Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
File:                     EAAF7884450411F09738105FC4F9AE02.roa (raw, json)
Hash identifier:          E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=
Subject key identifier:   DC:9C:F9:26:80:F8:7D:9B:33:F9:CA:A6:89:B6:37:5B:4C:E5:40:D1
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       03DC
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:43:21 +0000
ROA not before:           Sun 03 Aug 2025 01:39:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  3 01:39:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47ab9-22d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:6a:55:b2:02:f5:0f:54:42:e2:c3:dc:82:
                    1e:e7:f6:9c:90:c0:f4:86:34:63:d3:15:7b:f5:c4:
                    18:73:63:68:af:cd:32:2a:72:d4:49:cd:8c:4e:5d:
                    dd:2c:89:24:cd:73:1c:bf:35:03:8a:3a:74:9d:4a:
                    82:32:e3:73:da:e0:bc:88:00:68:a1:cf:46:cf:3c:
                    40:25:6e:75:2c:07:a3:0f:0f:23:bb:7d:1f:10:de:
                    9f:72:14:6f:01:82:c2:a4:02:4c:6d:c3:75:4f:7a:
                    e9:85:b8:c4:f2:6c:09:1f:ea:4f:09:91:84:08:e7:
                    07:4a:03:1f:ef:a5:22:b8:6e:90:a8:7f:d3:d9:d6:
                    f5:97:af:4b:a3:bd:47:fc:41:70:1f:09:cc:40:e4:
                    9a:64:a1:7c:3a:d2:ec:26:8d:d1:a8:5d:d5:c8:c7:
                    11:3e:71:2b:10:11:26:c3:23:ad:62:01:8b:23:18:
                    2f:a3:57:ca:da:25:e5:d1:7b:68:a2:3e:f5:0b:3d:
                    d9:1d:17:e6:3f:ad:2c:9c:90:6c:91:c5:32:4a:97:
                    c7:00:69:40:2c:32:e4:64:27:eb:94:ec:bc:16:df:
                    3f:f4:f7:52:c6:31:49:cb:6c:25:cb:25:e9:43:de:
                    c9:aa:ce:bd:0c:e9:ce:af:88:ef:d1:3a:fc:90:c8:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:F9:26:80:F8:7D:9B:33:F9:CA:A6:89:B6:37:5B:4C:E5:40:D1
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c5:54:63:11:19:b3:35:39:d2:f0:73:72:0b:c4:b3:d0:eb:
         b5:4f:13:69:4c:4c:fd:4d:7b:56:93:7e:f0:3d:18:f0:9c:fa:
         a1:dd:3a:6a:a4:14:71:55:92:bb:7d:03:e2:70:c9:68:61:58:
         cc:76:9b:2c:f3:ab:af:c7:2f:11:48:19:62:90:c2:7c:cb:b5:
         f9:ee:75:80:75:c7:45:24:c3:61:41:75:5c:6a:ee:62:42:e6:
         1a:c7:94:a2:c3:02:75:2e:2e:7d:2d:4c:6d:31:42:34:ee:8f:
         32:95:82:b5:28:75:47:37:b6:97:ea:28:50:81:37:52:0b:b6:
         07:f3:f4:c6:32:9c:47:d6:04:6b:95:72:57:80:dc:b1:4e:f4:
         18:82:a4:9a:6f:0c:c0:eb:34:56:86:14:8a:fc:af:3b:8d:d2:
         fd:cc:88:98:f1:5a:f8:78:63:e5:37:35:f5:40:df:b2:56:54:
         19:96:62:04:2f:97:bd:16:ec:fa:05:09:c8:0c:ce:bf:68:5e:
         da:85:8f:76:26:f6:33:8a:3c:e1:2f:11:8a:f1:27:de:31:a0:
         71:a7:9e:a3:e2:70:71:0e:c2:da:fb:18:bb:83:d1:71:ed:5c:
         1b:f6:50:46:30:fd:fe:9f:9a:1b:0d:a3:48:7c:b6:94:93:39:
         15:61:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:54 2026 by rpki-client