e5:08:00:90:ed:ab:b6:15:25:48:6e:a3:ab:97:ea:b9:d0:
         f9:ed:43:07:fd:57:96:97:d1:dd:87:57:77:f4:76:b9:01:3e:
         6a:13:fc:a8:77:04:32:d4:b3:e9:5a:fd:b1:e6:1a:de:9c:9f:
         4f:f9:81:cc:1e:e0:ad:9a:20:b9:f9:8b:f7:1d:ee:42:c9:bf:
         06:e9:01:19:5f:67:97:d2:48:b4:5e:93:71:6c:56:b9:bd:79:
         96:d1:7b:42:c7:a4:e3:3a:1c:f2:78:f4:90:06:2f:0e:dc:aa:
         6a:b4:56:95:ea:fd:8a:ba:90:d9:6d:70:1a:ca:a3:59:8d:26:
         bb:40:cc:77:0a:6f:78:d3:60:0a:30:2f:4d:b5:97:b4:88:95:
         e3:ea:a4:05:74:64:f8:e5:a5:48:24:e5:b0:6d:af:4a:b1:6d:
         5a:2a:3b:18:81:41:57:0f:b2:05:68:7a:da:6e:37:0d:d8:ef:
         c1:94:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:46 2026 by rpki-client