Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/7E0A2AD822E611F1A3C138F6CC833773.roa
File:                     7E0A2AD822E611F1A3C138F6CC833773.roa (raw, json)
Hash identifier:          z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=
Subject key identifier:   03:E3:40:54:21:F5:C8:1E:3B:25:A8:40:18:04:97:A2:80:75:1E:BE
Certificate issuer:       /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial:       0C
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/7E0A2AD822E611F1A3C138F6CC833773.roa
Signing time:             Sat 21 Mar 2026 08:46:48 +0000
ROA not before:           Sat 21 Mar 2026 08:46:48 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     213618
IP address blocks:        103.110.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 08:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
        Validity
            Not Before: Mar 21 08:46:48 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be5af8-2543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:4c:fa:57:c6:1d:17:ce:55:19:8f:f3:b7:
                    47:e7:b0:3c:17:9b:c7:94:8d:d8:32:be:f1:fe:47:
                    20:c0:4c:ca:be:b8:70:ba:de:7b:52:a4:b6:a2:dd:
                    f7:6c:44:ca:fb:a6:8a:a3:b7:ca:a8:25:cd:a3:61:
                    23:3e:99:d3:9d:f8:9a:62:08:e1:5f:56:b4:7e:4c:
                    fb:e1:7c:5b:d5:d1:43:22:87:2e:96:5a:c0:91:aa:
                    eb:0c:60:63:3b:6f:da:85:2f:59:32:c4:7c:4e:c8:
                    67:57:41:e4:e4:2e:74:32:33:3c:07:1e:d7:c3:30:
                    18:62:9a:64:9c:a2:7b:6d:9a:ca:6d:af:be:50:95:
                    54:31:a1:d6:70:64:a8:5a:8d:e0:f7:f2:1f:5d:53:
                    0f:18:65:72:6a:9d:70:2e:08:48:41:36:a3:7f:8a:
                    73:9b:89:8e:9b:dd:61:41:72:de:ba:37:24:91:56:
                    32:38:4b:85:c9:1e:73:ec:7b:97:81:a4:cb:f2:db:
                    58:1e:73:54:1b:51:61:0b:62:20:03:3c:2b:92:f2:
                    4e:49:ca:f6:ef:4f:55:0e:f1:eb:e7:87:4e:3f:29:
                    ad:77:1b:31:bb:af:bb:16:e2:a2:1c:8a:1c:0d:20:
                    eb:06:bb:0d:c2:db:28:12:d8:be:f1:2e:c4:8a:df:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:40:54:21:F5:C8:1E:3B:25:A8:40:18:04:97:A2:80:75:1E:BE
            X509v3 Authority Key Identifier:
                keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/7E0A2AD822E611F1A3C138F6CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:19:65:74:af:d7:41:3c:19:dc:06:75:ec:9e:f4:a3:7b:
         2c:a6:56:dc:b2:8c:18:f3:2d:8b:de:4a:0c:7b:01:b0:f5:8e:
         d3:d6:b1:9f:a9:6b:f0:df:0f:c4:a0:ad:39:4d:47:86:be:a2:
         41:5c:5a:54:8d:65:76:7a:33:6d:b8:74:3f:c6:79:b6:2d:08:
         78:90:80:04:42:86:66:f7:99:e2:d7:32:ee:43:ea:9d:4d:31:
         e7:d1:4f:13:50:c9:45:c8:d7:c7:02:84:21:0b:06:53:01:c8:
         f2:88:4f:6e:5c:95:32:cd:11:5d:22:3e:87:04:9d:fe:2a:d7:
         16:45:76:d2:6d:eb:b7:55:57:f1:5f:07:80:9e:fd:fc:53:48:
         0f:f6:17:f6:03:ac:de:aa:f6:c1:03:3d:4f:56:67:83:34:af:
         4e:78:d1:7c:e0:09:69:8b:0a:13:77:e5:4b:08:bb:28:f9:26:
         2b:9c:2d:b0:b6:5a:0f:1b:44:a0:6d:9d:9c:5c:25:d6:7e:f3:
         bb:8e:27:7c:39:b8:0f:f4:a3:3b:13:ff:7a:0d:62:a2:2d:bf:
         2e:e1:c9:00:93:bd:a9:cc:82:4a:c8:20:7c:a4:f2:fe:27:57:
         a4:65:6a:4b:65:86:29:82:fe:eb:69:a5:43:6a:24:cd:be:9c:
         72:9e:05:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:18:08 2026 by rpki-client