Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa
File:                     CE833D6041CD11F088FC5360C4F9AE02.roa (raw, json)
Hash identifier:          Av8sWs0Kq8LOB9BYxLvuKYHwIqL1qQrrpW9Tt79Swuk=
Subject key identifier:   6B:E2:B1:BF:7F:ED:E8:A6:22:BC:58:AB:24:D6:2D:6F:3D:7F:1C:7D
Certificate issuer:       /CN=A91E2391/serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
Certificate serial:       95
Authority key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:29:13 +0000
ROA not before:           Mon 15 Sep 2025 08:17:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136799
IP address blocks:        103.35.112.0/24 maxlen: 24
                          103.117.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl
                          rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
        Validity
            Not Before: Sep 15 08:17:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a58299-9e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:b4:7c:9c:15:71:80:6f:ed:f6:5c:21:48:
                    d3:89:c6:06:a7:22:d4:e5:b8:16:05:0f:66:51:20:
                    c2:37:9f:f9:6c:b1:a9:5e:41:09:d2:3c:66:b6:a8:
                    16:e4:b4:b2:a2:c0:1b:79:23:57:cf:cc:98:90:ca:
                    e7:5e:44:c2:85:8c:4b:de:70:d4:0f:42:a5:1b:d5:
                    f1:e7:a4:c5:da:ff:90:d4:55:ce:ba:6e:d4:2a:b3:
                    b4:36:25:0f:0a:c0:7c:06:41:49:6b:a5:3a:3c:d6:
                    f7:00:a6:2f:5e:b0:3f:16:46:c5:77:e2:79:cb:a6:
                    0c:57:0b:48:7d:9c:78:24:7f:7d:85:7c:77:81:89:
                    43:d5:33:da:84:c1:21:8f:2f:8d:b9:26:68:a4:b9:
                    e3:3a:bd:75:58:dd:b2:7a:9f:ec:6b:29:b7:0d:44:
                    eb:bd:ee:e9:75:a2:39:fc:61:45:59:40:93:30:f9:
                    80:c7:1c:1c:80:75:8e:e2:7e:e8:b8:a9:81:e5:1c:
                    c7:bb:92:7d:64:17:c4:b5:39:24:5d:b3:aa:55:8c:
                    f1:8b:db:66:cb:d0:1a:6d:6f:00:6e:5c:55:46:51:
                    41:d5:2c:5d:f3:f4:3e:b5:95:39:f9:9e:fe:58:56:
                    f0:7f:e3:c2:99:4a:b1:63:bd:cd:98:dc:10:32:82:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:B1:BF:7F:ED:E8:A6:22:BC:58:AB:24:D6:2D:6F:3D:7F:1C:7D
            X509v3 Authority Key Identifier:
                keyid:BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.112.0/24
                  103.117.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:06:33:03:6c:a1:5f:87:51:22:86:e6:c0:ee:ff:5b:23:
         ee:c1:2c:b0:ff:c2:bb:5e:f4:95:17:ce:86:cb:4e:6f:9a:ff:
         f5:ec:7d:34:5e:4d:a2:90:a2:43:58:2b:4a:b1:7f:54:8d:5c:
         6f:0c:11:ba:1d:36:c2:ba:d3:98:44:9f:85:af:47:54:30:7c:
         92:5a:60:3c:95:1f:a0:4e:eb:2a:94:18:42:48:4b:05:08:8a:
         52:ed:56:8e:ad:27:d3:92:20:4c:c9:be:9d:47:5f:9b:a7:8c:
         9c:d3:ad:85:6f:42:cb:7f:4c:d4:f3:6e:c1:65:ef:69:e4:0c:
         fa:aa:b4:46:43:d9:79:0e:e5:10:e4:1e:e2:31:27:3c:3f:77:
         ca:93:f9:37:8d:ef:6e:d5:bc:b4:e6:10:61:1e:04:73:4b:6e:
         c0:8f:8b:14:2d:05:a1:28:c9:4d:f3:ce:ff:39:78:ab:6a:29:
         9a:95:86:5c:86:c9:93:e1:d4:04:c6:9c:b2:67:2d:55:77:94:
         0d:e5:0a:21:4a:b4:41:cc:bc:5b:50:c6:99:55:11:9a:ef:e6:
         b8:9c:9e:e9:2f:26:00:1b:dc:08:ba:bd:52:c8:b3:ff:8b:08:
         e2:89:20:9a:27:71:82:13:de:e2:57:95:2b:a2:01:a1:60:03:
         6f:c2:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:52 2026 by rpki-client