Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
File:                     E52DE77630B611EC981BBF1CC4F9AE02.roa (raw, json)
Hash identifier:          NWJk9U1zJ6g6SQr9JT1EUFlzv/4D0aiZyw7C2alM700=
Subject key identifier:   6A:04:9F:12:83:49:46:53:03:A7:41:07:AA:75:91:64:D1:96:16:75
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       053E
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:51:31 +0000
ROA not before:           Tue 27 May 2025 00:45:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     45753
IP address blocks:        103.89.72.0/24 maxlen: 24
                          103.133.72.0/23 maxlen: 24
                          103.133.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: May 27 00:45:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fe12-e772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:08:8a:d5:35:80:ab:45:92:94:ea:48:05:
                    be:06:1b:84:40:4a:34:b6:41:6d:0c:c8:6e:96:b2:
                    2a:f9:9d:5a:1c:16:79:7f:f2:10:c7:f8:4e:ff:ee:
                    07:27:b5:59:c4:7c:92:8a:7f:e3:f2:2a:bf:d7:7b:
                    77:e2:6d:76:6e:f9:86:ce:3f:17:00:fc:80:3a:48:
                    d3:06:13:5f:91:b0:61:a9:07:8e:91:86:a1:c5:be:
                    3a:74:65:c7:08:0d:ee:c1:2c:d0:af:17:f8:3a:c8:
                    b4:ab:81:a7:39:34:a5:d8:76:59:95:d1:9f:0f:d7:
                    e3:e9:6e:63:29:ed:3e:79:06:1e:1c:98:c5:7f:b9:
                    12:34:09:3a:9a:5c:26:bc:c3:f5:e1:b1:0b:90:af:
                    0a:8f:46:5d:a4:4b:ec:0d:87:12:c8:e5:44:9b:5c:
                    80:97:bd:fa:31:ff:c3:94:4c:b0:de:ee:e6:56:5c:
                    32:29:ed:f7:00:77:87:74:2a:f7:09:e2:8f:40:2f:
                    79:99:82:4d:34:68:a8:86:7a:eb:22:48:26:e5:93:
                    15:08:cf:de:44:34:fa:bf:e0:02:60:47:b6:cb:c2:
                    67:47:68:63:76:b4:56:ae:04:4f:65:f3:92:4e:87:
                    7e:bd:e5:5e:45:be:73:ab:41:64:76:13:61:29:29:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:9F:12:83:49:46:53:03:A7:41:07:AA:75:91:64:D1:96:16:75
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.72.0/24
                  103.133.72.0-103.133.74.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:64:e7:54:5c:18:d6:df:e7:02:5d:2c:47:52:b2:82:2a:
         ba:fd:c5:8c:37:be:21:c1:5b:3c:6b:15:b2:6e:93:07:a4:e7:
         7a:58:82:42:44:4b:11:c3:67:f0:4e:11:c6:68:ac:44:9f:5a:
         97:9e:81:68:fd:85:20:a5:11:46:79:ba:69:8f:c9:bd:91:b5:
         46:90:4e:09:f9:49:64:e2:79:b7:10:6a:a0:e7:d9:cc:0b:9b:
         1a:ec:60:68:49:06:db:bb:8c:12:e3:ab:37:d7:ae:8a:a8:e5:
         da:b1:7d:b9:f1:8e:0a:3a:81:0c:d1:68:44:f5:58:36:80:29:
         14:92:3d:99:7f:25:ea:7c:f2:a6:fc:32:1c:1b:a0:81:bb:66:
         11:75:f7:97:f8:90:fe:39:2a:c0:4c:ff:49:68:21:c3:3f:3a:
         bc:58:1c:30:9b:11:60:0f:62:4d:d3:06:f0:3c:4f:f9:65:90:
         d1:2b:b8:df:15:12:f7:b9:30:e0:25:e7:78:55:cc:74:0f:65:
         22:10:d8:81:dc:e7:c3:d6:0c:c6:05:88:5f:f8:73:1c:03:33:
         67:74:85:77:a2:39:59:9d:78:53:b4:9c:b0:ab:40:fc:b2:7f:
         28:eb:16:ab:0b:f5:34:c8:bb:cf:fc:3a:5f:54:fd:3a:2f:92:
         85:a2:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:57 2026 by rpki-client