Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa
File:                     04B0D250076211EFB14D3B12C4F9AE02.roa (raw, json)
Hash identifier:          YBbzvVhuDe0JBEniZRZQfShMx+qsENyrYUEkIrWxQCw=
Subject key identifier:   72:BC:CF:87:01:81:76:EE:85:15:D6:F0:FC:47:4F:6E:EB:CD:58:44
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       0175
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:52:31 +0000
ROA not before:           Fri 23 May 2025 04:56:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     917
IP address blocks:        103.23.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 03:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: May 23 04:56:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a42f-cb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:bb:96:cb:c3:36:d9:11:18:9b:d6:83:6e:
                    2e:67:54:14:75:93:6d:8d:94:bd:fd:2b:0a:c2:4d:
                    34:46:28:f9:b4:38:1b:4f:53:76:8a:61:f1:61:e1:
                    31:fa:50:44:ce:97:7c:8a:9b:6b:a3:aa:c9:44:9e:
                    b5:78:05:2b:cb:00:a4:3e:b5:1d:af:a8:85:f5:76:
                    14:e6:ff:26:37:f0:f8:94:4c:82:1f:0c:05:d2:af:
                    8a:9b:5d:5e:62:6a:0e:c6:e5:02:12:ce:12:d3:10:
                    5d:9e:d4:55:ca:8d:6b:c8:8d:30:17:4b:7c:35:6c:
                    41:b5:de:84:36:03:1c:d7:b3:c4:40:ac:51:ed:9b:
                    7e:59:1e:d2:64:ae:f9:6c:ba:bf:15:e8:1f:cf:e7:
                    11:4b:b6:6e:28:27:c4:3e:1e:5a:dc:e3:c9:d5:93:
                    0f:9c:3e:01:4e:62:6f:9f:db:5b:49:9e:1f:c7:e7:
                    35:ce:4f:10:7d:d6:69:3d:b5:29:8a:17:09:6e:ad:
                    e2:06:44:ff:49:b6:56:8c:0a:44:d6:e8:be:ae:29:
                    c4:8f:b5:73:3e:a6:9d:4b:7c:9a:0e:a1:1f:7d:d4:
                    1f:0f:ba:bb:16:d1:c3:6a:df:ba:2d:34:1d:9e:c4:
                    6a:9a:e1:80:9d:5d:44:9b:a8:3a:ff:68:e6:b7:c3:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:CF:87:01:81:76:EE:85:15:D6:F0:FC:47:4F:6E:EB:CD:58:44
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:de:2a:9b:d5:ab:dc:fd:41:bb:a7:c4:da:fd:c5:54:3f:
         12:ad:90:4e:57:9f:3e:68:ff:33:c6:23:2a:db:e7:b1:d5:bd:
         b4:36:dd:82:98:63:a9:e3:d7:39:6b:64:7e:e3:39:0e:8b:9a:
         46:73:53:64:da:5f:43:c6:4a:56:ca:70:a1:03:65:42:f3:0d:
         52:5e:93:cd:6c:6e:a0:ec:b9:87:a2:b2:e9:20:ba:06:29:70:
         13:0b:1f:25:48:2e:0f:42:ce:c2:37:cf:df:51:59:b9:c2:6a:
         cb:b2:96:9e:c7:4a:38:e2:5c:14:fe:23:6f:03:db:92:50:eb:
         a0:b4:76:a0:f8:da:84:50:5d:ed:0a:ab:06:69:6f:47:85:5d:
         26:d8:be:8b:f3:04:3a:71:df:d0:7a:f8:9f:a1:67:05:2a:bc:
         21:92:a4:ff:10:8b:8d:59:4e:d1:a8:f2:40:93:f7:7b:6e:a0:
         92:26:aa:c6:b2:a0:96:ea:b1:28:a3:1e:78:e9:d7:11:a5:74:
         65:13:56:c9:48:57:ea:61:95:a3:be:17:ca:d6:a6:4d:ab:6f:
         a7:ab:59:5a:8d:9d:34:2d:77:9b:eb:a3:e1:1b:50:01:cb:90:
         d3:69:0a:19:b0:90:42:69:b3:a4:eb:98:01:ef:7b:bc:bc:05:
         cb:c5:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:25:28 2026 by rpki-client