Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa
File:                     095A900E485E11F19C8E7347A2833773.roa (raw, json)
Hash identifier:          i0zNc9repKF5CGp6D95VSysFWBtQLS/5goar7nKkzq0=
Subject key identifier:   41:62:A6:22:CE:68:4E:68:78:45:2D:D6:A7:B3:14:4C:D0:70:D7:55
Certificate issuer:       /CN=A91281AC/serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
Certificate serial:       02
Authority key identifier: AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa
Signing time:             Tue 05 May 2026 08:40:15 +0000
ROA not before:           Tue 05 May 2026 08:40:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     63966
IP address blocks:        103.53.154.0/23 maxlen: 23
                          103.53.154.0/24 maxlen: 24
                          103.53.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl
                          rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91281AC, serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
        Validity
            Not Before: May  5 08:40:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69f9acee-06f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:dd:d1:3e:25:2e:78:18:fe:2b:7e:a4:2e:
                    04:04:2a:9a:6d:84:a6:9c:6d:49:0f:2e:25:fb:41:
                    d4:ab:8a:16:1e:29:e7:8b:cd:26:5b:ac:55:40:96:
                    8d:52:99:7e:5b:23:af:02:5e:f9:0a:b8:d8:7a:34:
                    90:2a:88:2c:b0:60:21:0c:c9:96:a9:be:ce:bf:8d:
                    c2:a3:27:34:97:c1:03:75:eb:a5:41:0e:67:6e:ee:
                    dd:75:4b:77:99:0a:bb:28:33:f8:71:25:f4:10:fa:
                    0c:a4:90:70:c3:5d:66:e6:a4:d6:c1:05:d2:6f:fe:
                    13:b5:f6:b6:a7:a5:80:63:1b:7d:60:53:b6:62:ea:
                    46:cc:c9:f1:d7:bc:5b:89:bd:56:d8:d2:81:2f:8a:
                    7e:08:04:ad:5f:29:e7:b1:e1:15:c9:fb:e0:21:c1:
                    6f:03:c6:a2:78:f0:04:cc:91:63:1c:56:85:64:fa:
                    b8:7d:cb:2c:9e:57:47:18:92:89:e9:6d:36:2d:e7:
                    08:59:94:18:55:0d:18:0d:1b:08:46:15:24:c4:c0:
                    38:47:ae:d0:e8:b0:3a:02:e1:15:ee:b6:19:e7:9d:
                    99:67:dc:ca:d8:6b:be:fc:1d:a8:11:ac:07:67:7e:
                    8e:87:72:a3:c4:c0:b3:79:93:c7:51:ad:41:d1:a1:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:62:A6:22:CE:68:4E:68:78:45:2D:D6:A7:B3:14:4C:D0:70:D7:55
            X509v3 Authority Key Identifier:
                keyid:AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:a4:0f:d3:61:23:60:99:3d:19:c7:82:6f:0e:81:72:73:
         55:fa:b9:39:61:65:92:56:c8:d3:f5:af:66:85:11:63:d6:cd:
         26:d9:d1:f1:58:8f:ac:9e:04:73:c2:27:ce:57:0c:74:e4:9e:
         64:5d:96:ab:f3:b9:01:f3:08:c0:79:bf:05:c9:dd:76:cf:0b:
         f6:1c:a7:cb:1f:60:ab:1c:90:07:b3:22:4d:15:96:6f:94:98:
         c7:9f:cd:de:86:8e:f8:a9:f5:27:2f:6a:3c:55:e6:6a:cf:db:
         05:3a:88:65:52:29:a6:b4:3e:de:57:6f:52:86:a7:5b:d5:31:
         3e:15:db:49:29:6d:f1:f8:af:04:b6:76:f7:07:f0:64:b4:55:
         c1:6a:3b:2f:15:4d:c9:19:1e:b9:6c:a8:8f:9b:df:34:1d:e2:
         1c:bb:aa:17:7c:ea:b5:aa:f8:d4:77:ce:a0:f9:82:cd:b2:30:
         9c:61:24:46:e1:e9:a2:14:ec:cf:b7:ba:58:b8:53:2a:67:36:
         3c:c0:b2:18:c8:6e:b4:85:6e:fc:67:82:92:b4:8c:1d:0f:71:
         e1:21:0d:09:06:f3:6c:e0:60:f5:56:46:5b:cc:47:5e:e5:78:
         5f:98:7e:7b:f2:a3:08:6c:bc:b2:d8:a9:8e:6c:51:9c:52:82:
         41:58:e2:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 10:12:57 2026 by rpki-client