Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa
File:                     692ABA5A09DF11EAA6052433C4F9AE02.roa (raw, json)
Hash identifier:          1o/k0GFfoHNDOP+txbRSyPkBhEUl5bL6aMEbGrj1NA4=
Subject key identifier:   28:D1:B7:C7:9F:68:1E:11:7C:35:4E:B7:AE:B3:96:E0:06:1C:31:B4
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0CDE
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:41:02 +0000
ROA not before:           Mon 12 Jan 2026 18:15:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133191
IP address blocks:        103.133.213.0/24 maxlen: 24
                          103.133.236.0/23 maxlen: 24
                          103.255.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3294 (0xcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Jan 12 18:15:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44ffd-2189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:d8:fa:28:d5:67:96:9a:e7:17:45:13:68:
                    c0:f5:bc:99:1c:08:c6:d2:46:06:87:82:f2:2d:1a:
                    2b:c4:ac:98:47:df:ef:be:f2:2e:b4:d2:ee:02:f2:
                    ab:52:a7:7f:92:f1:88:e2:70:60:ce:3a:3e:6e:84:
                    a2:03:25:ce:fb:0f:5b:40:4c:82:af:8f:07:0f:37:
                    2a:76:94:82:1b:f9:c6:4b:a8:1a:ff:aa:bc:98:b8:
                    e7:44:a0:1f:22:55:07:50:98:b6:c7:fb:69:a5:03:
                    ce:fb:89:00:b9:5a:8e:a4:8c:87:91:76:4b:9e:0a:
                    bb:60:b9:2a:80:cd:83:8e:8a:40:3e:e6:4c:ad:5b:
                    4b:6d:c3:16:26:c3:d9:c6:4e:b8:83:ef:59:96:cb:
                    e9:fb:a9:74:e5:64:c4:21:db:83:1f:65:be:35:10:
                    b4:3f:55:37:e4:25:20:69:f9:0f:e2:90:37:35:0f:
                    58:49:88:34:84:32:b8:b7:a8:04:1d:6e:c3:a7:d4:
                    06:2b:b9:e9:a9:49:81:55:44:03:8c:bb:8f:81:f8:
                    50:e3:f0:0d:20:11:a3:bd:e1:39:85:4d:e7:46:a5:
                    37:2f:59:c4:70:48:ec:2e:8f:0e:84:31:df:23:b3:
                    90:4c:38:87:cd:83:8d:e9:9d:7d:5f:d2:3f:2a:b9:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:B7:C7:9F:68:1E:11:7C:35:4E:B7:AE:B3:96:E0:06:1C:31:B4
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.213.0/24
                  103.133.236.0/23
                  103.255.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:6e:49:c1:f7:27:f9:62:0e:ed:f5:1a:cb:fe:b2:c4:4d:
         92:92:2a:92:af:e0:7f:30:00:4b:cb:e3:e5:97:62:90:49:4f:
         f2:ae:cc:4c:b9:71:8c:67:b8:ba:bf:d5:3a:a1:ed:9c:c0:61:
         70:b1:3e:70:a7:b0:f8:0d:5e:9d:bb:bf:02:ae:5b:b2:70:ba:
         43:75:1f:96:a2:9f:7d:5b:ce:8f:88:b6:01:07:f1:56:13:ba:
         2e:a9:4f:38:49:b1:80:a3:ea:a0:b7:85:d0:64:3c:8d:fa:d1:
         8a:4b:a7:eb:6f:ea:4e:1a:80:54:19:cc:50:4f:ac:f9:fd:10:
         bc:f6:67:bc:48:61:9f:e8:a1:e1:b7:5e:6f:1e:2b:fc:fe:ca:
         95:53:c5:35:9e:61:dd:af:b5:ac:99:1c:60:f0:6d:0b:1c:a1:
         69:35:aa:b3:db:83:00:6c:15:0a:22:fd:75:62:5e:fb:52:df:
         38:bd:8c:b2:1a:f2:78:1b:78:c8:6b:e1:bf:38:62:22:6a:27:
         05:43:79:ed:5a:bf:92:79:2c:6f:7b:70:b5:24:3c:5c:91:03:
         a8:95:d2:56:c8:a5:c7:7b:ac:d0:bd:46:ee:c4:3d:56:a7:cf:
         22:f8:d2:ca:94:17:d4:56:13:95:52:10:3d:3a:d2:4b:ca:6e:
         c8:f3:80:cc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg4NTkxMTAvBgNVBAUTKDRBNDZCRjUyQjE5MzA2NDdGRDI1Qjc5NjkyNkRCQzYx
NDA0QkUzRUQwHhcNMjYwMTEyMTgxNTE1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGZmZC0yMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYnY+ijVZ5aa5xdFE2jA9byZHAjG0kYGh4LyLRorxKyYR9/vvvIutNLuAvKr
Uqd/kvGI4nBgzjo+boSiAyXO+w9bQEyCr48HDzcqdpSCG/nGS6ga/6q8mLjnRKAf
IlUHUJi2x/tppQPO+4kAuVqOpIyHkXZLngq7YLkqgM2DjopAPuZMrVtLbcMWJsPZ
xk64g+9Zlsvp+6l05WTEIduDH2W+NRC0P1U35CUgafkP4pA3NQ9YSYg0hDK4t6gE
HW7Dp9QGK7npqUmBVUQDjLuPgfhQ4/ANIBGjveE5hU3nRqU3L1nEcEjsLo8OhDHf
I7OQTDiHzYON6Z19X9I/KrmCJwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCjRt8ef
aB4RfDVOt66zluAGHDG0MB8GA1UdIwQYMBaAFEpGv1KxkwZH/SW3lpJtvGFAS+Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODg1OS84REJEN0RCQTA1
MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJrZjlKYmVXa20yOFlVQkw0
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrYV9VckdUQmtmOUpiZVdrbTI4WVVCTDQtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg4NTkvOERCRDdEQkEwNTI3MTFFQThGMTdDNzMxQzRGOUFFMDIvNjkyQUJBNUEw
OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ4XVAwQBZ4XsAwQAZ/8eMA0GCSqGSIb3DQEBCwUAA4IBAQA/AG5J
wfcn+WIO7fUay/6yxE2SkiqSr+B/MABLy+Pll2KQSU/yrsxMuXGMZ7i6v9U6oe2c
wGFwsT5wp7D4DV6du78CrluycLpDdR+Wop99W86PiLYBB/FWE7ouqU84SbGAo+qg
t4XQZDyN+tGKS6frb+pOGoBUGcxQT6z5/RC89me8SGGf6KHht15vHiv8/sqVU8U1
nmHdr7WsmRxg8G0LHKFpNaqz24MAbBUKIv11Yl77Ut84vYyyGvJ4G3jIa+G/OGIi
aicFQ3ntWr+SeSxve3C1JDxckQOoldJWyKXHe6zQvUbuxD1Wp88i+NLKlBfUVhOV
UhA9OtJLym7I84DM
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:12 2026 by rpki-client