Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa
File:                     79FC546E326611F08478D72AC4F9AE02.roa (raw, json)
Hash identifier:          zz0/+1mPK1uuhtSz3L6I5TM++EHZrh4Brc7QpBBGUqY=
Subject key identifier:   93:AB:32:9F:A2:F6:EE:F1:29:D3:C2:13:6D:98:5E:72:B1:23:5D:E6
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       0204
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:16:18 +0000
ROA not before:           Tue 15 Jul 2025 04:10:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151467
IP address blocks:        103.229.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
        Validity
            Not Before: Jul 15 04:10:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a411f2-f0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:a6:4b:3a:47:d7:1c:f3:7b:6b:67:3a:1c:
                    e3:10:7a:c3:e3:e7:85:3b:71:88:7a:e3:86:8a:5d:
                    51:c5:28:5b:24:01:8d:0b:56:a7:18:5c:37:91:6a:
                    8b:33:37:f2:a9:db:7a:21:3a:34:76:61:69:1b:f4:
                    e5:20:00:d1:41:dc:fe:b2:45:e7:df:f5:2f:d6:9d:
                    c1:3f:c7:77:94:f0:59:b5:81:06:53:e7:1e:d6:e5:
                    53:14:08:a8:78:57:41:7b:6f:17:83:f2:46:72:c6:
                    5a:b4:25:61:1d:26:5d:a5:1c:f3:39:c6:fe:43:07:
                    72:ac:92:cb:3e:3c:6d:6c:52:3d:b5:5c:2a:f8:7b:
                    b3:c5:11:e1:98:55:9d:2d:f4:1b:f3:e0:84:f6:f2:
                    f4:10:5f:f0:bb:91:40:21:71:77:da:c1:e3:0f:67:
                    31:ca:b4:d4:e7:df:20:39:b2:68:33:fc:81:5a:c2:
                    5c:50:5f:37:d5:52:3f:74:81:26:70:e0:bb:50:21:
                    c2:d1:5d:f5:7f:ed:c2:8c:07:12:af:60:46:91:e3:
                    bc:b6:39:65:1f:1e:aa:1b:ea:61:41:ad:c8:56:32:
                    d1:a1:32:dc:8c:26:30:45:b5:53:e7:c9:65:f9:82:
                    97:e3:b8:70:05:2b:51:4f:27:c1:c5:83:3a:ba:5c:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:32:9F:A2:F6:EE:F1:29:D3:C2:13:6D:98:5E:72:B1:23:5D:E6
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:19:28:10:24:c4:fb:a1:a6:27:e3:3e:1f:fc:00:a2:16:ff:
         d7:56:ba:bc:5f:a3:a3:87:a7:62:ed:d7:cd:b0:76:3d:9a:45:
         fe:11:1e:69:e2:77:15:06:f3:18:ea:4b:d1:88:10:73:71:b3:
         b8:4c:82:55:b0:74:f5:8c:81:57:1e:9d:78:dd:70:36:33:5c:
         cd:29:47:04:c3:2c:13:93:12:3b:70:37:25:46:62:b3:0e:92:
         69:97:4b:79:76:d5:ba:51:ca:87:c3:3f:38:1e:3b:1e:c3:09:
         01:0f:4f:83:c6:dd:f4:90:48:b5:90:ed:19:fb:9b:38:a4:16:
         91:72:8c:1f:2a:89:ab:f5:08:93:94:9d:74:89:5c:b5:f8:6c:
         a4:3b:d2:8f:11:96:82:c4:80:ca:ec:31:73:40:e0:d4:84:5e:
         8c:77:6e:82:7f:83:c8:85:1d:bd:34:bc:73:d2:4b:31:84:dc:
         60:c8:27:60:cc:50:0c:38:21:ec:d4:49:85:7f:d2:f6:56:29:
         aa:13:39:62:fe:48:d6:90:ad:b4:7c:de:db:be:c1:ea:41:85:
         d5:6c:54:07:2a:d3:b6:4e:18:a0:6f:21:5e:ae:86:2f:db:00:
         9c:60:67:71:31:23:ab:a0:8d:a9:34:41:e9:fe:e8:03:4d:d4:
         56:32:eb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:28 2026 by rpki-client