Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0023244173B11ED8153E75CC4F9AE02.roa
File:                     A0023244173B11ED8153E75CC4F9AE02.roa (raw, json)
Hash identifier:          kWqmzZA1wNvzWtZsF3eO8J/ds7IWl/519MieA2bYGcs=
Subject key identifier:   FE:D2:23:7D:15:B8:2E:C7:AB:3A:3B:04:EF:46:11:F5:8B:9E:C8:23
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F2E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0023244173B11ED8153E75CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:21:22 +0000
ROA not before:           Thu 28 Aug 2025 14:58:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63766
IP address blocks:        103.78.93.0/24 maxlen: 24
                          103.78.94.0/23 maxlen: 24
                          103.216.120.0/22 maxlen: 24
                          157.119.244.0/23 maxlen: 24
                          2001:df6:1e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24366 (0x5f2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:58:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d62-90e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:6d:93:e0:41:ae:5f:70:b2:ac:ab:21:91:
                    f7:9e:99:8e:07:f2:cb:b4:48:c5:2e:41:a8:d7:ba:
                    d2:7f:b8:86:86:9a:9c:c9:2b:1d:db:24:6a:97:15:
                    92:8a:ca:c4:10:4c:a6:ad:c0:84:ca:99:08:52:2e:
                    40:f4:63:91:d3:fd:01:5a:e2:4b:a7:e6:41:f0:4e:
                    55:7d:be:04:a6:2e:0a:0f:d2:60:93:8d:e2:8b:c4:
                    75:66:23:12:20:24:f8:36:13:50:e1:f5:34:f0:85:
                    bf:a3:0f:ba:85:31:56:66:69:bf:52:8b:de:32:11:
                    cb:7b:f8:ae:7a:21:66:38:20:ca:14:0c:00:f4:75:
                    cd:4b:f4:58:8f:c7:9c:93:e9:13:16:c3:f7:2e:70:
                    7f:d2:8a:38:19:ab:92:d5:41:5d:4c:46:18:cb:c5:
                    09:ea:66:8a:fc:21:99:9c:22:d0:8d:b7:b2:8e:5d:
                    01:7b:63:5c:d1:34:e3:c6:94:ef:d2:05:1b:f1:48:
                    f4:59:15:2f:47:52:dc:c5:94:a7:65:6b:66:22:aa:
                    2d:9e:38:aa:da:09:46:3f:68:15:1f:b0:21:37:15:
                    5a:d6:e0:87:bd:75:8d:cc:d4:4f:62:16:e1:a0:30:
                    a4:a2:48:f2:ee:98:39:4d:71:5a:33:d5:83:cf:30:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:23:7D:15:B8:2E:C7:AB:3A:3B:04:EF:46:11:F5:8B:9E:C8:23
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0023244173B11ED8153E75CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.93.0-103.78.95.255
                  103.216.120.0/22
                  157.119.244.0/23
                IPv6:
                  2001:df6:1e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:69:f3:e4:8f:7c:ea:aa:fe:d3:d7:09:42:76:4a:ac:b1:22:
         f6:1a:af:cc:43:cc:57:96:43:eb:7c:da:4e:dd:5e:04:41:89:
         c8:d2:97:6c:5c:6a:24:f8:3e:5c:96:84:fc:01:d0:5d:c0:33:
         e0:0f:65:a5:40:66:c7:40:56:59:35:7f:76:6a:37:55:83:ba:
         3a:ab:cc:f1:f2:93:50:f7:3d:81:ba:86:71:73:87:52:b0:e4:
         84:60:b7:2e:97:a9:c1:ea:7d:6d:a9:7a:60:68:1c:8b:9c:34:
         16:33:4a:64:f5:17:62:00:1a:2c:03:c5:06:10:e5:86:e1:a3:
         2c:dc:05:ad:04:ef:c7:95:f6:ea:3c:b4:75:8c:67:2d:80:1e:
         c6:57:e1:b0:c2:9a:63:c8:d2:72:ca:4e:e2:8c:6b:d6:0f:77:
         f2:09:c5:76:c0:5c:63:04:f8:86:8c:81:44:73:71:09:0c:79:
         e3:2e:cc:2c:5a:1e:72:d3:73:93:2c:27:c3:c1:81:70:1a:d4:
         39:4e:28:3e:38:df:65:a9:19:6a:ab:97:42:52:da:c6:4f:4c:
         72:50:e9:59:c9:4a:6e:7b:37:6e:bb:0e:92:ec:28:f8:95:39:
         90:ff:9f:09:55:13:b6:a9:ba:f5:8b:0b:6e:74:0e:ba:28:2b:
         f5:c8:e8:e2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgICXy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1ODEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGQ2Mi05MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTltk+BBrl9wsqyrIZH3npmOB/LLtEjFLkGo17rSf7iGhpqcySsd2yRqlxWS
isrEEEymrcCEypkIUi5A9GOR0/0BWuJLp+ZB8E5Vfb4Epi4KD9Jgk43ii8R1ZiMS
ICT4NhNQ4fU08IW/ow+6hTFWZmm/UoveMhHLe/iueiFmOCDKFAwA9HXNS/RYj8ec
k+kTFsP3LnB/0oo4GauS1UFdTEYYy8UJ6maK/CGZnCLQjbeyjl0Be2Nc0TTjxpTv
0gUb8Uj0WRUvR1LcxZSnZWtmIqotnjiq2glGP2gVH7AhNxVa1uCHvXWNzNRPYhbh
oDCkokjy7pg5TXFaM9WDzzA3mwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFP7SI30V
uC7Hqzo7BO9GEfWLnsgjMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTAwMjMyNDQx
NzNCMTFFRDgxNTNFNzVDQzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAg
BAIAATAaMAwDBABnTl0DBAVnTkADBAJn2HgDBAGdd/QwDwQCAAIwCQMHACABDfYe
ADANBgkqhkiG9w0BAQsFAAOCAQEAsmnz5I986qr+09cJQnZKrLEi9hqvzEPMV5ZD
63zaTt1eBEGJyNKXbFxqJPg+XJaE/AHQXcAz4A9lpUBmx0BWWTV/dmo3VYO6OqvM
8fKTUPc9gbqGcXOHUrDkhGC3Lpepwep9bal6YGgci5w0FjNKZPUXYgAaLAPFBhDl
huGjLNwFrQTvx5X26jy0dYxnLYAexlfhsMKaY8jScspO4oxr1g938gnFdsBcYwT4
hoyBRHNxCQx54y7MLFoectNzkywnw8GBcBrUOU4oPjjfZakZaquXQlLaxk9MclDp
WclKbns3brsOkuwo+JU5kP+fCVUTtqm69YsLbnQOuigr9cjo4g==
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:13 2026 by rpki-client