Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
File:                     E3829F3CB1CF11EAA8732709C4F9AE02.roa (raw, json)
Hash identifier:          JKvKyO1/63q+AhlR1JotObcgq9e3d0FA11fa1AbKOqQ=
Subject key identifier:   89:68:A4:DF:B4:DF:46:BE:1E:32:4C:0B:ED:52:F4:1E:88:EB:71:E6
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       0962
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 20:16:54 +0000
ROA not before:           Mon 02 Feb 2026 20:16:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7490
IP address blocks:        103.7.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Feb  2 20:16:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69810635-4903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:83:10:81:73:1f:96:1f:7f:67:64:49:eb:
                    bb:e8:5a:57:2e:df:14:a9:1f:c4:85:55:f7:02:24:
                    bc:ac:08:69:cb:a8:98:1c:99:6e:9f:83:23:4a:3e:
                    32:e5:5b:d9:eb:4b:47:41:df:17:21:47:82:65:82:
                    58:8a:a4:ba:18:16:19:e1:b0:a1:21:64:51:07:2a:
                    29:64:a9:be:f3:dc:b2:37:13:86:d0:fb:af:d4:02:
                    fa:e9:dc:00:c1:14:ff:9c:50:b5:19:6c:a5:eb:a8:
                    9a:6c:b3:88:4e:79:97:d7:1e:c2:d0:9b:af:ee:6e:
                    ba:ff:9f:3e:3c:07:63:13:0a:53:48:1b:74:47:ba:
                    1a:b5:a7:d7:13:9d:57:50:c9:a5:7b:a6:86:9e:be:
                    43:18:c0:a7:4d:e9:58:64:b1:c9:b6:a7:85:df:99:
                    e0:20:b2:82:12:26:8a:ed:12:2f:79:fd:82:29:e4:
                    73:70:ce:83:0c:c0:cf:87:77:2e:78:ff:b5:e5:5f:
                    79:27:c6:00:99:4d:79:c8:f3:58:c5:02:18:5c:d7:
                    be:55:b0:ce:00:31:2a:f8:b4:16:0d:c3:2a:56:39:
                    04:83:64:65:b0:d8:9f:37:cd:c1:72:27:b0:e4:9e:
                    11:f1:17:cd:cb:3f:95:ca:92:b1:c9:13:b6:ec:e1:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:A4:DF:B4:DF:46:BE:1E:32:4C:0B:ED:52:F4:1E:88:EB:71:E6
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:91:80:d8:fc:39:20:16:ed:b3:e3:cc:fa:59:36:73:d5:59:
         34:b0:e4:a7:b0:c1:99:12:af:22:b4:b8:ce:ba:b0:9d:59:df:
         f1:15:c4:ad:5f:97:9b:27:a2:10:48:4a:7f:61:31:b4:0c:f6:
         e7:e6:87:ee:23:d1:cf:15:27:5f:dc:81:d5:ff:63:cc:2a:ca:
         d8:08:ac:33:73:24:7a:cc:9d:5b:5b:b3:70:21:ff:16:55:16:
         8d:3a:a0:0b:b6:ec:b4:54:a9:46:c1:e8:e6:85:a8:7f:b8:40:
         c6:83:1c:f3:a2:3f:96:02:70:ca:2d:0a:30:a4:39:af:52:16:
         ec:db:60:5e:2c:3b:2b:66:1c:a1:0e:58:4c:f0:35:1d:86:e1:
         5b:4e:f5:5d:9f:85:23:01:13:65:81:ba:b4:a4:17:49:e7:78:
         dd:4f:eb:a8:ba:d5:ac:e9:e3:c3:1b:9b:77:5d:f7:78:23:7a:
         ee:aa:79:fa:6f:10:fd:31:5f:52:73:f4:19:ac:82:0f:c7:80:
         63:10:cc:6c:88:20:63:2f:ca:77:9d:88:a5:c7:fc:46:c5:de:
         09:d1:94:5a:68:a8:8c:a1:21:b1:31:9d:19:c4:e0:15:e2:d2:
         e0:cd:d6:bb:b1:99:65:02:b6:77:87:99:16:61:48:97:5a:21:
         aa:37:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:19 2026 by rpki-client