Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa
File:                     467830CE7D7D11EBA5FADA5FC4F9AE02.roa (raw, json)
Hash identifier:          RyoNO0UOtNcS3c+nyhtDBK5mJ/TanAuhtJDLZYBhoj8=
Subject key identifier:   F1:08:20:8C:18:49:F4:F3:81:B9:3F:92:CC:CC:6C:5A:DE:ED:27:C4
Certificate issuer:       /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial:       0708
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:55:57 +0000
ROA not before:           Sun 02 Nov 2025 22:12:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135497
IP address blocks:        103.196.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
                          rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
        Validity
            Not Before: Nov  2 22:12:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4537d-39b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:6b:cd:2b:c0:7c:1d:64:ee:9f:37:81:2a:
                    cb:e5:44:51:b2:d2:9e:8f:ee:e4:fb:08:ee:72:55:
                    6c:82:f6:8f:07:56:bf:fa:19:d4:48:f4:49:b4:a5:
                    b4:c4:e0:bf:43:60:97:70:3c:3c:2a:72:17:40:54:
                    fe:99:02:c5:19:b2:72:a8:52:ac:6b:f5:ee:87:6d:
                    01:69:18:6e:73:f2:8d:b1:51:e3:62:18:8a:ba:e7:
                    a2:48:81:1d:8c:c3:a7:9b:4e:80:97:f2:63:48:82:
                    9c:9c:28:03:13:3d:5d:b8:a4:90:98:87:2c:5a:0a:
                    83:ce:ef:4a:32:7b:2d:6e:a9:02:bd:91:c5:7c:4a:
                    64:bd:0a:64:fb:3e:76:71:cd:5b:4b:2a:78:96:a4:
                    dd:b2:32:47:81:63:44:57:8d:ff:44:2b:ad:e5:5d:
                    ab:43:bf:a5:de:aa:88:6d:3a:0b:94:44:0e:32:2a:
                    30:05:ee:2f:8d:db:a5:2f:c6:35:7e:f2:1e:aa:a2:
                    cf:98:87:26:9d:c6:23:fa:c5:cd:2b:de:de:23:d2:
                    57:6d:95:21:7f:31:d9:61:d4:ff:66:42:ea:76:97:
                    a5:95:2c:54:66:10:90:11:af:49:9f:2f:c4:dd:8a:
                    b5:05:54:15:0b:5c:34:21:bd:d4:97:6c:28:c5:07:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:20:8C:18:49:F4:F3:81:B9:3F:92:CC:CC:6C:5A:DE:ED:27:C4
            X509v3 Authority Key Identifier:
                keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:43:94:ca:af:2d:e7:44:a1:42:65:d8:0c:67:75:2a:a7:
         8c:df:f2:69:fb:84:95:c8:67:ff:d1:1c:f4:f9:1c:4b:f4:44:
         7c:96:2a:37:a6:ee:b2:b8:bc:02:b5:a0:00:25:fa:ce:4c:aa:
         d2:d3:3a:35:11:89:88:49:b0:58:06:58:87:81:51:5b:58:82:
         a2:e8:ea:c6:d3:7e:7b:77:9e:54:c3:4d:24:4b:0a:46:06:f6:
         a3:30:14:14:06:fd:6c:dc:bf:d8:98:7b:15:99:41:8f:87:6b:
         de:df:7a:8c:a4:9c:64:7a:71:80:e1:a2:3f:fa:40:5c:79:f8:
         0e:e0:bb:16:4c:59:7b:56:21:ef:78:1e:6c:4c:b6:78:27:ce:
         23:b7:e1:9a:09:7e:6a:a6:91:2c:d2:c6:f7:4f:9a:06:32:2b:
         5c:c2:d8:93:28:b8:46:06:a2:e5:d0:ae:00:f7:a7:93:10:71:
         42:c5:50:fa:81:4e:da:5d:e1:08:bf:a3:18:31:2c:de:8c:89:
         77:5c:5a:4d:f4:43:c9:b7:ae:35:b8:9f:c8:50:cd:47:b5:61:
         80:24:98:c1:c6:fa:b1:0d:7d:e4:eb:5f:1d:b4:13:eb:96:54:
         37:85:94:dc:7f:2e:2e:bd:1d:bc:a9:d8:26:f9:99:da:1c:22:
         57:51:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:46 2026 by rpki-client