Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa
File:                     DAEB24B0176111EFAB2AD122C4F9AE02.roa (raw, json)
Hash identifier:          /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=
Subject key identifier:   62:74:F2:83:BD:93:95:6B:5E:7F:A6:E9:EF:E8:C3:83:7E:EA:3A:6B
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       018C
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:07:04 +0000
ROA not before:           Sat 01 Nov 2025 05:18:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140499
IP address blocks:        103.67.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Nov  1 05:18:44 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59988-2a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:82:9c:96:ea:ed:27:9f:ea:f0:30:88:b6:
                    f9:55:73:1d:03:c5:bb:99:3d:6e:4e:42:1a:92:c0:
                    30:a2:9b:8c:c8:c2:81:f3:90:12:15:eb:87:51:20:
                    c9:27:f9:28:29:34:be:c9:68:bd:57:ac:fa:a8:e3:
                    22:48:06:29:06:97:82:6b:5e:0a:a6:af:6b:e3:ea:
                    7f:6d:ad:2e:89:60:90:61:31:b1:07:d4:8f:ea:3a:
                    7a:22:00:ad:02:a8:3c:e0:cd:da:b1:d9:98:cc:c0:
                    60:ab:94:98:7a:36:b8:f3:4e:4e:e9:1e:3c:6c:75:
                    ef:e0:18:ac:d4:b5:a8:36:c5:1f:dd:b8:6c:23:7f:
                    a6:c7:02:87:a9:9a:26:63:36:ba:89:59:49:1b:87:
                    a6:b9:34:c9:66:fc:6c:0d:85:42:f3:a5:7b:42:7f:
                    07:23:aa:11:ed:15:a4:44:a0:76:b4:cd:98:ff:2b:
                    65:c1:bf:d0:f4:09:f4:40:f7:16:17:bb:44:68:1e:
                    7d:18:dc:c5:c5:f8:75:13:38:bc:a0:5c:9e:2c:d7:
                    32:dd:74:d2:3f:d3:c4:f1:c8:dc:ef:45:7f:93:92:
                    29:9d:16:64:21:ed:1c:b0:de:36:4e:69:26:e7:5b:
                    fd:c0:71:79:8e:7e:39:5b:af:30:04:e3:98:3f:db:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:F2:83:BD:93:95:6B:5E:7F:A6:E9:EF:E8:C3:83:7E:EA:3A:6B
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:76:83:53:2c:b1:89:f4:08:f9:fd:00:58:40:f5:ac:2d:f7:
         80:f9:95:bd:3a:02:4a:cb:76:ef:64:a7:36:78:c8:02:f5:b7:
         28:9f:73:21:69:7f:23:5d:22:63:b3:1d:2c:a3:0d:05:a7:08:
         41:41:10:ec:92:27:ff:4f:59:9c:39:67:d4:ce:74:79:59:00:
         7d:85:d9:2c:93:f8:24:fc:d5:f1:ae:08:b1:5f:9d:67:e6:4f:
         37:33:71:7e:4b:ef:c8:3e:01:d9:47:d8:a3:66:98:ae:97:04:
         71:38:35:34:fa:e7:5d:bf:05:bc:58:0c:61:f0:a4:73:0a:2f:
         ec:8e:38:43:24:20:25:fe:bd:5d:8e:57:fb:23:d8:10:10:78:
         01:91:56:02:d7:02:06:ab:66:e7:aa:9d:15:b0:01:50:9f:ba:
         e2:c5:d7:40:da:17:d5:c8:bd:3a:e3:17:fa:3d:3b:89:ad:7d:
         63:cf:02:60:77:d7:cf:e0:05:95:6d:88:99:0e:85:0c:f5:61:
         21:bd:8e:f8:05:ce:35:31:7a:c2:42:cb:37:30:ee:b4:42:6e:
         c5:b5:d6:f8:e9:31:b7:54:66:e1:74:de:80:e2:08:3c:c7:50:
         a3:e4:b6:a8:a5:83:92:56:2d:0c:fb:a6:dd:2b:86:bf:a7:d1:
         08:68:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:29 2026 by rpki-client