Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
File:                     EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (raw, json)
Hash identifier:          5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=
Subject key identifier:   54:D6:66:BB:07:B8:51:4B:7F:93:2A:53:98:68:B0:55:CF:D1:19:88
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       0254
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:12 +0000
ROA not before:           Sat 03 Jan 2026 01:21:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     63962
IP address blocks:        103.41.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
        Validity
            Not Before: Jan  3 01:21:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a437e4-23a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:99:fb:5f:40:01:bc:5e:21:c1:26:1f:4f:
                    f5:99:cf:21:f4:34:68:89:6e:f4:de:d9:90:26:b9:
                    bc:98:34:d2:ee:e2:e0:9d:dc:29:d3:18:77:80:c7:
                    e4:b0:49:14:3b:8d:d2:0a:18:e6:a8:53:5e:2e:86:
                    92:81:ae:cf:75:c2:f4:47:ba:6a:0b:fe:19:cb:5f:
                    43:9a:7a:a5:85:dc:2e:57:09:25:51:98:41:e5:77:
                    c7:50:5a:d5:05:2d:22:46:01:a0:9e:8e:63:d2:5b:
                    b3:2b:9f:4a:e1:58:9d:be:bd:cb:d9:ea:76:29:4a:
                    84:b3:11:cb:db:2d:2a:1a:35:21:40:85:37:1b:08:
                    97:5a:9e:b9:2b:05:43:22:d0:82:cf:45:8e:6e:66:
                    57:fb:a9:7d:a0:cd:9e:b5:cb:d6:2c:68:9c:b1:b5:
                    c6:be:25:c0:b0:9a:fe:92:f6:2b:e5:15:46:cb:ec:
                    6a:47:4c:9c:bb:12:af:86:47:e5:80:9a:39:ed:bd:
                    98:0c:ab:7b:7b:3b:ce:a8:05:3b:d9:16:be:b8:67:
                    ad:52:d1:70:b2:79:e7:32:38:7e:ea:95:27:3f:b7:
                    ac:8a:82:5d:a0:ec:41:75:35:80:5e:34:d0:ee:d3:
                    82:75:86:28:eb:05:55:50:dc:a8:3b:60:7a:56:c7:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:66:BB:07:B8:51:4B:7F:93:2A:53:98:68:B0:55:CF:D1:19:88
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:e7:9c:18:02:b1:31:91:0c:69:b7:36:99:a7:d3:5e:d4:
         7d:26:ce:d0:88:2e:c5:ef:a3:27:06:18:72:04:48:e1:04:40:
         29:ea:5c:9e:48:b2:54:b3:ca:93:88:27:e0:02:77:a4:7f:51:
         c3:e2:cd:3c:ff:42:85:00:83:07:d9:5d:f5:6e:6b:66:1a:71:
         0c:78:41:ac:bd:47:9b:f2:ff:66:fd:ae:dd:14:9b:7d:74:5b:
         aa:83:c4:0a:0f:ba:2a:a5:d0:df:86:c2:fd:8d:b6:04:bc:48:
         5a:24:3e:a8:e0:fb:5a:f4:a2:03:9b:87:b1:64:d4:ee:bb:05:
         a7:3f:04:db:c4:8d:02:70:1b:ea:d7:48:42:08:53:6c:4e:94:
         29:8a:69:2d:68:e0:82:73:31:db:05:1c:cd:13:14:69:81:57:
         3b:05:db:b2:4c:32:68:5d:40:f8:2f:b5:52:82:ef:27:e1:4b:
         14:8f:70:a1:07:58:4c:c4:b0:cd:a4:87:b4:dc:62:dd:7e:02:
         e4:f4:14:8a:96:22:09:73:9d:d2:ef:2c:c1:0d:de:50:43:6a:
         05:7b:65:dc:b9:af:5c:b4:ad:b2:0e:0d:1d:85:f8:3a:9b:e3:
         ae:3e:43:58:bb:b1:e9:8e:8f:f9:23:e7:fb:35:91:68:65:e2:
         f9:65:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:12:31 2026 by rpki-client