Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AC641C88B96B11ECB44AC533C4F9AE02.roa
File:                     AC641C88B96B11ECB44AC533C4F9AE02.roa (raw, json)
Hash identifier:          x2dbHHpd6lHu6U/D+Z5h6UrLSps4ACkU8JTV2sRYFDo=
Subject key identifier:   9A:4F:D9:5E:25:7B:9B:02:3C:ED:92:4D:72:A0:60:5C:82:42:BE:BA
Certificate issuer:       /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Certificate serial:       0EC4
Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AC641C88B96B11ECB44AC533C4F9AE02.roa
Signing time:             Mon 16 Mar 2026 18:22:42 +0000
ROA not before:           Mon 16 Mar 2026 18:22:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142129
IP address blocks:        103.137.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
        Validity
            Not Before: Mar 16 18:22:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69b84a72-ef44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:26:96:13:47:79:fc:4c:2c:5d:9e:39:c6:
                    3c:ea:8c:e9:8d:9f:16:1e:5a:0c:49:38:34:3c:b7:
                    35:43:13:0b:94:dd:d2:23:71:37:b0:46:bc:7e:d5:
                    18:be:8e:04:9f:3b:0d:ee:70:da:78:a8:99:bf:7e:
                    a0:4f:a5:96:ea:1b:ca:79:6a:50:f6:a5:80:b4:5c:
                    da:84:d6:28:a5:18:59:cf:eb:9b:c2:ca:42:78:54:
                    42:4a:32:cd:47:76:a7:02:70:4e:03:60:68:c0:b0:
                    22:a6:57:cb:94:2d:01:ca:52:22:e5:af:37:c7:61:
                    c0:ca:df:1b:63:b2:75:2c:1d:13:7a:a6:0b:e6:cb:
                    3e:e1:d5:e3:81:e9:92:4d:5b:8e:d9:4f:1d:23:b2:
                    54:f6:c6:a4:c8:7b:3c:07:f5:c0:24:55:ee:d6:7e:
                    80:86:38:05:d4:d4:3b:16:dc:bb:e4:99:e5:c6:84:
                    d8:4d:a1:54:83:57:3b:5b:1f:0d:85:73:1f:a5:e1:
                    58:1e:7e:cd:f2:dc:e8:84:31:90:ca:f9:be:83:6b:
                    07:0f:ac:85:f1:ef:8e:10:2c:57:b3:fb:10:52:ed:
                    0b:16:21:dc:03:2d:59:92:1b:b8:0f:b7:cc:1d:cb:
                    0d:49:f0:ad:20:4a:e2:80:4f:be:fa:4b:a3:db:61:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:D9:5E:25:7B:9B:02:3C:ED:92:4D:72:A0:60:5C:82:42:BE:BA
            X509v3 Authority Key Identifier:
                keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AC641C88B96B11ECB44AC533C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:0e:50:54:87:69:4c:f4:a0:58:8a:6d:16:c2:bf:d7:c1:
         cc:24:64:70:c2:50:5c:50:29:ce:7a:26:4b:c6:4a:3c:07:63:
         86:84:ea:b4:33:3d:c9:6f:fa:a3:72:4a:00:84:1e:e3:7d:32:
         1f:fd:53:d9:ca:3a:5d:7f:41:51:ec:95:a1:4a:75:c8:be:d2:
         6d:5e:bc:c4:4b:23:32:ee:c6:40:f8:02:6d:2c:2b:cc:35:48:
         85:23:15:dc:2b:50:d4:e9:c8:f3:9c:36:89:f4:d9:27:be:71:
         17:bc:9e:e5:7d:cc:03:af:7c:4b:5d:78:d9:96:16:39:1f:c9:
         e7:23:dd:97:db:15:fa:16:cc:3e:d5:6a:93:f1:09:73:4c:2b:
         a6:e4:ca:53:7d:3a:1e:07:d1:c0:50:35:c2:2d:be:64:8d:9e:
         fb:7e:b0:75:c6:2d:cf:32:82:24:ea:f6:36:98:fc:12:55:e0:
         60:36:5b:6b:f1:91:77:54:66:58:9a:3d:83:31:be:ec:be:26:
         ed:65:8b:e3:e8:9d:24:e3:3d:68:b6:32:9b:9a:0a:7e:b1:64:
         a4:36:a4:3b:84:7b:28:f4:8f:81:64:7e:50:85:ce:57:e0:45:
         2e:ac:db:58:8d:7a:ff:92:9f:61:9b:ad:b1:61:5f:13:ef:98:
         af:c0:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:37 2026 by rpki-client