Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/CE93738EBE0811F19E65C7285411F970.roa
File:                     CE93738EBE0811F19E65C7285411F970.roa (raw, json)
Hash identifier:          eTePzZthCLCfAO4M8nOmebFDRGb48Mw6WRdsRQl/fUA=
Subject key identifier:   E2:98:9A:CF:DF:34:C6:A8:96:D2:89:02:1D:EC:66:EC:C3:20:0C:16
Certificate issuer:       /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial:       83
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/CE93738EBE0811F19E65C7285411F970.roa
Signing time:             Fri 02 Oct 2026 02:27:26 +0000
ROA not before:           Fri 02 Oct 2026 02:27:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.110.228.0/24 maxlen: 24
                          103.110.229.0/24 maxlen: 24
                          103.110.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
        Validity
            Not Before: Oct  2 02:27:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6abf168e-9311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:95:a1:80:1b:1b:99:b3:29:86:3f:c9:39:
                    c0:31:29:94:7c:db:24:4b:b0:8c:8d:d7:af:d3:5c:
                    23:cf:a6:67:db:17:10:a8:05:f2:7a:65:b3:4c:cb:
                    f3:af:3b:ee:d6:54:4e:99:98:eb:61:f9:a9:b9:8b:
                    37:9f:79:1d:87:01:8b:9f:fc:d2:99:00:ef:f0:5e:
                    6e:73:41:8a:98:da:7d:d3:72:d7:83:ce:94:83:84:
                    2f:f7:47:de:da:35:17:1c:df:1f:29:1e:28:cb:f9:
                    bb:76:8d:03:ce:81:27:61:90:84:83:8a:44:6a:63:
                    cb:bd:25:6e:b0:ce:20:6f:85:f1:95:04:04:05:ed:
                    15:93:35:51:f9:22:9c:bb:74:3e:c1:a0:c7:de:67:
                    b7:19:31:d7:e5:29:a5:0c:ab:8b:f7:b9:26:2c:85:
                    cf:05:75:73:92:b6:47:0d:50:1e:c2:7d:63:02:b6:
                    c3:03:98:82:55:ba:4e:68:b5:cb:49:bb:36:09:27:
                    2a:2b:98:01:52:a8:34:6e:8a:a7:49:b1:b1:92:2f:
                    75:0a:66:34:89:12:4a:44:03:47:ab:3a:bb:3b:56:
                    46:fb:58:f1:0b:9d:9e:ae:90:e1:1c:97:d3:a7:1d:
                    e6:2d:fe:30:c2:63:4b:98:8e:ba:bc:4b:57:8b:06:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:9A:CF:DF:34:C6:A8:96:D2:89:02:1D:EC:66:EC:C3:20:0C:16
            X509v3 Authority Key Identifier:
                keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/CE93738EBE0811F19E65C7285411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.228.0/23
                  103.110.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:23:c8:14:f6:42:7b:55:11:f5:4f:c5:4e:52:55:74:71:ee:
         89:f5:b2:8a:a6:a4:f3:b8:42:06:41:4b:05:99:2d:c4:e4:c3:
         cc:66:97:ea:8d:21:e4:af:7c:96:54:c4:0b:ee:33:2f:db:50:
         92:3c:bf:97:16:08:99:b0:6a:7b:1a:bf:a0:18:bd:55:d7:24:
         3b:b1:48:93:67:84:0d:37:b6:df:60:0d:46:cf:be:09:91:50:
         a9:34:c4:5a:83:5a:cb:2b:20:0f:d9:2f:2a:2a:48:20:8f:0e:
         69:c2:30:7c:9c:4c:35:84:75:d1:7a:20:de:80:14:fe:e9:94:
         90:0c:60:95:f1:29:1b:d5:45:09:7f:da:82:f5:2d:48:ba:76:
         11:38:e2:b1:1d:36:22:71:12:2f:60:0a:d0:d0:a3:61:6a:fe:
         93:fc:90:f3:6f:b1:13:8c:e1:f6:39:11:f0:a7:5f:60:db:93:
         3f:54:c7:6a:d8:1b:d2:83:f8:5f:ba:3f:b5:17:16:2b:b4:ea:
         be:01:cd:2c:84:f1:8d:ae:b1:09:c9:64:ba:27:19:2e:ac:e5:
         2d:18:8a:d5:76:4e:d7:3a:03:ea:c8:3b:12:3c:2e:85:c6:8c:
         2e:c9:0e:2c:fd:ba:58:67:5e:4e:0f:26:0b:0f:17:f7:ec:a6:
         fc:28:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:05 2026 by rpki-client