Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa
File:                     C554FDECA0FD11EC924D4461C4F9AE02.roa (raw, json)
Hash identifier:          NU9xYzloZY8PdJazMcLu/Od7ZKjrJEQ/3KPMXvC0doI=
Subject key identifier:   97:14:C5:21:1F:35:F3:23:80:0D:9C:00:CF:95:0D:0B:31:45:3C:ED
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F27
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:21:16 +0000
ROA not before:           Thu 28 Aug 2025 14:58:07 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63755
IP address blocks:        103.68.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24359 (0x5f27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:58:07 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d5c-dbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:86:27:13:ac:33:c3:1e:68:99:fd:08:64:
                    88:b2:b7:6d:99:24:da:ac:3f:7c:23:d4:00:9b:51:
                    35:4f:32:89:78:ab:80:21:6f:d8:81:e9:2c:9f:07:
                    fa:03:c9:cf:d8:df:4c:34:a5:8c:89:6e:e2:12:65:
                    25:44:6a:4b:53:82:83:73:4f:ca:ad:d3:05:ec:d5:
                    2e:45:d0:13:7f:49:05:51:4a:e5:7c:ac:30:42:d6:
                    db:94:16:64:72:b9:4d:b9:95:e1:7f:9b:d9:95:4e:
                    9d:45:00:4d:b4:38:5a:15:5c:9a:06:13:74:77:c5:
                    cb:ed:36:5b:76:34:08:9c:2a:28:9b:78:b1:de:da:
                    be:54:bb:19:ff:02:45:4c:fa:c5:c6:9c:5d:0a:12:
                    3a:fe:50:7d:3a:5f:ce:90:db:04:fc:8e:43:24:74:
                    ec:0b:14:fc:a8:23:e3:61:d5:d2:d8:48:5b:6c:2e:
                    9f:b8:36:d0:6d:9e:be:e1:f5:df:c9:d1:aa:82:59:
                    60:7c:7f:83:0d:25:7b:c6:6c:33:28:ef:59:77:2d:
                    d1:aa:22:39:34:20:97:1e:f2:11:a1:44:a2:70:bc:
                    d7:1e:2d:8f:b4:e5:85:64:03:7d:10:f4:ed:c6:19:
                    4c:29:ab:39:10:e1:99:a7:0b:36:03:a4:6e:ad:3a:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:C5:21:1F:35:F3:23:80:0D:9C:00:CF:95:0D:0B:31:45:3C:ED
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:36:c7:b1:61:7b:ab:c7:e3:27:a7:6a:83:fd:2f:0c:82:c0:
         ed:3d:be:ac:a5:18:5d:74:ee:e0:7d:00:30:d5:87:5e:75:2b:
         bd:39:f0:c0:96:0c:70:b7:11:7c:a5:a3:3d:81:e3:c8:1c:3a:
         80:ef:35:3b:19:6b:ec:f0:29:07:47:92:46:4a:18:27:07:10:
         ea:c9:05:51:7a:07:f7:eb:a2:ee:bf:52:b0:d0:a5:59:7e:47:
         9c:da:65:3f:a4:07:5a:1d:4c:ac:17:b0:a7:21:7c:68:34:40:
         6b:54:a8:3c:5f:fb:fe:3e:c2:c6:f5:e6:cb:cb:36:86:f5:ca:
         26:46:de:9a:8d:e8:a0:4e:5c:1b:9c:d5:a2:16:50:6d:d5:34:
         30:f2:20:1b:0b:be:91:04:f6:4f:14:b1:fa:5a:9e:53:c1:e7:
         44:2f:9b:74:5c:6b:8f:94:d0:38:e3:d1:27:52:d6:aa:6c:1b:
         59:ff:ed:c1:a5:26:c1:c8:2c:08:89:a7:5e:40:e2:c7:f7:23:
         9b:19:ac:00:27:a9:bb:29:ab:18:19:d6:36:b1:88:b7:25:91:
         3d:23:70:78:b0:5f:c1:97:7c:5b:09:42:c2:f3:7d:35:86:4b:
         53:a2:71:3b:50:71:01:0e:d5:ce:3b:c3:64:87:e5:2c:91:76:
         56:29:d0:13
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICXycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1ODA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGQ1Yy1kYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6qGJxOsM8MeaJn9CGSIsrdtmSTarD98I9QAm1E1TzKJeKuAIW/Ygeksnwf6
A8nP2N9MNKWMiW7iEmUlRGpLU4KDc0/KrdMF7NUuRdATf0kFUUrlfKwwQtbblBZk
crlNuZXhf5vZlU6dRQBNtDhaFVyaBhN0d8XL7TZbdjQInCoom3ix3tq+VLsZ/wJF
TPrFxpxdChI6/lB9Ol/OkNsE/I5DJHTsCxT8qCPjYdXS2EhbbC6fuDbQbZ6+4fXf
ydGqgllgfH+DDSV7xmwzKO9Zdy3RqiI5NCCXHvIRoUSicLzXHi2PtOWFZAN9EPTt
xhlMKas5EOGZpws2A6RurTokHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJcUxSEf
NfMjgA2cAM+VDQsxRTztMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzU1NEZERUNB
MEZEMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ0T0MA0GCSqGSIb3DQEBCwUAA4IBAQAzNsexYXurx+Mnp2qD/S8M
gsDtPb6spRhddO7gfQAw1YdedSu9OfDAlgxwtxF8paM9gePIHDqA7zU7GWvs8CkH
R5JGShgnBxDqyQVRegf366Luv1Kw0KVZfkec2mU/pAdaHUysF7CnIXxoNEBrVKg8
X/v+PsLG9ebLyzaG9comRt6ajeigTlwbnNWiFlBt1TQw8iAbC76RBPZPFLH6Wp5T
wedEL5t0XGuPlNA449EnUtaqbBtZ/+3BpSbByCwIiadeQOLH9yObGawAJ6m7KasY
GdY2sYi3JZE9I3B4sF/Bl3xbCULC8301hktTonE7UHEBDtXOO8Nkh+UskXZWKdAT
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:49 2026 by rpki-client