Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa
File:                     5BB88D38245A11F18A931CD8C3833773.roa (raw, json)
Hash identifier:          dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=
Subject key identifier:   7A:80:E1:01:3D:E6:C3:DA:BE:07:E3:20:CF:4A:D1:0E:2C:40:BD:48
Certificate issuer:       /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial:       04
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa
Signing time:             Fri 20 Mar 2026 12:44:56 +0000
ROA not before:           Fri 20 Mar 2026 12:44:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133139
IP address blocks:        43.228.196.0/22 maxlen: 24
                          103.26.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
        Validity
            Not Before: Mar 20 12:44:56 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69bd4147-7200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:7d:8a:5c:39:af:c4:56:6d:a3:09:9a:19:
                    18:d9:d6:ef:c2:93:56:d5:d9:9b:96:5b:20:c8:4c:
                    f7:b9:44:46:5b:15:39:9a:ac:92:8f:3f:0f:70:c4:
                    7c:b1:ab:69:10:dd:02:64:67:b1:8e:99:e8:e4:e9:
                    27:e1:82:f9:93:23:15:c4:85:fe:fd:7f:cb:c3:83:
                    99:33:69:7c:fc:3d:b9:54:2d:11:42:5e:93:97:e6:
                    12:65:b7:25:de:75:92:8f:8a:84:4d:b6:30:25:20:
                    9f:3e:89:2b:02:11:db:e6:c6:02:92:f9:53:ec:05:
                    89:9f:de:7b:36:2e:56:a8:12:21:f4:49:4e:01:76:
                    2a:ce:88:f5:5a:f3:97:e6:88:56:9d:f0:41:55:8b:
                    58:b6:8b:1f:da:29:2a:94:13:33:da:b5:fe:ec:87:
                    95:52:b1:3d:09:c9:f3:62:5b:0d:f3:67:af:a0:55:
                    25:c6:da:e9:aa:8b:4a:15:88:00:86:a0:fe:2f:bc:
                    2e:18:9d:ec:94:55:a3:cd:97:97:59:dc:60:14:eb:
                    03:59:dd:93:ed:47:cc:11:f2:67:e3:1d:c6:f5:5c:
                    63:69:cb:f0:04:a8:f4:9d:76:8b:11:45:db:2a:19:
                    f8:6b:de:65:42:ad:48:8d:f0:63:15:34:e0:e6:47:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:E1:01:3D:E6:C3:DA:BE:07:E3:20:CF:4A:D1:0E:2C:40:BD:48
            X509v3 Authority Key Identifier:
                keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.196.0/22
                  103.26.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:23:3f:d3:62:ef:af:3c:78:bb:87:84:28:49:21:26:dc:2b:
         5b:42:c6:6a:23:d2:80:1e:c7:5d:a1:8b:46:03:06:b6:62:a6:
         ac:47:e6:ab:bf:78:8e:2f:f9:81:c1:10:39:3f:9b:07:76:67:
         d5:ae:61:24:1a:ec:20:b7:08:5a:9d:72:91:e4:a8:1e:e4:07:
         31:32:fc:ef:c5:1e:09:e0:50:98:20:20:62:e0:15:ba:63:d6:
         f4:e1:78:23:74:53:89:39:fc:1e:66:af:46:12:4a:e2:32:43:
         73:57:7f:85:92:bb:51:d3:06:09:50:5e:82:88:e6:a8:8d:bc:
         01:c0:d1:ca:b4:0c:8b:c6:1a:ba:8a:11:6a:6c:c1:67:95:19:
         eb:01:4d:e1:6a:62:1a:77:55:7c:dc:98:00:b8:56:51:0b:d5:
         d3:db:f9:44:f0:a8:05:6b:f2:cd:bf:83:6d:c1:98:26:8b:37:
         ec:92:ef:8e:43:36:b1:f5:f7:99:f2:85:e9:87:cb:c3:90:75:
         4a:8a:d5:71:b7:89:e8:ec:ea:57:36:29:28:58:d3:11:18:c9:
         e6:fe:80:a6:df:e1:5c:b9:81:15:ec:69:65:dc:3e:21:0d:da:
         8a:66:e1:06:94:e2:39:12:88:ce:9f:f0:1e:82:94:1c:3e:97:
         22:34:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:47 2026 by rpki-client