Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
File:                     0E49D1E024CC11EFB113A27BC4F9AE02.roa (raw, json)
Hash identifier:          N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=
Subject key identifier:   ED:88:EB:EC:E4:83:FD:E3:82:2D:61:01:BB:74:90:24:16:CF:4D:5A
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       017D
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:16:29 +0000
ROA not before:           Thu 23 Oct 2025 07:19:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137268
IP address blocks:        103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 23 07:19:21 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59bbd-1f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:4f:45:d7:90:0c:73:fc:59:5f:23:d4:6c:
                    43:f8:69:31:37:d0:1f:62:68:5c:24:6b:d7:9d:c5:
                    6c:cc:b8:f4:1b:51:c0:2f:78:90:9a:7d:d2:fb:86:
                    de:b3:76:f8:5a:a7:a4:60:2a:84:aa:5a:17:a8:ee:
                    6d:0d:83:58:05:1c:ce:57:b7:56:11:a6:66:0e:d4:
                    15:08:87:cb:71:f0:88:d4:b3:1d:89:85:34:eb:2f:
                    08:19:ae:cb:9f:81:75:c4:35:00:d7:0a:4b:04:ff:
                    3d:1a:9b:4a:de:b3:0e:d4:20:36:5f:21:24:7c:b7:
                    a0:11:73:d0:52:d8:47:65:10:6a:f5:36:c6:bb:bb:
                    5b:3e:45:86:7e:f2:df:e8:0a:53:73:91:2d:55:b0:
                    09:e9:76:a2:e9:a3:d3:80:ab:f7:81:34:95:bf:b1:
                    3f:d8:b9:b9:17:4a:f7:3a:4a:6a:87:5c:af:ac:93:
                    c6:49:a9:75:ac:aa:cb:9d:ec:ef:b1:d0:8f:a9:42:
                    95:b5:67:5d:6f:38:7e:ec:e1:53:56:81:72:4d:ff:
                    2e:eb:38:40:6b:ff:48:75:56:da:5d:5a:7e:f6:9c:
                    51:57:7e:01:da:82:53:89:64:ae:4b:74:3d:4b:67:
                    ea:9d:41:b2:0f:11:ee:52:cb:a2:27:93:23:f9:78:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:EB:EC:E4:83:FD:E3:82:2D:61:01:BB:74:90:24:16:CF:4D:5A
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:8d:65:ac:e7:7f:7a:66:2c:44:01:ea:51:5d:19:b6:ba:
         2e:36:7e:bc:c0:69:a3:fc:bb:9f:fa:38:69:fe:82:fe:38:d7:
         f3:25:02:30:ab:d2:e6:fb:78:2c:05:45:39:6b:2d:bc:3b:e0:
         8a:aa:f7:a1:03:90:5c:ed:d3:fe:a7:52:15:91:d4:ba:75:cc:
         b1:38:93:94:2a:38:d9:f9:43:d4:01:b2:32:e3:de:ae:c9:63:
         14:0c:fe:c1:39:c5:3d:7f:fb:0d:f1:f7:1e:6c:07:e6:02:34:
         96:ac:5b:b8:2b:25:0d:82:29:55:30:e9:d6:74:b9:ea:ab:30:
         88:07:f0:30:20:e0:38:f5:88:0b:57:ea:4f:56:5d:9b:92:63:
         14:e3:1c:10:55:df:ac:d0:1c:af:8c:2a:d3:04:f9:ed:0a:f0:
         92:92:49:27:b3:ba:1b:87:3d:14:a6:f1:77:53:67:7b:80:5a:
         4b:c6:3f:1b:fd:08:8e:41:6a:88:3c:a1:ef:a4:88:90:d4:9e:
         6b:9d:82:ab:84:55:8f:c6:fa:ad:2c:42:9a:6a:24:e3:37:19:
         c8:d8:63:18:a8:e8:b3:b5:93:ad:49:c5:65:da:14:f8:4f:87:
         35:54:52:48:7e:40:4f:48:0b:93:65:c8:a7:4a:98:8c:eb:e5:
         f2:cd:74:8d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE
NTk1OUYzMjUwHhcNMjUxMDIzMDcxOTIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWJiZC0xZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA681PRdeQDHP8WV8j1GxD+GkxN9AfYmhcJGvXncVszLj0G1HAL3iQmn3S+4be
s3b4WqekYCqEqloXqO5tDYNYBRzOV7dWEaZmDtQVCIfLcfCI1LMdiYU06y8IGa7L
n4F1xDUA1wpLBP89GptK3rMO1CA2XyEkfLegEXPQUthHZRBq9TbGu7tbPkWGfvLf
6ApTc5EtVbAJ6Xai6aPTgKv3gTSVv7E/2Lm5F0r3Okpqh1yvrJPGSal1rKrLnezv
sdCPqUKVtWddbzh+7OFTVoFyTf8u6zhAa/9IdVbaXVp+9pxRV34B2oJTiWSuS3Q9
S2fqnUGyDxHuUsuiJ5Mj+XgevQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO2I6+zk
g/3jgi1hAbt0kCQWz01aMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0
QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDOEEvNjFFQzQ5MTYyNEM5MTFFRjlDOEM2MjU5QzRGOUFFMDIvMEU0OUQxRTAy
NENDMTFFRkIxMTNBMjdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZzc0MA0GCSqGSIb3DQEBCwUAA4IBAQBoTo1lrOd/emYsRAHqUV0Z
trouNn68wGmj/Luf+jhp/oL+ONfzJQIwq9Lm+3gsBUU5ay28O+CKqvehA5Bc7dP+
p1IVkdS6dcyxOJOUKjjZ+UPUAbIy496uyWMUDP7BOcU9f/sN8fcebAfmAjSWrFu4
KyUNgilVMOnWdLnqqzCIB/AwIOA49YgLV+pPVl2bkmMU4xwQVd+s0ByvjCrTBPnt
CvCSkkkns7obhz0UpvF3U2d7gFpLxj8b/QiOQWqIPKHvpIiQ1J5rnYKrhFWPxvqt
LEKaaiTjNxnI2GMYqOiztZOtScVl2hT4T4c1VFJIfkBPSAuTZcinSpiM6+XyzXSN
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:00 2026 by rpki-client