Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa
File:                     AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (raw, json)
Hash identifier:          jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=
Subject key identifier:   05:7F:51:2E:0D:00:0B:54:E2:A9:77:65:4F:34:01:79:8C:05:D0:F2
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0214
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:04:49 +0000
ROA not before:           Sun 03 Aug 2025 04:10:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.112.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Aug  3 04:10:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47fc1-de03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:45:c9:32:34:bb:77:e1:b6:0e:35:03:ff:
                    73:33:5f:02:a5:42:1a:d1:14:da:20:3b:4b:1c:ec:
                    20:33:f3:d3:4d:90:64:17:19:b3:74:29:1d:a2:d7:
                    bc:c5:df:82:ac:8a:3c:96:ba:39:05:57:6f:5e:92:
                    dc:75:c8:7e:c4:9c:05:bb:89:6f:11:c0:18:9c:11:
                    bf:06:05:b2:e2:3e:31:53:f7:0b:b9:62:8f:87:a1:
                    26:f1:bc:80:19:e2:ff:f8:51:ea:25:5a:53:e6:e8:
                    06:6b:36:aa:6e:37:43:0b:9f:71:91:33:31:85:1c:
                    20:d5:c7:3d:f2:93:22:95:68:db:37:2c:69:9f:60:
                    68:4e:0a:17:e3:04:b1:1f:ad:70:2d:bf:d7:00:43:
                    25:0f:9a:3a:a6:ed:df:58:98:2d:7b:01:87:a8:72:
                    f1:35:f5:e2:58:1d:9b:81:c1:2b:7c:1e:a9:42:bd:
                    67:42:a5:a4:0b:78:d9:e1:a4:21:fc:d5:f7:06:6c:
                    9f:24:41:3d:7e:7d:5e:c7:b0:76:98:3f:2d:fa:f9:
                    df:06:10:d3:17:99:de:96:ad:8a:9b:7b:61:93:3d:
                    38:0a:a4:68:ca:58:c6:02:60:23:0d:94:0f:5a:c9:
                    c6:f2:5c:00:af:f9:34:9b:a8:ed:ba:f5:84:34:ae:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7F:51:2E:0D:00:0B:54:E2:A9:77:65:4F:34:01:79:8C:05:D0:F2
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:2e:d7:f2:cb:b2:ff:08:ab:f8:c4:75:bf:fe:2e:98:ab:
         9f:09:de:4c:64:7c:e6:72:60:1b:ae:67:80:7b:12:f5:fc:f0:
         da:64:7a:a1:3f:a9:46:83:ba:eb:e7:d2:4b:33:54:74:33:a0:
         cd:77:32:a1:6e:9a:1b:94:61:02:69:85:3d:b7:72:31:41:79:
         64:36:31:f1:81:9b:7c:b3:bc:5f:67:d0:b1:b9:e4:36:13:f1:
         53:cf:75:15:b4:f1:dd:2c:2a:97:66:6c:e5:1c:3d:e8:84:ae:
         e6:18:9b:a6:9d:b1:92:93:c1:01:22:a9:d3:99:07:aa:c0:9c:
         2a:1c:47:a9:d6:5b:fa:3e:51:d0:a5:da:4f:8b:b5:72:e4:97:
         4f:6a:ad:1a:5f:85:a3:49:68:51:38:df:2d:81:b1:35:99:6d:
         84:18:57:4a:54:d6:a1:20:6b:4a:ac:6a:08:e5:07:3f:b5:a3:
         41:78:71:f9:24:14:a9:19:1a:41:e3:0a:fc:40:dc:9a:3d:55:
         e7:5f:88:d1:6b:46:b9:02:79:98:da:54:88:77:96:84:db:4e:
         cf:83:d2:2c:b1:32:55:19:14:b4:0b:ac:18:b2:e5:9d:34:64:
         31:c9:bb:b3:61:3a:af:e3:ed:fa:c6:5c:ac:d9:f9:86:82:33:
         e7:b0:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:14:35 2026 by rpki-client