Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
File:                     743770A0C06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier:          XKeEDugKqgXjlFzU8CqpL1zdQUwmhnaqxG9HZMiOaa8=
Subject key identifier:   2F:78:68:1A:DC:56:B9:1F:51:0B:85:24:E6:04:83:6F:5D:BF:04:1A
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       1646
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
Signing time:             Wed 04 Nov 2026 17:28:14 +0000
ROA not before:           Wed 04 Nov 2026 17:28:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9541
IP address blocks:        103.209.125.0/24 maxlen: 24
                          103.209.126.0/24 maxlen: 24
                          103.209.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5702 (0x1646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: Nov  4 17:28:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aeb6b2e-3843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:21:39:71:53:b4:eb:f6:d9:09:e2:b3:c7:
                    91:7c:74:43:dd:99:27:42:63:ad:4c:7f:d1:27:3d:
                    7c:32:f3:fc:c0:a2:f5:26:0d:a5:d8:f5:0c:d0:0d:
                    11:07:c0:b7:fb:19:9d:fd:3f:b4:17:88:24:d6:ba:
                    d6:b9:60:32:0f:1c:4a:75:79:4b:f4:bc:c8:34:4d:
                    0c:4f:88:8d:e1:0a:ef:03:f9:7f:39:f8:ef:cd:a9:
                    21:e6:29:23:ba:49:0e:05:2d:a0:93:03:e6:c7:88:
                    56:9c:17:46:72:92:94:82:3b:07:f8:d1:ff:2c:a2:
                    61:5d:28:c5:8b:d9:79:b7:9c:9a:55:01:76:a9:ba:
                    e1:94:94:05:7e:b5:20:bb:9f:77:e3:d4:91:b0:97:
                    9f:bd:eb:4a:de:15:43:d5:fe:ed:3a:d5:8f:7e:5c:
                    73:12:80:2b:9e:f4:ee:b9:be:71:51:fa:cc:5d:29:
                    5f:05:f9:90:f6:97:c8:a6:c9:8e:8a:08:d6:06:83:
                    2e:63:07:2a:70:c7:c8:dc:0e:06:3d:f8:aa:70:f0:
                    db:27:61:e8:8f:7b:fe:a7:01:ff:3b:86:43:87:53:
                    aa:61:b4:34:d2:56:e8:eb:a0:fb:e1:b3:5a:b8:5c:
                    a9:38:ac:56:21:c2:3a:42:fd:54:c0:a6:9b:86:dc:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:78:68:1A:DC:56:B9:1F:51:0B:85:24:E6:04:83:6F:5D:BF:04:1A
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.125.0-103.209.127.255

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:65:5f:81:7d:b3:46:4b:9e:a8:98:38:75:74:fe:e6:7a:
         d3:5b:4f:92:be:e3:d3:60:a2:dc:25:1b:a9:89:98:89:ff:ff:
         31:79:fe:a6:7c:f8:de:31:1a:41:dd:a0:ea:ee:96:6e:cc:d5:
         16:0d:13:01:2e:6d:e6:e7:9d:63:5a:14:66:dc:16:ce:9f:8b:
         0b:b9:47:83:46:c1:fc:cc:25:49:94:c8:27:ca:eb:1c:94:5e:
         e1:41:f0:61:af:5f:46:ab:07:89:46:33:91:4f:5f:5f:93:ba:
         e8:55:8e:b4:03:3c:c5:e2:15:45:4f:83:70:3b:d3:4e:34:35:
         ab:ef:d5:fb:24:f9:a7:17:28:ee:87:af:d6:d9:19:10:e7:e2:
         0e:dc:40:2d:c0:7e:60:68:50:f2:ed:42:ed:27:1c:ad:e0:24:
         f9:c2:54:2b:3e:29:83:5e:bd:d7:f9:48:7d:31:cc:4a:5c:57:
         68:f2:8a:8c:8e:3c:bc:8d:d6:df:de:d5:a4:bf:4d:eb:5e:95:
         66:e6:66:fd:ce:31:84:85:7d:ba:e8:3a:af:e8:1c:79:92:a4:
         23:17:9c:7a:f6:0c:9c:b9:2a:13:05:2a:07:89:bb:7f:56:e8:
         db:98:e3:59:ce:10:e9:47:6c:04:0d:5b:db:72:25:57:1f:0f:
         a2:9b:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:13 2026 by rpki-client