Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa
File:                     EA8DA454097911F1BBFDCBA0103D8C67.roa (raw, json)
Hash identifier:          9KlD5ZdXpU0WbN+nbzIVTwIxijXxvXAqMFGWKtrDH+U=
Subject key identifier:   B9:86:06:EE:75:20:83:32:85:B7:89:2A:26:6B:05:9B:1C:08:DC:C4
Certificate issuer:       /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial:       14
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa
Signing time:             Mon 02 Mar 2026 13:49:40 +0000
ROA not before:           Sat 14 Feb 2026 07:51:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     399461
IP address blocks:        43.252.56.0/22 maxlen: 24
                          103.233.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
        Validity
            Not Before: Feb 14 07:51:05 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59574-c7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:ea:a7:83:70:c7:37:26:a4:94:ee:81:65:
                    ad:90:b6:7e:2a:57:a5:d4:90:dd:4b:70:be:af:c7:
                    06:84:71:ca:57:e8:3e:24:e6:93:29:95:bb:f8:e8:
                    c9:60:18:19:58:78:90:b3:0d:3c:f8:cc:a9:bb:34:
                    fa:7c:e2:f7:b9:d9:26:f8:36:47:84:05:d4:89:a4:
                    f3:15:93:e3:28:9d:45:af:55:a6:06:47:a0:11:06:
                    30:d6:79:46:3e:cb:3d:0f:72:7e:b9:b8:c8:a1:8d:
                    91:c2:33:8c:5b:2b:7d:69:34:0b:22:33:8c:9f:e7:
                    8e:a3:c1:8e:a4:66:c9:64:b2:af:4d:b3:1e:49:b1:
                    90:86:c5:39:be:c2:fa:b7:f4:e1:dc:8b:33:c6:86:
                    fe:30:d4:6e:d4:e8:a0:e0:ab:ff:c5:0b:5c:3d:8e:
                    ec:4c:61:5a:3e:9a:bc:e8:0a:bb:3f:97:0a:0b:0f:
                    91:82:1e:54:15:f4:20:03:65:ab:9f:ad:05:6f:3a:
                    ed:f4:d7:9f:68:88:a7:70:6f:2e:8c:20:aa:cc:8a:
                    90:d3:b7:fd:a8:ac:8c:f8:35:ce:7d:e5:b4:c1:8b:
                    e9:d1:a9:cb:6e:72:4c:a2:e9:b4:69:17:2f:c7:1c:
                    b6:cb:55:9a:b5:36:4f:3f:11:a0:3b:9d:8c:27:7a:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:86:06:EE:75:20:83:32:85:B7:89:2A:26:6B:05:9B:1C:08:DC:C4
            X509v3 Authority Key Identifier:
                keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.56.0/22
                  103.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:c0:f1:83:c9:14:07:b4:0f:14:4c:1a:a0:72:50:c1:4b:
         76:d5:d7:32:48:9a:0b:7b:69:01:ac:d0:3d:c7:7e:15:85:25:
         4f:8a:19:ba:0b:20:69:d7:55:71:f9:4f:fc:46:99:c6:f2:b2:
         c6:ae:62:bd:76:9b:b4:89:23:84:6e:c3:6a:2c:91:f3:db:09:
         b1:b7:ea:e7:56:ea:e1:73:a8:b0:27:a6:5d:e4:8a:65:ee:3f:
         0e:0a:5b:39:b3:02:eb:64:25:1c:b2:28:61:cc:73:7c:e4:cf:
         96:35:e4:94:dd:68:5e:05:41:5d:c8:ab:c8:13:44:37:7f:88:
         8b:11:8a:7d:66:c9:9a:9f:f6:da:5f:1a:75:4c:7e:27:af:25:
         00:c9:48:07:f7:0b:ed:d1:b9:9e:b7:35:af:03:3d:75:ee:0b:
         60:fb:2b:5e:c3:34:6b:c3:75:13:47:14:91:59:64:3a:a7:04:
         ff:37:e5:1e:2c:c5:df:4e:91:9f:2b:33:69:7d:00:91:98:ce:
         89:e9:e1:b7:59:30:5a:e6:f4:d4:be:7a:e7:8e:22:03:12:0b:
         34:03:a8:21:de:ff:ea:2f:01:a7:77:cf:ba:98:49:40:de:4f:
         43:c5:9a:9d:a0:6a:7f:e2:91:ed:b2:54:c9:40:e9:0a:a7:e4:
         81:fb:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:30 2026 by rpki-client