Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/E03427482D2411F192A7D59AB8833773.roa
File:                     E03427482D2411F192A7D59AB8833773.roa (raw, json)
Hash identifier:          6XCUaJGME6Z9CZytyWw6X1X7WoldzofbdyDhfxUS80A=
Subject key identifier:   13:23:55:5B:CA:DC:58:66:5A:08:BF:B1:4E:47:EB:10:A0:CA:C9:09
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       04E0
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/E03427482D2411F192A7D59AB8833773.roa
Signing time:             Tue 31 Mar 2026 17:13:03 +0000
ROA not before:           Tue 31 Mar 2026 17:13:03 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133731
IP address blocks:        103.231.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Mar 31 17:13:03 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69cc009f-70ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:ac:85:2d:e1:12:0e:ba:d5:f0:fa:30:22:
                    eb:2b:ca:ae:b4:20:19:d0:bd:fd:f5:59:bb:bb:b8:
                    13:18:88:c9:e0:35:21:1d:d3:92:ac:b4:55:f7:34:
                    12:7e:a3:88:0d:f4:1a:a8:79:4a:e9:9f:30:1a:a3:
                    f8:40:3a:60:ff:6f:96:2d:48:e7:2e:64:b5:2e:6e:
                    2c:ec:aa:68:4a:43:9e:b2:76:fa:d8:d9:c6:e5:8a:
                    89:f2:4e:a8:51:f4:7d:3a:c1:26:ff:d3:71:57:3a:
                    b2:90:f5:77:33:c1:31:8e:6e:57:30:5a:e7:72:88:
                    3e:1d:66:4e:f4:5a:84:42:c8:44:06:1b:aa:3f:28:
                    3f:66:9e:d5:cd:dc:55:b4:d7:b2:f1:e0:32:95:be:
                    bc:e5:cc:cd:83:6b:27:b5:6d:9f:5a:80:92:53:b5:
                    7b:ca:07:76:2d:ee:81:ac:5f:c3:63:b1:98:37:81:
                    07:5e:7c:43:b3:31:83:59:c1:ec:51:d6:3c:e8:57:
                    32:1a:ba:d1:51:c2:11:70:21:3b:50:be:02:9c:00:
                    b1:f4:70:32:41:86:92:d9:ed:c2:ee:df:1e:4b:ff:
                    b2:1b:b7:f3:33:a8:a3:6e:5d:1d:1e:34:5d:ff:df:
                    ed:e3:9e:cb:94:1b:94:f0:1f:fa:6a:b1:55:c5:7c:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:55:5B:CA:DC:58:66:5A:08:BF:B1:4E:47:EB:10:A0:CA:C9:09
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/E03427482D2411F192A7D59AB8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:03:c9:bb:08:52:87:fd:a3:77:c4:97:d7:cc:2c:4e:6f:15:
         73:76:f1:8e:57:a3:84:3a:15:5a:c9:2c:4b:9e:9c:d0:1e:e2:
         bd:3c:c8:3b:ff:bf:ac:1f:7f:18:75:24:fb:71:cc:f8:07:3a:
         cf:44:f8:80:54:9b:a3:7b:00:cf:8f:fa:ad:b0:7b:f1:26:e5:
         3f:a8:99:ae:7f:31:12:45:a2:be:6f:b4:2f:81:92:83:00:05:
         fc:2c:c0:7f:92:56:c2:91:a3:7b:13:8b:e4:3f:e9:e0:8f:f1:
         e0:35:32:46:01:b8:5f:9a:e9:ab:78:51:9b:19:6c:63:09:07:
         5e:b2:ef:81:1b:9a:1b:38:a5:07:a5:4d:f9:0b:b5:20:4c:93:
         f6:e8:cf:3c:28:7b:7e:a1:47:1c:3b:5a:fb:89:c2:08:09:92:
         37:a1:07:9d:d2:c5:0f:b5:fd:e8:4e:af:fc:1b:5f:7b:08:70:
         49:51:5a:ee:0b:c2:c4:6e:ad:d3:d5:bf:89:a9:b3:eb:1f:5c:
         6f:85:ba:33:c3:a1:fa:d0:63:d9:0d:6d:eb:15:0c:b5:79:bf:
         48:ca:12:ed:64:66:78:56:d3:b5:0a:c7:ee:94:38:94:55:b7:
         0b:8c:0f:71:76:76:03:41:ae:30:95:34:d2:60:f6:23:87:e7:
         ca:9a:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:04:17 2026 by rpki-client