Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa
File:                     C26576D4F4ED11E9ACC51713C4F9AE02.roa (raw, json)
Hash identifier:          +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=
Subject key identifier:   93:B8:02:77:29:E3:75:5D:39:DE:F7:97:22:BC:20:8F:94:53:B1:DA
Certificate issuer:       /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial:       0E99
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:57:58 +0000
ROA not before:           Mon 20 Oct 2025 18:27:07 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63526
IP address blocks:        103.120.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
                          rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3737 (0xe99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
        Validity
            Not Before: Oct 20 18:27:07 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46206-a6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:b6:4c:c3:86:8b:10:c0:47:1b:c0:72:60:
                    dc:e2:6a:a4:e7:e0:59:67:fe:13:34:0d:c1:82:f2:
                    ef:71:c1:c6:7d:e7:80:0a:1a:39:d4:39:61:f6:59:
                    d5:71:2a:3a:38:c0:5a:eb:2c:bc:3e:ca:fe:e4:27:
                    c5:30:5c:68:fb:a1:cd:6d:c0:f1:91:a2:cd:ea:af:
                    ad:08:fd:34:3b:94:c0:b2:6a:34:9f:51:e5:af:dc:
                    68:54:22:6f:38:fe:9d:4e:15:e3:6d:0d:d6:11:c9:
                    82:5f:f7:7c:aa:cc:b7:f9:41:64:76:4a:e8:f7:04:
                    9b:e7:c0:9a:18:07:7c:e6:6c:39:18:de:a6:2a:fc:
                    fb:20:51:fe:24:6d:c8:82:f6:69:c2:99:9b:de:9a:
                    1a:02:e1:32:e5:38:2e:af:be:97:5d:84:26:7f:49:
                    32:e9:80:70:bd:d8:97:d6:c2:b0:85:ea:3f:e8:12:
                    59:f5:4d:4e:31:38:cb:26:6e:53:55:77:91:e8:87:
                    a8:c6:b4:26:6a:c3:a8:f2:96:52:8a:7c:8f:57:ee:
                    15:dd:e1:bf:a4:53:b3:64:74:0d:dd:b4:c9:bf:1e:
                    49:86:fb:05:6e:df:38:52:04:52:41:de:69:b5:90:
                    17:93:8e:c1:31:0f:c5:8d:3c:38:5c:38:c3:52:60:
                    3b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B8:02:77:29:E3:75:5D:39:DE:F7:97:22:BC:20:8F:94:53:B1:DA
            X509v3 Authority Key Identifier:
                keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:a3:af:36:ef:f5:d4:86:56:a8:a5:af:e4:d4:29:be:a8:
         e3:c9:52:55:43:2f:f0:a4:5b:a2:46:e0:75:05:74:7e:0d:93:
         f3:b8:17:1d:b9:a5:6d:26:6c:dc:e3:72:cc:09:9d:99:d7:c3:
         e9:3c:81:5e:16:81:5f:84:cc:9e:12:1f:d4:97:13:5b:9b:f4:
         a1:8c:f6:51:ce:f4:61:cd:38:ae:ad:aa:c8:ad:cc:8c:fc:4d:
         f9:63:f3:4f:58:b4:a7:c5:b5:78:ac:c4:bb:2f:e3:23:6d:06:
         31:8f:e3:45:ab:39:fd:e5:69:54:2f:da:ce:09:17:d9:a5:1d:
         6c:a7:52:18:bb:4c:72:04:b3:c2:7c:8b:aa:d5:a6:f8:2d:f9:
         e1:ce:06:bd:03:fa:06:d9:e6:26:db:84:3b:d0:b0:b9:a4:42:
         2d:23:7f:51:25:6e:6c:b3:a8:44:49:a1:68:ec:74:ae:47:ec:
         d9:fa:c5:a3:fb:b7:23:83:28:da:cd:73:c3:00:bb:d4:aa:02:
         0d:e2:f2:4d:b6:37:29:69:c4:5b:f2:9f:c8:56:5c:f6:48:34:
         55:64:a7:9f:87:2e:76:13:1c:be:6a:b7:72:c8:9d:4c:94:1a:
         17:16:3e:7d:06:56:96:5a:a5:57:a7:39:bb:73:5e:4d:56:52:
         b3:f7:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:24 2026 by rpki-client