Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/701DFED0219D11F1B09B7EBF113D8C67.roa
File:                     701DFED0219D11F1B09B7EBF113D8C67.roa (raw, json)
Hash identifier:          r4oSPpLOC+zTSQdO29VIuJjmSp9GOYHxsJRsRgYar5Y=
Subject key identifier:   9F:3A:13:40:65:C6:EA:D4:C0:88:37:1F:94:1C:DA:63:57:24:D9:8D
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C31
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/701DFED0219D11F1B09B7EBF113D8C67.roa
Signing time:             Tue 17 Mar 2026 01:05:50 +0000
ROA not before:           Tue 17 Mar 2026 01:05:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.249.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Mar 17 01:05:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69b8a8ee-5aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:8f:43:21:95:08:ab:db:9b:79:e8:e6:26:
                    b8:fc:04:c4:14:c2:3c:d4:c2:5f:a6:49:81:6c:8f:
                    4f:81:a0:5b:07:f6:35:d7:6d:6e:04:b7:4e:34:64:
                    11:ac:fa:de:35:a6:c4:82:56:b9:86:ed:03:90:b0:
                    1e:3b:ea:3b:6f:09:a6:e2:7d:b3:12:66:a4:1a:7b:
                    c6:eb:9e:13:a9:0c:85:1d:12:12:3a:3e:0b:bc:e6:
                    a8:0e:76:6c:92:4d:2e:51:7b:1d:e8:7a:e9:6a:23:
                    46:7b:9d:bb:a7:00:29:05:f0:88:4d:50:18:0e:75:
                    c7:a7:4b:f7:a4:47:2d:2b:76:3d:a1:ad:37:ce:10:
                    de:f5:17:6c:f8:47:bb:6d:b0:72:a6:4e:21:82:f7:
                    da:67:f0:ac:0e:93:41:d7:00:a0:7d:96:b6:dc:d7:
                    19:87:b5:0e:6e:09:ba:0f:93:55:b0:56:94:2e:cc:
                    19:08:6d:7c:23:1f:0d:8d:79:88:c9:22:6e:a3:7f:
                    61:39:b4:7c:73:84:25:9f:dc:12:e2:7d:08:fe:20:
                    34:8a:e4:2f:30:48:05:27:83:7e:55:fb:43:c7:d7:
                    96:85:c2:85:27:cc:e7:83:14:5c:bc:86:8e:ee:53:
                    a8:06:51:f4:d9:68:a7:e4:6a:4c:09:b1:41:02:25:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:13:40:65:C6:EA:D4:C0:88:37:1F:94:1C:DA:63:57:24:D9:8D
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/701DFED0219D11F1B09B7EBF113D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:66:b7:d5:b4:0b:03:d1:45:01:e3:a8:dd:1e:d2:44:c4:
         87:c4:57:d5:12:a1:71:6e:ac:32:8e:da:05:93:f6:4a:a2:71:
         05:fa:b0:b5:72:b7:46:b8:f6:d8:e2:61:43:7e:48:08:93:d9:
         32:97:35:b5:09:bb:16:da:84:4e:4b:2f:fb:6d:fe:df:66:83:
         48:56:8d:35:fb:06:9a:c3:dd:82:99:07:c1:72:9d:e8:44:9d:
         2b:8d:49:2f:f9:45:91:ba:a6:70:70:b8:8b:a4:b9:4a:fb:97:
         d0:f8:ce:de:f4:35:4a:f7:95:a9:4a:68:59:72:a2:09:2f:d3:
         20:af:4b:fc:b9:a3:97:42:30:ca:48:da:ec:f6:96:a4:9a:3d:
         e0:df:c5:8a:63:e8:bb:40:e0:27:74:ca:8e:44:21:75:86:1c:
         85:24:0c:3f:bd:f8:66:91:e2:65:ac:7f:ff:ee:e5:54:11:51:
         ed:21:c5:f9:49:0f:63:29:99:49:42:3a:8f:30:4c:11:bb:45:
         ae:5f:4f:f7:51:9f:13:9c:35:10:86:88:5f:ca:c7:6a:3e:bd:
         40:c5:79:c9:f4:bd:4e:dc:9a:a4:a1:98:f6:fc:9a:f5:9d:49:
         50:84:a7:e3:e5:58:11:d3:c6:08:54:5c:28:b6:4b:a1:bd:18:
         68:21:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:48 2026 by rpki-client