Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
File:                     B4D99056FF2511F0989D8DC686EE528E.roa (raw, json)
Hash identifier:          WdmpqKDqJSck9efiVNrIC3nj9M8vw8KNTx4xTBDUZ4c=
Subject key identifier:   29:88:B1:7A:7D:64:80:84:0F:EB:28:33:CA:F1:FB:F6:90:AA:3D:79
Certificate issuer:       /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial:       018F
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
Signing time:             Sun 01 Mar 2026 16:56:14 +0000
ROA not before:           Tue 03 Feb 2026 04:23:02 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     9821
IP address blocks:        103.80.140.0/22 maxlen: 22
                          202.90.128.0/19 maxlen: 19
                          202.90.135.0/24 maxlen: 24
                          202.90.155.0/24 maxlen: 24
                          203.211.56.0/22 maxlen: 22
                          2001:d18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Validity
            Not Before: Feb  3 04:23:02 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a46fae-aab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:0a:c6:21:0c:f1:17:63:c4:be:28:78:16:
                    a6:d2:82:f1:38:5e:c3:71:d6:03:b9:05:bf:4c:de:
                    5e:28:40:b7:0b:b3:e6:e9:12:c6:7f:58:c9:b5:2a:
                    03:a2:a7:5c:97:a1:21:39:1a:65:32:70:2e:1a:c5:
                    00:3c:56:a7:70:8f:14:7b:dd:f1:ea:c9:84:87:c2:
                    19:58:92:ae:19:b1:f7:f8:ef:7b:ca:88:a2:e1:52:
                    02:77:0c:eb:a2:a8:41:4c:d0:5b:68:92:6e:19:47:
                    99:49:c9:d1:3d:09:3c:bc:9b:22:bb:96:14:35:ca:
                    92:5a:ee:92:8e:b2:0d:f5:4c:1a:f0:77:16:3c:ca:
                    d4:01:de:c3:51:d4:c2:a5:39:dd:f6:43:ca:30:25:
                    5f:3f:b9:17:f7:a1:7b:65:76:23:8f:b9:27:96:a5:
                    28:75:e5:2b:09:13:34:16:0e:10:9c:5c:d7:0d:55:
                    87:1f:e9:8e:e1:7d:07:19:89:6c:95:66:34:ac:22:
                    b4:53:a1:cb:ec:b0:2c:6d:61:5f:30:b4:44:06:37:
                    4f:6f:20:27:d8:b2:c7:3b:a5:fb:46:76:a3:4a:18:
                    5f:e2:d9:75:b4:36:4d:33:e4:f4:00:a9:50:db:19:
                    8a:9b:ce:0c:1b:72:2b:82:98:db:28:38:63:3e:e4:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:B1:7A:7D:64:80:84:0F:EB:28:33:CA:F1:FB:F6:90:AA:3D:79
            X509v3 Authority Key Identifier:
                keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.140.0/22
                  202.90.128.0/19
                  203.211.56.0/22
                IPv6:
                  2001:d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:14:59:a6:e6:aa:93:cf:a8:1d:db:40:8b:77:1b:ba:9c:
         bd:06:cc:7e:1f:9f:88:0e:71:e0:29:7f:18:ad:93:4d:96:d5:
         e1:2d:0c:31:52:a6:df:76:1e:21:ff:b3:65:d9:95:da:85:94:
         26:d2:a8:8f:02:13:5e:8b:ce:ff:e0:10:56:41:9c:b2:81:ec:
         d0:35:cb:ee:4a:3c:40:48:90:b6:03:c1:0a:02:ae:f8:bb:45:
         85:5b:65:a0:8a:a4:7a:f0:00:f8:75:3e:73:f3:3d:f2:d2:42:
         f9:0b:ac:48:85:12:0e:e2:dc:b4:9a:3a:bc:da:e6:58:49:18:
         79:b7:e7:14:e5:31:f6:00:85:50:d4:17:9c:c4:0a:15:3a:05:
         70:00:ab:f5:b8:0b:66:cd:2c:b2:3e:b1:7c:4b:d7:3e:64:91:
         97:07:83:c2:a1:fa:1d:dd:7d:98:20:32:11:22:ee:5c:63:ae:
         81:08:f0:bc:4c:67:d6:d8:82:f5:44:da:df:04:23:11:0a:73:
         be:e9:23:3d:8f:02:36:96:84:46:f0:02:28:02:ac:01:27:c4:
         d4:a2:58:a7:8f:33:52:30:ea:ef:9d:de:99:37:62:bf:26:57:
         ef:ad:a6:e4:aa:5a:31:93:d6:05:26:f9:62:98:dd:ae:bf:4f:
         83:2e:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:22 2026 by rpki-client