Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/00724F9621F111ED93774B6EC4F9AE02.roa
File:                     00724F9621F111ED93774B6EC4F9AE02.roa (raw, json)
Hash identifier:          h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=
Subject key identifier:   CE:F9:7E:D7:CA:6E:31:4C:6B:E1:7A:9F:76:71:F8:E9:D0:AA:7C:BA
Certificate issuer:       /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial:       02E4
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/00724F9621F111ED93774B6EC4F9AE02.roa
Signing time:             Sun 15 Mar 2026 01:34:42 +0000
ROA not before:           Sun 15 Mar 2026 01:34:42 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139659
IP address blocks:        103.148.58.0/24 maxlen: 24
                          103.148.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
                          rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
        Validity
            Not Before: Mar 15 01:34:42 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b60cb1-340e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:22:9a:e8:a1:99:d9:b8:f6:33:70:c0:9e:
                    b4:d8:d3:90:f1:ee:d8:47:41:14:37:ea:68:c7:e8:
                    a9:f3:c7:6b:0e:19:03:e1:10:35:85:b9:24:82:a4:
                    05:2d:89:de:07:86:60:d3:fd:a2:84:de:b5:83:29:
                    dc:2e:a6:ad:54:1b:73:51:f6:d8:20:e4:19:15:58:
                    0d:3a:29:74:21:dc:cc:07:27:9a:e7:45:c8:85:7b:
                    f0:e0:74:3f:6b:cb:45:91:83:6f:e8:4c:f3:db:7b:
                    6e:3e:e2:2d:25:9c:17:e1:51:51:c8:46:56:b4:15:
                    2a:55:65:b9:80:55:40:12:5f:2d:52:53:57:68:e4:
                    a2:e9:e5:2c:bd:fc:3f:1e:98:bd:ad:8b:1a:39:38:
                    54:e4:00:b1:72:12:79:62:d8:de:ed:d9:8b:cf:46:
                    49:a0:5d:ad:c2:01:ee:48:2b:71:0a:13:ab:13:38:
                    04:d9:2f:12:f5:28:12:82:df:d3:0c:cd:b7:bb:3c:
                    cc:bb:f0:78:04:e9:39:3e:26:7a:85:5c:38:6a:7d:
                    ad:88:c6:fa:f0:54:61:2b:69:3b:8d:72:23:cd:89:
                    f7:62:d2:6e:54:b6:24:8f:22:0b:78:c7:10:76:f5:
                    96:86:d3:1b:c8:3e:50:63:cc:ce:31:ee:fd:40:ce:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:7E:D7:CA:6E:31:4C:6B:E1:7A:9F:76:71:F8:E9:D0:AA:7C:BA
            X509v3 Authority Key Identifier:
                keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/00724F9621F111ED93774B6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:52:80:db:07:ad:a9:cc:85:f5:7d:59:01:0b:b1:6a:60:
         54:ec:09:21:0f:be:e8:d6:70:dc:12:1a:5b:39:35:8d:83:02:
         0b:40:a2:89:c4:c8:d6:26:17:c1:8b:4c:df:84:d8:4d:e5:21:
         19:e8:db:4f:e2:94:a1:1b:c8:1b:ba:11:39:f9:2f:da:99:98:
         c7:14:d3:8c:00:59:aa:94:26:9a:7a:9d:23:d7:21:0d:04:e1:
         b1:9e:ae:d9:76:eb:80:61:87:9c:ff:91:ed:c2:45:21:94:06:
         a3:23:64:f5:c4:07:d0:fa:0f:bb:e4:dc:41:aa:02:73:95:3f:
         c7:bb:ec:e6:9b:76:0f:1c:93:18:5c:a3:0d:99:f1:3f:e4:f8:
         de:be:c8:8e:cd:5d:05:cc:a5:2c:73:9e:18:cb:5d:88:06:43:
         8a:38:82:16:83:51:88:ca:ad:f9:15:f6:71:c2:50:7f:32:4b:
         cc:82:05:28:90:0e:a8:c3:4d:9d:61:2a:66:e7:af:a0:be:2f:
         50:1f:14:12:82:15:51:df:5f:ba:ca:25:42:09:ca:89:2b:b6:
         7e:c1:23:56:1f:3b:9b:b8:6b:57:16:07:c7:f8:6b:93:c2:c2:
         df:65:1e:45:70:58:55:b9:b1:40:04:d8:04:71:2a:98:bb:09:
         15:51:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:18 2026 by rpki-client