Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
File:                     269D906E0C1D11EF87936F72C4F9AE02.roa (raw, json)
Hash identifier:          /j9d3O/si9HWxiAT4CuYx0GeiiuhWE5Q6+h310C6pVg=
Subject key identifier:   46:2F:D5:4E:44:5E:BA:F9:9A:1A:29:2A:22:3E:49:EF:5D:A8:02:47
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       01A2
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:39:18 +0000
ROA not before:           Fri 21 Nov 2025 03:20:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3491
IP address blocks:        103.215.40.0/22 maxlen: 24
                          144.48.216.0/22 maxlen: 24
                          223.255.240.0/22 maxlen: 24
                          2001:df0:a300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov 21 03:20:49 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59306-5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:ad:aa:ca:4d:d9:45:c3:e8:30:2d:8e:d6:
                    c2:6f:a4:ce:67:30:dc:4a:e8:12:e1:32:b5:93:e9:
                    56:75:9d:3b:3e:c3:7d:6f:52:d7:27:95:95:ea:e6:
                    6d:6f:14:61:8e:55:c2:f2:43:51:bd:6d:90:f8:21:
                    7c:f0:b8:28:a4:dc:a5:35:45:c2:f0:ca:2b:19:3f:
                    10:22:83:eb:78:bf:da:b5:93:68:ba:e2:da:8d:31:
                    f7:a1:a9:97:32:84:b6:70:6e:48:89:b8:e1:0a:9a:
                    ef:5f:21:dc:fe:ed:c3:24:b7:e2:e3:d7:5f:bb:6a:
                    c4:d9:c6:02:bf:c7:ad:78:6d:5d:5b:10:88:ad:92:
                    42:88:4a:6b:59:45:4e:e1:81:21:36:01:5e:4e:34:
                    dd:86:fc:92:6c:b7:70:cf:84:e7:fb:a0:d3:08:45:
                    ab:bf:81:1e:11:cd:0a:18:10:76:d5:c5:31:d4:60:
                    fb:f8:05:61:80:1d:79:17:4d:ca:44:cb:17:7a:f5:
                    fd:ca:7d:4d:a8:ca:b0:c2:dc:16:ca:ea:c2:9f:ed:
                    61:79:75:42:5a:e7:27:78:a5:3d:8a:fa:43:c9:fc:
                    6a:14:2b:fc:1f:de:54:85:0d:ff:c4:de:7e:ae:e6:
                    13:9c:23:b3:db:99:95:9e:12:bd:7e:1c:90:9e:4e:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:D5:4E:44:5E:BA:F9:9A:1A:29:2A:22:3E:49:EF:5D:A8:02:47
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.40.0/22
                  144.48.216.0/22
                  223.255.240.0/22
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:d0:a9:5a:0b:49:2b:d0:29:5f:46:d4:ae:b1:80:05:3e:
         0a:bc:03:75:d7:02:db:49:79:d2:fb:5d:0b:de:e5:c8:75:7c:
         66:13:ed:82:d5:7c:23:14:84:4d:14:43:03:49:a7:1a:2d:cc:
         21:2b:cd:6b:80:8d:0a:0b:12:51:14:e7:4a:48:2f:ac:f7:af:
         b1:dc:1b:0d:d7:02:c7:67:74:bc:d3:0c:88:6a:1c:4e:4b:5c:
         92:35:62:b2:e1:30:09:ab:5b:41:6e:6b:8a:6a:50:b4:76:b1:
         00:11:2e:a5:5d:3f:d3:6f:67:f8:aa:18:fd:cb:eb:22:8a:d2:
         b1:1a:6f:e7:66:2a:09:5f:51:8e:67:71:8f:91:80:0d:1a:f7:
         dd:c5:c8:f5:fc:2d:5a:a2:7b:00:33:11:31:64:2a:7b:b3:db:
         02:f1:94:be:68:cb:47:d6:87:74:5a:56:67:db:64:57:e9:bb:
         f5:42:94:15:f3:f6:4c:9f:55:13:2d:72:68:29:7c:43:37:0a:
         e4:88:35:25:29:05:f3:2b:e0:09:55:76:77:07:63:b1:76:8f:
         b7:d8:bf:3f:32:6e:d4:76:24:1d:41:90:c9:3e:cc:5d:2d:c1:
         a9:29:09:e6:7d:7d:1e:4f:59:1d:cd:39:bd:9c:7a:7e:c1:6d:
         f2:d6:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:02 2026 by rpki-client