Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
File:                     92967BBA78F811ECAF1C286CC4F9AE02.roa (raw, json)
Hash identifier:          UY+TW+CakUK70O+dQl4u0u6QBrf7eGpruH497eDdUvM=
Subject key identifier:   51:F0:09:F4:01:74:90:49:4B:84:0B:0C:9B:F6:A8:0F:23:A6:2D:EB
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       069E
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:47:06 +0000
ROA not before:           Fri 02 May 2025 23:03:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133449
IP address blocks:        103.229.128.0/24 maxlen: 24
                          103.237.143.0/24 maxlen: 24
                          103.237.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: May  2 23:03:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fd0a-1197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:75:59:85:2f:7e:f8:2a:03:5c:43:bb:c8:
                    be:0e:17:fb:47:13:5e:5d:fa:08:f3:9f:e4:44:e2:
                    e6:ca:35:2f:49:11:c2:a1:72:cf:c6:50:74:c1:9f:
                    36:57:ec:ed:4e:4a:12:e2:c8:05:d1:29:c1:7e:eb:
                    b3:db:a6:0d:2c:12:47:52:08:b8:e5:69:d4:dd:08:
                    8d:ff:a6:72:ee:07:3d:ca:bb:81:05:fa:5a:4e:54:
                    da:35:29:1c:d8:22:c5:59:d1:41:f9:39:18:5f:3c:
                    b9:04:19:4d:29:fe:19:e9:83:8d:80:60:1c:9d:7f:
                    61:24:f0:e9:d2:bb:a5:79:d2:77:24:df:34:52:77:
                    fd:f5:0f:12:c9:d7:eb:6f:39:9d:06:af:a0:0a:a7:
                    79:30:fe:67:2b:df:68:a7:a5:21:a4:64:d9:b5:90:
                    22:de:40:dc:31:af:12:93:26:8a:b5:24:8a:fc:34:
                    c4:cf:38:2f:d6:d0:71:21:df:d9:7e:43:3e:83:26:
                    9c:a7:d6:dd:f6:8c:4b:97:7a:7b:b0:65:ed:11:0a:
                    f1:54:5d:a7:fb:7c:6a:01:7a:c9:8e:f6:34:c5:50:
                    d0:fd:51:1f:25:42:3d:8c:40:86:2b:33:4e:03:cb:
                    1a:7a:4b:e4:b1:05:88:b5:c8:85:80:a9:38:49:a5:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:09:F4:01:74:90:49:4B:84:0B:0C:9B:F6:A8:0F:23:A6:2D:EB
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.128.0/24
                  103.237.143.0/24
                  103.237.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:75:93:ab:b6:aa:1c:95:7b:80:45:43:35:bf:7a:fb:ed:03:
         8b:df:b5:ed:a8:49:3e:67:9f:80:58:8c:17:71:52:d0:e9:03:
         8f:5a:f7:bb:6f:20:14:ab:80:ec:dc:49:47:08:bd:21:f8:7a:
         31:96:d9:3d:80:17:0d:a4:b2:c1:f1:dd:e4:b1:ec:17:19:e6:
         34:89:f5:67:49:70:e4:19:45:06:8e:d9:18:df:fd:3f:2a:ff:
         5b:95:ef:4f:88:99:91:49:53:b1:3a:f3:6c:78:78:9f:69:50:
         c5:3b:ef:46:60:6d:24:e8:ab:12:4e:ab:0f:5e:bc:b5:75:cf:
         1f:67:92:21:d5:9f:2b:50:87:33:85:8b:fc:c4:5b:42:c5:44:
         92:81:29:dd:c2:11:6c:24:d3:7b:4f:18:47:c0:93:d6:f5:aa:
         1b:f7:b1:f4:09:f7:2c:ad:57:a2:40:50:84:96:3a:e9:3a:a9:
         51:0a:8f:a1:d8:c8:d9:38:f5:93:14:36:88:1f:8d:32:53:b2:
         52:cc:61:86:a3:ab:6b:7c:00:d1:49:ae:15:1f:f2:e5:b1:06:
         a7:f9:e2:0c:ba:33:e5:bd:74:13:21:ee:0c:b7:9b:44:21:d7:
         02:a8:cc:cb:3f:e4:15:45:57:96:e2:36:de:84:74:f8:ab:21:
         af:a0:14:89
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM3NzcxMTAvBgNVBAUTKDgyMTRGNTFBOTgxNDQxRjE1RkI5MTIyMjVGRDdEMDJG
Qjk0M0FFMzUwHhcNMjUwNTAyMjMwMzUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmQwYS0xMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEl1WYUvfvgqA1xDu8i+Dhf7RxNeXfoI85/kROLmyjUvSRHCoXLPxlB0wZ82
V+ztTkoS4sgF0SnBfuuz26YNLBJHUgi45WnU3QiN/6Zy7gc9yruBBfpaTlTaNSkc
2CLFWdFB+TkYXzy5BBlNKf4Z6YONgGAcnX9hJPDp0ruledJ3JN80Unf99Q8Sydfr
bzmdBq+gCqd5MP5nK99op6UhpGTZtZAi3kDcMa8SkyaKtSSK/DTEzzgv1tBxId/Z
fkM+gyacp9bd9oxLl3p7sGXtEQrxVF2n+3xqAXrJjvY0xVDQ/VEfJUI9jECGKzNO
A8saekvksQWItciFgKk4SaW+/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFHwCfQB
dJBJS4QLDJv2qA8jpi3rMB8GA1UdIwQYMBaAFIIU9RqYFEHxX7kSIl/X0C+5Q641
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzc3Ny83Nzk3NjBCQUEz
RTUxMUVCQTE4RTkzN0VDNEY5QUUwMi9naFQxR3BnVVFmRmZ1UklpWDlmUUw3bERy
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doVDFHcGdVUWZGZnVSSWlYOWZRTDdsRHJqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUM3NzcvNzc5NzYwQkFBM0U1MTFFQkExOEU5MzdFQzRGOUFFMDIvOTI5NjdCQkE3
OEY4MTFFQ0FGMUMyODZDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ+WAAwQAZ+2PAwQBZ+2oMA0GCSqGSIb3DQEBCwUAA4IBAQCZdZOr
tqoclXuARUM1v3r77QOL37XtqEk+Z5+AWIwXcVLQ6QOPWve7byAUq4Ds3ElHCL0h
+Hoxltk9gBcNpLLB8d3ksewXGeY0ifVnSXDkGUUGjtkY3/0/Kv9ble9PiJmRSVOx
OvNseHifaVDFO+9GYG0k6KsSTqsPXry1dc8fZ5Ih1Z8rUIczhYv8xFtCxUSSgSnd
whFsJNN7TxhHwJPW9aob97H0CfcsrVeiQFCEljrpOqlRCo+h2MjZOPWTFDaIH40y
U7JSzGGGo6trfADRSa4VH/LlsQan+eIMujPlvXQTIe4Mt5tEIdcCqMzLP+QVRVeW
4jbehHT4qyGvoBSJ
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:53 2026 by rpki-client