Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
File:                     28741DDC85CD11ECA5E28171C4F9AE02.roa (raw, json)
Hash identifier:          aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=
Subject key identifier:   76:39:E1:F5:FA:5F:88:10:AD:FB:35:3F:D5:05:2E:0B:A4:F8:11:49
Certificate issuer:       /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial:       04AF
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:21:04 +0000
ROA not before:           Sat 31 Jan 2026 00:20:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140607
IP address blocks:        103.177.240.0/24 maxlen: 24
                          103.177.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
                          rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
        Validity
            Not Before: Jan 31 00:20:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44b50-7b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:0a:87:ad:31:a3:a1:0c:f6:da:6d:24:cc:
                    8e:71:d5:79:f1:d7:0f:cd:39:32:f3:d7:6c:f3:93:
                    5e:96:4f:51:9e:be:a0:15:23:f0:19:7e:dc:b4:e2:
                    58:9f:96:2f:5b:fd:f6:1b:74:01:04:b7:6e:e0:4a:
                    a8:21:25:9b:c1:d5:dc:36:28:e4:38:82:11:db:c7:
                    cc:1e:81:34:02:59:9f:b8:f6:cf:a2:b4:2c:93:6e:
                    96:e7:29:1f:7c:fa:6a:d8:55:bc:f5:05:a3:be:b9:
                    7e:4d:56:ee:f7:84:84:a3:64:18:93:1a:66:56:30:
                    d0:cf:83:85:af:b0:4d:7f:5d:82:0d:ff:21:93:7b:
                    c4:6a:12:be:69:f9:2b:c4:88:c9:fc:7c:28:33:95:
                    12:f5:75:1f:1e:50:9e:92:c1:26:5f:ce:df:96:14:
                    88:16:ef:91:f9:0a:75:6c:7a:14:94:a2:2b:00:4e:
                    83:4c:00:06:be:6e:50:4a:3a:9a:f9:d1:2b:98:8f:
                    e4:2a:95:90:30:79:38:70:3f:f4:9d:fe:10:36:36:
                    dc:2f:c4:ec:49:95:89:35:1d:32:28:db:f2:ab:d0:
                    fc:0d:9e:ab:ea:0b:09:d7:9e:4a:6c:4b:88:46:86:
                    24:d6:f7:48:f9:d1:46:fb:80:2e:29:2b:67:d0:00:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:E1:F5:FA:5F:88:10:AD:FB:35:3F:D5:05:2E:0B:A4:F8:11:49
            X509v3 Authority Key Identifier:
                keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:d7:d5:86:0e:70:7b:b0:21:15:4a:f0:17:70:8e:fb:e1:9a:
         47:4e:53:78:63:79:14:24:d9:73:fb:f3:9f:69:8b:e4:2b:24:
         46:67:72:4b:ca:91:77:1f:26:ec:a5:ac:db:c5:92:fe:4f:0c:
         26:73:06:c2:90:80:f5:ca:67:2c:ee:48:80:7b:9d:62:f2:f7:
         2a:df:c2:ec:ff:51:13:2c:ba:3b:bb:ac:4e:48:95:2e:c8:19:
         26:7a:75:fa:65:c7:a2:07:c6:dd:54:a1:60:86:e7:80:db:f7:
         0c:d3:fb:d2:90:e0:de:66:2d:67:fd:0f:d3:d4:1f:a1:6c:df:
         f7:28:50:3b:d6:ae:c1:80:6b:97:48:f6:2c:8a:2a:04:c4:ac:
         2e:18:d1:76:ed:25:85:2a:f7:1b:06:e5:5e:20:6c:e0:34:49:
         49:1e:20:45:45:79:a9:9c:c3:ed:ee:04:24:8c:b2:fe:63:1a:
         16:1b:9d:a7:12:4f:88:6f:92:d9:1e:82:f4:2b:8b:6d:8d:94:
         08:ac:ff:18:a9:f2:44:23:78:3f:39:43:5e:3a:3f:44:ef:9b:
         ed:e0:ce:9e:82:b6:e7:b0:fb:57:8a:d9:00:c2:af:7c:80:d9:
         1f:e8:63:79:b1:1e:bf:cd:af:07:93:f1:92:e4:5d:17:91:bb:
         75:54:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:49 2026 by rpki-client