Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/26DB1136FDFC11ECBB977313C4F9AE02.roa
File:                     26DB1136FDFC11ECBB977313C4F9AE02.roa (raw, json)
Hash identifier:          in2SGcslKvdWmLFyOrq3QeVaymp0oqerQYbYxXUBafo=
Subject key identifier:   D8:16:A2:1C:69:17:DC:DA:C8:5C:D0:E6:6B:A1:BC:2E:24:C5:B7:BF
Certificate issuer:       /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial:       03AB
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/26DB1136FDFC11ECBB977313C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:58:20 +0000
ROA not before:           Sun 29 Jun 2025 00:46:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139667
IP address blocks:        103.187.38.0/23 maxlen: 23
                          103.187.38.0/24 maxlen: 24
                          103.187.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
                          rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
        Validity
            Not Before: Jun 29 00:46:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3ffac-ab97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:21:9a:50:49:89:89:86:ec:97:b5:06:49:
                    6c:27:31:17:4a:a6:15:68:84:e7:0a:a5:f4:c3:d6:
                    2c:ee:6d:1d:db:61:7c:4f:22:67:6a:76:9e:0b:ba:
                    ad:17:5f:0e:9a:8d:45:35:ec:fe:0f:46:f9:32:6b:
                    39:b2:55:3c:d5:ef:f5:b8:70:20:11:07:07:34:e8:
                    d4:09:34:44:c2:3b:4a:3c:49:14:14:36:46:5b:d2:
                    98:0d:97:03:4e:b6:76:5b:01:d9:4a:9f:31:51:47:
                    d6:ac:71:3f:30:96:e8:94:da:5a:10:1c:07:55:89:
                    93:e8:ac:e5:66:9e:92:0f:1f:bf:63:fe:bd:09:c4:
                    6f:b3:71:d3:a0:9c:0e:6c:9f:8b:26:76:fb:ec:23:
                    61:43:1a:75:ce:cb:b1:22:9a:42:ca:24:d5:36:b7:
                    ed:bb:e4:04:40:d3:e2:0b:f9:74:b5:61:b3:86:a3:
                    35:9b:4e:60:59:83:ad:fb:8d:43:70:2c:a9:4a:b3:
                    33:9d:3c:c1:e7:cb:54:b3:d6:00:fd:83:05:59:14:
                    e2:d1:de:56:18:6a:96:47:45:c4:f0:79:a7:88:af:
                    47:46:59:5a:4e:49:7e:28:95:a9:dc:ff:c8:ea:b3:
                    bc:7c:a6:55:b0:29:50:e9:1f:0a:3e:4a:2a:41:84:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:A2:1C:69:17:DC:DA:C8:5C:D0:E6:6B:A1:BC:2E:24:C5:B7:BF
            X509v3 Authority Key Identifier:
                keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/26DB1136FDFC11ECBB977313C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:0d:ea:ca:c4:ff:2a:76:25:df:d3:f8:2d:1e:b9:f5:90:
         48:a2:24:88:27:48:ab:0c:41:a0:43:fa:04:02:1c:e4:7b:c1:
         f2:b3:8b:45:e3:d4:1b:0f:65:eb:8c:8b:cc:5c:9f:44:34:94:
         32:0f:21:ba:b2:4b:42:81:7b:43:12:20:63:c4:28:a6:80:3f:
         c4:bf:24:00:bd:9e:64:11:d4:d8:c3:41:9b:eb:dd:57:31:d1:
         4d:e0:91:53:e9:09:d9:fc:80:48:b3:3a:5e:84:6f:c7:4c:8d:
         ef:58:2d:a4:b6:e4:f8:13:75:f3:90:86:d6:f8:25:e9:82:9e:
         d2:85:22:03:2a:84:c2:93:f7:a2:64:89:70:3f:88:ac:84:0b:
         7b:04:85:bf:8c:2c:d4:01:90:ab:f3:9a:e6:45:ef:96:ef:f3:
         b2:11:69:be:1a:ee:47:b7:ac:43:0e:f0:6a:db:b0:17:e7:98:
         5b:ac:86:36:0f:1d:bb:8f:f3:28:90:15:35:71:2d:d9:63:d3:
         d4:0a:98:39:d7:f3:cb:b8:8a:93:32:9f:72:1a:51:56:d9:26:
         fa:14:fd:71:25:bf:b0:26:af:8a:ee:3c:c6:ca:f5:fb:6a:9b:
         9e:40:6c:33:31:a2:fa:6f:b5:c7:65:f7:c1:68:e6:e2:da:f6:
         92:ab:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:07:54 2026 by rpki-client