Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa
File:                     E969742CB33B11EEB4D87842C4F9AE02.roa (raw, json)
Hash identifier:          7lIGItgwakyIm1ogfbfmJas4qk4ZwY4pDMQ8JsNuNZY=
Subject key identifier:   8B:B1:9B:17:BE:FD:4D:DB:00:DF:AC:1C:0E:83:28:64:26:30:4B:59
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       06E4
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:16:24 +0000
ROA not before:           Tue 02 Sep 2025 15:01:07 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24436
IP address blocks:        203.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: Sep  2 15:01:07 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58da8-86bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:93:12:9d:58:47:ba:a3:0e:cf:a1:a4:7e:
                    a6:fa:eb:d7:88:4d:44:2a:1c:e6:1a:ec:ba:ac:1e:
                    65:08:91:ba:c6:fb:53:2a:f1:aa:b4:ca:d8:dc:83:
                    62:25:d6:c5:ee:36:6d:01:21:36:a6:89:61:0a:22:
                    d4:8b:64:32:9f:3e:6b:a8:a7:ac:10:d4:03:0b:8a:
                    16:37:37:49:e7:d3:66:d9:91:c6:15:6b:72:9f:db:
                    85:09:d0:19:d7:ae:70:bb:da:71:e3:c5:3b:21:59:
                    c9:b1:f6:97:6c:d2:40:5e:d6:4b:9d:31:5d:2c:11:
                    b4:8c:16:31:e1:96:b7:77:fb:a5:42:f3:e9:d3:b3:
                    9f:cd:8f:c7:49:9d:82:35:e6:d5:d7:00:46:e7:57:
                    23:97:87:75:45:82:aa:54:bf:37:cc:cc:0d:1e:9f:
                    e8:b1:e2:d9:bc:4d:ca:4a:03:22:eb:01:58:6a:48:
                    f3:0f:9e:a3:09:7a:b3:8c:92:54:d2:41:2f:67:c8:
                    96:e8:8d:31:9b:dc:ee:99:84:ff:9c:da:ae:a9:e5:
                    ce:df:ec:f9:08:0f:b8:eb:b6:58:38:47:ce:b2:a7:
                    bf:12:93:e5:65:03:a7:c2:8d:96:8e:74:3b:82:75:
                    4b:3a:4c:51:4c:01:f0:d4:43:c4:dd:1f:24:5d:4f:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B1:9B:17:BE:FD:4D:DB:00:DF:AC:1C:0E:83:28:64:26:30:4B:59
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:0c:ca:37:02:32:33:99:22:c5:e8:a6:74:9f:61:64:aa:94:
         18:45:1a:24:e2:5a:7b:01:4d:20:62:d8:fc:17:49:a5:10:74:
         0b:1c:b8:5e:ed:52:0e:55:54:31:4a:88:15:88:95:a8:c0:ce:
         49:00:7b:1d:00:d3:ed:6c:1a:07:1e:a0:7c:90:76:ed:07:6e:
         5f:5f:1e:d4:f7:d5:71:6c:b7:5c:d7:01:79:97:21:d6:f3:28:
         d5:c1:fb:dc:ed:ed:91:4c:07:3a:97:47:e8:45:63:3c:0c:dc:
         97:c3:25:a4:cb:05:97:73:84:1a:e6:71:8d:3b:a6:fb:9c:f6:
         f2:80:17:99:9c:4f:1c:91:94:cb:6d:2b:6d:8b:45:55:26:2a:
         ca:89:dc:48:77:4f:c2:48:e2:3f:f9:72:90:19:05:76:69:42:
         70:e3:5a:d2:c4:a5:5e:7b:b3:ea:44:67:93:7d:ca:01:63:b6:
         b6:22:d3:16:0f:1d:82:d9:23:30:38:6f:06:7d:a9:2a:ed:f9:
         d8:a2:19:f7:14:e8:f3:d9:a7:36:1a:4a:c7:bd:e9:55:c7:f5:
         93:0f:15:a0:8d:f8:45:20:14:ca:56:30:23:ea:9e:9b:40:ac:
         8e:04:60:36:40:79:e4:b9:2c:d0:48:3c:bf:97:7f:60:48:d2:
         30:24:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:46 2026 by rpki-client