Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa
File:                     E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (raw, json)
Hash identifier:          xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=
Subject key identifier:   CF:F4:30:38:8E:A1:9C:32:DE:F3:56:23:63:1C:62:61:F5:75:9A:2F
Certificate issuer:       /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Certificate serial:       0C5F
Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:36:25 +0000
ROA not before:           Tue 16 Sep 2025 18:59:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58504
IP address blocks:        103.98.128.0/23 maxlen: 24
                          103.98.130.0/24 maxlen: 24
                          103.98.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl
                          rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
        Validity
            Not Before: Sep 16 18:59:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45cf9-0c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:43:f8:0c:90:5f:5f:93:a3:bd:fc:b4:64:
                    ac:09:3e:2a:b4:05:fa:ac:ad:1e:26:dc:15:54:d3:
                    55:12:12:6d:78:2a:56:6c:00:b8:f7:f9:8d:07:9c:
                    c0:fe:b6:28:b9:06:93:f5:04:d4:3e:88:50:26:41:
                    63:7f:e1:29:f3:ef:48:5c:cd:ea:74:f3:46:c7:97:
                    27:f1:15:08:25:a6:40:29:ea:50:96:63:d9:b3:5b:
                    a6:6f:b5:69:44:ed:3a:96:e0:f5:7c:33:e5:eb:ec:
                    9f:07:b8:13:42:12:51:01:28:41:97:53:1a:04:d8:
                    e2:87:21:8f:4e:e3:32:fe:5d:b6:43:a3:f6:42:51:
                    08:54:d5:e0:4b:aa:c1:3f:72:22:ff:8e:db:ee:9b:
                    4b:1e:92:4e:84:c1:02:46:95:a3:c6:ce:de:49:25:
                    e8:73:4a:bb:a3:a3:ed:a7:bf:66:31:1d:ea:64:68:
                    d3:98:e8:c2:f7:94:cf:6e:f0:ae:35:d0:81:7b:53:
                    d5:15:15:76:4c:25:54:e2:69:91:2f:48:35:19:f1:
                    83:6e:bd:58:6a:ba:64:79:e3:f4:fa:b1:28:06:d9:
                    81:55:8b:1f:7a:f3:7e:af:21:f8:16:68:5e:b7:bd:
                    29:80:d2:93:58:e0:9b:7a:c5:ad:b9:a8:88:02:ef:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:30:38:8E:A1:9C:32:DE:F3:56:23:63:1C:62:61:F5:75:9A:2F
            X509v3 Authority Key Identifier:
                keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:52:4d:c8:6e:7c:9d:0c:2d:76:e8:08:eb:c1:71:e2:14:ef:
         91:86:ba:7c:62:86:2d:bc:0b:12:33:69:d8:8c:47:ec:2a:2e:
         5e:b1:e1:d7:27:47:3e:d5:0c:d3:3b:df:cd:04:51:53:f2:f7:
         89:80:16:0c:58:9f:e8:d3:b6:25:03:3b:12:ca:b8:06:8b:7b:
         cf:42:a5:b8:7d:3e:b2:b7:44:c1:f9:ed:ec:88:98:bf:c6:8a:
         4b:b1:50:4e:c3:ae:19:50:7a:26:1b:55:ba:01:ee:59:ee:f6:
         19:76:18:b2:da:53:ca:cd:4d:8d:1b:9c:35:21:dd:d7:4f:4e:
         2a:de:da:75:8e:6c:a5:34:d0:41:38:c3:41:80:44:28:8e:5b:
         1c:ab:60:ee:77:d8:0a:a5:09:ca:24:dc:09:53:fb:0f:55:c6:
         dd:82:18:af:f4:6f:ba:58:c4:a2:41:6f:81:9e:40:d6:7c:da:
         05:f6:bd:ab:87:94:2a:36:5c:22:74:03:0a:a9:b2:88:5d:06:
         50:cc:4a:04:69:92:00:52:21:5d:84:58:2b:5b:8c:fc:7c:bd:
         a0:ce:36:ff:16:06:e0:e9:fd:b5:81:68:d8:07:f3:0f:a7:08:
         8a:17:3f:dc:6c:f2:59:77:e0:cf:76:f4:3c:c8:53:a9:a6:f3:
         73:39:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:28 2026 by rpki-client