Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa
File:                     967D5ED65E0811EFBBB08B84C4F9AE02.roa (raw, json)
Hash identifier:          iJJvotNIy7UqNe4aMnim05SLAfqufCe73zAtzOftdsM=
Subject key identifier:   DA:F0:7F:E9:E5:AF:3D:D8:08:91:4C:44:B5:0A:40:9D:4C:A0:4B:A0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DAA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:14:55 +0000
ROA not before:           Thu 28 Aug 2025 14:52:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131363
IP address blocks:        103.9.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23978 (0x5daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60bdf-65dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:2e:15:98:47:3e:b8:68:ef:52:db:83:69:
                    07:89:b5:a3:79:14:06:8b:98:59:84:38:ee:f4:88:
                    0d:0a:9d:c7:9e:90:7f:97:3e:06:93:e2:65:b1:68:
                    fd:0e:59:e5:3e:26:20:67:e9:7f:06:75:70:ca:d1:
                    1d:33:5c:8e:2e:77:81:3a:6c:7a:e7:ed:82:d0:77:
                    04:44:28:a8:3d:e9:40:ba:ce:d0:24:2e:44:97:bf:
                    b9:b9:61:87:48:38:a6:49:26:19:a7:8a:5c:0b:13:
                    4f:51:72:4a:19:c9:e7:5c:4e:0c:ee:5b:2b:9b:8f:
                    47:81:64:72:d7:d9:12:04:a9:70:4d:b6:da:0a:01:
                    04:b2:33:bd:0d:55:d3:e7:92:5d:a9:65:5f:0e:85:
                    26:03:d9:96:14:41:28:2e:c3:28:42:e2:b4:a2:2d:
                    9c:f2:78:f5:a1:f0:7b:7a:c8:31:f4:9f:b1:a0:62:
                    e6:2f:d5:e9:6b:40:9c:52:69:a6:3f:ce:f7:49:a9:
                    ee:dd:37:e8:48:46:96:81:d0:97:68:b0:98:3a:16:
                    cf:6c:85:a9:7f:66:23:56:e2:38:0a:70:94:2a:fc:
                    4a:db:1c:02:42:8c:5b:38:0e:26:88:68:a1:83:ce:
                    b4:d2:84:84:0f:44:51:3f:3f:e3:61:6c:e9:9a:af:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:7F:E9:E5:AF:3D:D8:08:91:4C:44:B5:0A:40:9D:4C:A0:4B:A0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:c0:aa:cd:2c:ad:ca:ce:34:29:18:01:9b:3e:7e:1f:d7:
         94:dd:40:45:60:a6:20:4e:46:6e:af:97:21:0f:8c:af:48:5e:
         6c:86:d8:b6:df:73:90:52:88:6b:ff:a9:6c:4c:62:d5:78:56:
         5b:a4:d6:be:14:45:eb:68:68:2b:14:e6:35:21:6b:9a:74:6f:
         69:4d:0a:26:a5:d6:60:db:f3:fd:b0:d6:0e:00:0b:58:a7:ba:
         ea:4f:8d:58:f1:c9:b3:f9:e1:df:3d:ea:3a:5f:b3:c1:62:ae:
         dc:24:e8:c4:ac:80:ba:f4:44:14:9d:ba:05:27:63:e0:3d:ac:
         1e:d1:99:63:21:b2:9f:06:da:23:f1:b0:95:f3:a6:ad:f8:7f:
         5f:f6:d6:e4:5a:b4:a7:01:35:06:7c:e5:74:3c:56:8d:56:23:
         ce:38:02:dd:4f:69:5b:e9:94:9a:28:3c:23:f3:c1:c5:45:dd:
         10:fa:a2:3d:e7:a8:a5:e1:20:96:6e:c4:4e:6a:d4:04:49:f7:
         2e:2a:9e:99:03:f4:58:a1:89:a6:a0:16:e5:38:be:0f:f0:3b:
         50:a7:30:7f:9c:ae:1d:09:83:8b:d3:95:09:48:d8:73:25:5f:
         a7:e0:27:51:4f:74:e1:c1:d3:a8:bb:5b:9e:dd:eb:a9:9d:8e:
         33:45:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:13 2026 by rpki-client