Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
File:                     5D98833C77EC11EEA06F373BC4F9AE02.roa (raw, json)
Hash identifier:          zNUB+vibuX3nQWmpbN4PBwL7Sq5HwZSp7xD/bsaKx34=
Subject key identifier:   DB:C0:3F:3A:61:30:5F:0A:BF:2E:44:BC:A3:94:CF:34:7C:A1:C0:6D
Certificate issuer:       /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial:       01C8
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:10:31 +0000
ROA not before:           Sat 13 Sep 2025 04:10:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.190.124.0/24 maxlen: 24
                          103.190.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
                          rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
        Validity
            Not Before: Sep 13 04:10:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51bc7-e17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:d5:01:33:39:cb:8e:93:ee:39:8c:3a:8c:
                    da:f0:ab:a2:47:ad:d9:be:ab:06:3f:d2:2b:66:aa:
                    a3:d0:55:a9:dc:35:0d:c2:89:0c:b5:8c:0b:1a:e8:
                    da:0f:56:06:1d:a0:88:b2:fa:bf:fe:fb:b6:af:67:
                    06:92:0a:67:b6:95:8c:41:c9:b8:88:ad:00:20:80:
                    b0:be:01:2b:c5:27:f3:ce:87:39:61:d7:4e:f5:2f:
                    51:81:a7:fc:0d:e9:c2:46:98:45:6e:5f:3d:1a:5b:
                    81:72:7f:b3:d2:f6:7e:72:0f:c5:68:7a:60:fc:c2:
                    a8:82:bd:0b:69:d2:9a:e6:1f:ef:b4:28:45:4e:1b:
                    aa:30:53:58:b5:4b:f7:fe:52:d1:d4:cf:6d:93:61:
                    bb:fe:a0:14:c9:22:13:fc:f5:3d:b7:60:2a:a3:1f:
                    6c:14:36:28:65:e2:a1:26:8a:07:2a:b6:07:9d:26:
                    79:31:6a:43:a3:d2:93:e9:2a:84:29:19:2c:d3:85:
                    87:64:3f:01:de:8e:73:82:e1:0f:63:36:22:f7:df:
                    bc:52:de:c3:51:b7:43:f4:d9:d1:57:28:02:e2:37:
                    03:34:64:b8:aa:53:f0:26:23:8e:cb:3d:8e:4a:f8:
                    cd:a6:fb:42:85:60:65:82:9f:e9:f7:9f:5a:08:a5:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C0:3F:3A:61:30:5F:0A:BF:2E:44:BC:A3:94:CF:34:7C:A1:C0:6D
            X509v3 Authority Key Identifier:
                keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:16:f9:16:e8:eb:3f:ff:1f:f1:39:e6:ba:ab:74:52:44:
         43:42:cb:40:03:19:49:95:3d:29:0f:10:c6:70:73:ba:d2:4a:
         e5:30:35:e3:5a:ec:a2:ae:b3:24:c2:a4:e1:1d:6c:2b:f2:9b:
         bb:45:df:d2:2d:58:40:9d:ae:4d:3a:66:c4:53:7b:c9:24:33:
         2b:a9:68:0b:7f:33:32:d3:39:2c:60:e9:91:34:b0:1b:d0:a2:
         d6:1f:1f:67:7a:11:de:d7:19:08:4f:ee:3e:a9:2a:41:0f:2f:
         20:9d:6a:38:3c:86:23:4f:0d:44:fd:dd:d7:63:4d:aa:66:3d:
         25:8b:25:0a:82:0d:59:32:50:80:3f:3b:60:72:6b:72:e7:3a:
         14:df:4a:d9:73:6f:f1:25:ed:5d:cf:bc:ed:45:6a:0c:93:85:
         3a:9c:ab:0f:8d:30:2c:01:91:7b:c7:3e:2e:cb:9b:f5:83:82:
         3a:c3:e8:3b:6b:9b:6e:39:17:2a:17:cb:20:44:02:31:78:36:
         aa:4d:a6:49:9a:b5:4b:40:56:41:22:61:27:34:a8:9b:f4:b8:
         27:98:ee:fa:45:a8:e2:f4:87:97:ae:c2:86:02:21:d9:28:f5:
         30:8b:5b:00:ee:65:16:92:fa:d5:b5:06:b3:88:f2:0a:9f:58:
         63:4d:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:40 2026 by rpki-client