Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
File:                     329274C4D31611EEA7F0475FC4F9AE02.roa (raw, json)
Hash identifier:          LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=
Subject key identifier:   3C:31:C0:43:8D:69:D0:7C:DC:12:AD:69:26:D0:9F:8A:61:28:31:1F
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       023B
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
Signing time:             Thu 12 Mar 2026 18:23:02 +0000
ROA not before:           Thu 12 Mar 2026 18:23:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.134.25.0/24 maxlen: 24
                          103.134.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Mar 12 18:23:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b30486-d6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:f7:48:f5:51:0a:e4:80:a7:3b:26:9d:0a:
                    2a:db:7c:4a:96:06:60:6f:03:09:5e:7e:69:e8:58:
                    c3:16:bb:f3:aa:c4:57:9b:36:5e:dd:94:34:d9:89:
                    e3:0f:16:32:e6:8c:28:ba:65:67:4c:2c:af:2c:8e:
                    f0:87:39:7f:1c:6d:a9:d2:71:3c:1c:15:87:18:8b:
                    42:54:ea:1c:dc:99:b0:2b:70:75:52:91:05:a7:c5:
                    9d:ea:3a:b6:01:0a:2e:6b:99:dd:61:48:3c:b1:18:
                    4f:35:41:f9:ac:55:0b:b9:45:4f:ff:dd:df:7b:25:
                    2b:4e:4f:26:3c:4f:6c:a5:10:76:82:fa:fa:5e:f9:
                    1d:ec:3d:01:2c:38:58:48:47:f2:48:0c:57:fe:ac:
                    b6:58:62:e0:d0:5b:b7:b4:c7:7a:7a:36:a4:71:86:
                    e2:6c:48:75:57:a1:f1:82:b5:e5:54:d7:ac:d9:94:
                    74:da:44:95:56:44:52:9c:8b:60:99:82:e0:a1:62:
                    6a:46:d2:5e:b7:c4:4f:fc:4e:a0:76:03:70:d4:67:
                    8d:82:d8:23:6e:fc:4b:63:b0:46:04:4c:f4:49:88:
                    46:3d:63:af:f2:b2:53:6e:cd:68:e4:63:4c:f8:54:
                    7b:9a:e6:98:d5:e5:ec:9a:96:3e:21:10:ad:8e:73:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:C0:43:8D:69:D0:7C:DC:12:AD:69:26:D0:9F:8A:61:28:31:1F
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.25.0-103.134.27.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:dd:64:33:be:b8:8f:5e:fd:db:7d:8b:9e:15:74:d7:68:
         b5:4e:1e:b4:ea:df:d1:97:6a:92:b7:79:c6:9f:b9:53:88:eb:
         9a:d1:df:7f:f6:a2:7e:5e:c3:56:fe:70:64:b5:b6:83:84:16:
         15:5d:03:57:47:a1:0b:c3:b9:ec:a2:c8:e3:13:46:3e:1d:62:
         2f:4a:8d:53:88:45:19:a4:ee:4d:24:c6:1f:42:48:4e:99:8c:
         24:a1:4a:4f:6c:9b:68:90:ca:c6:4f:15:ca:46:ac:00:af:3a:
         36:c7:32:da:be:79:b0:98:c7:70:cb:76:2d:49:63:63:b9:bc:
         3a:37:9f:17:c4:05:cb:2e:39:30:50:78:c9:ca:92:a2:34:3d:
         20:8f:62:2b:98:19:07:1f:7e:54:38:8e:d7:4e:c3:ac:ef:47:
         4a:22:d1:29:65:73:46:a1:48:9e:86:e6:f6:42:7e:a0:ff:97:
         ba:e5:dd:81:46:8e:e0:df:87:d4:2c:56:e7:38:88:8d:e4:65:
         8e:4d:2b:bb:93:27:21:ce:19:90:f5:b8:ed:c0:10:f0:56:c1:
         50:2b:08:8f:c4:89:5d:fd:cf:aa:0d:24:33:63:c4:6d:d2:95:
         eb:3b:78:24:d5:5e:fd:8f:e8:b1:ca:00:dd:9a:ba:65:6f:a5:
         07:41:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:29 2026 by rpki-client