Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
File:                     2201EFC86E5211EEB027A974C4F9AE02.roa (raw, json)
Hash identifier:          KvfHIPuFU1q+aC272iMwdKoNoq5N7DEJ+uq/zpJXB94=
Subject key identifier:   28:49:54:5F:CA:84:22:90:BF:30:9A:BB:E5:5D:C6:AA:54:50:77:0E
Certificate issuer:       /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial:       01C0
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:27:57 +0000
ROA not before:           Thu 23 Oct 2025 05:51:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38203
IP address blocks:        103.65.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
                          rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
        Validity
            Not Before: Oct 23 05:51:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5824d-4523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:f7:0e:16:dc:32:c9:d0:8a:44:c3:3d:70:
                    66:77:20:70:21:76:c5:94:31:c4:8a:10:cd:7f:5c:
                    45:05:dc:ba:2b:50:14:34:f4:7f:de:ec:1e:d1:eb:
                    c1:85:5b:c5:fd:d2:16:8b:54:3f:22:50:0d:a6:1a:
                    fd:f6:e9:7a:27:15:64:80:d6:32:0c:e5:02:11:9d:
                    32:fc:25:1e:e7:da:8f:73:dd:2c:fa:2b:18:84:45:
                    a7:a1:20:5f:2f:da:1f:ee:07:f0:6c:27:a0:85:62:
                    f5:17:b1:d6:00:1f:52:ee:c1:c1:21:f3:ff:14:40:
                    99:47:c5:6d:e1:98:ff:31:d5:ec:d1:96:16:ad:4b:
                    02:a9:bf:67:e3:6c:61:cf:1f:d3:13:d2:f5:66:ce:
                    45:9f:f7:5f:b8:18:95:07:b2:45:de:8c:20:53:d3:
                    6b:6c:bb:08:4d:94:6a:86:a5:f6:b3:9d:28:68:bf:
                    37:6a:68:79:e6:af:c6:1b:32:b9:4e:05:8f:06:bc:
                    75:f7:a8:6c:a6:3a:ce:d3:48:14:95:68:5c:54:24:
                    f6:5d:ef:74:f9:69:26:9b:4d:81:44:a2:d0:2a:7e:
                    7c:b0:84:be:3d:5d:8a:dc:69:76:a0:71:5c:64:f4:
                    fb:9f:3c:0b:6d:0d:a4:01:8e:1d:8e:81:44:c8:f7:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:54:5F:CA:84:22:90:BF:30:9A:BB:E5:5D:C6:AA:54:50:77:0E
            X509v3 Authority Key Identifier:
                keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:7e:d5:e4:6b:29:3c:4f:7d:cb:4b:9f:01:5f:b0:0e:c4:
         75:a6:e2:3f:73:c5:fd:9d:65:a2:02:08:98:9c:8c:4b:7b:d1:
         3b:12:ac:2a:bb:cc:a5:b5:9e:d7:2c:21:bc:98:43:24:57:b9:
         52:ce:d7:6d:5a:c6:af:61:49:04:c5:d1:54:85:0e:0d:76:09:
         28:75:33:71:05:84:c2:7f:c7:a6:dd:86:03:19:58:33:5b:48:
         a7:24:f3:7f:d8:2e:14:64:30:d4:b6:4f:6c:60:96:41:b7:0e:
         d1:c3:c6:93:40:8d:93:38:92:b4:f0:14:2f:e8:01:73:37:ba:
         04:7d:b2:06:81:3f:6d:d0:c2:ec:a9:93:86:0a:1d:8b:6f:cb:
         82:10:47:19:b1:67:ed:56:34:d4:bc:75:55:de:da:de:09:e2:
         90:af:26:d9:cd:27:a2:2a:08:06:c8:05:8e:c1:57:82:7b:75:
         7e:99:a7:37:d9:28:b4:c4:a6:40:c9:60:ec:74:11:c0:c8:8a:
         bd:51:f8:93:be:10:09:07:2a:f5:be:97:dd:31:a0:da:fd:6c:
         66:a6:d4:b1:5d:c0:51:a0:e2:4f:33:b1:e7:54:aa:11:12:89:
         83:b4:98:4a:a4:29:14:3a:fa:91:64:9c:74:18:39:6c:53:9a:
         4a:7f:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:53 2026 by rpki-client