Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EA9A11EA214C11F1A100880B383D8C67.roa
File:                     EA9A11EA214C11F1A100880B383D8C67.roa (raw, json)
Hash identifier:          eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=
Subject key identifier:   7E:15:91:B8:4D:FD:CE:42:BC:23:B6:C2:08:FE:C0:97:64:F1:53:8A
Certificate issuer:       /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial:       0D
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EA9A11EA214C11F1A100880B383D8C67.roa
Signing time:             Sat 21 Mar 2026 08:46:50 +0000
ROA not before:           Sat 21 Mar 2026 08:46:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     214025
IP address blocks:        103.110.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 08:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
        Validity
            Not Before: Mar 21 08:46:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be5afa-82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:36:46:df:7f:5c:3d:b5:e8:13:52:17:e7:
                    f9:eb:20:47:24:de:66:da:e0:40:18:ef:e3:aa:8f:
                    13:96:eb:e9:12:34:e9:1f:15:8d:0a:0e:9a:13:76:
                    43:7c:42:2f:d9:f7:6c:69:15:f0:37:d7:1c:4e:b8:
                    2e:6f:29:37:6b:bb:3c:b3:0a:19:2a:d4:92:b7:05:
                    d8:ac:48:b8:bd:82:1a:66:b6:24:d1:3a:4a:de:eb:
                    d1:21:c4:78:62:b3:dd:c8:17:66:80:0d:b2:b8:22:
                    9a:33:03:b5:5d:5f:48:10:e3:ed:d8:2d:93:7c:8e:
                    3d:4c:a6:42:c1:ac:97:1b:1a:b5:9c:fa:bf:df:6a:
                    4f:a6:df:ad:8e:06:f8:47:13:6b:70:58:89:46:8f:
                    a4:96:28:c5:43:a4:fc:99:14:61:41:0a:72:5a:e3:
                    ff:49:92:63:7c:0d:6b:3e:a9:22:a8:2e:5d:34:ea:
                    c8:f2:aa:3d:9f:05:93:31:7a:ad:5d:dc:dc:1d:9b:
                    02:d0:d2:07:2c:56:65:31:c0:71:be:76:27:2e:2e:
                    c0:8b:6c:c3:45:09:7a:06:fc:ec:4b:23:21:1b:06:
                    29:58:0e:21:25:97:9e:ef:88:6d:e6:b1:4c:0b:78:
                    aa:af:b3:a1:e6:89:ea:88:5f:e4:2f:74:f3:65:dc:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:15:91:B8:4D:FD:CE:42:BC:23:B6:C2:08:FE:C0:97:64:F1:53:8A
            X509v3 Authority Key Identifier:
                keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EA9A11EA214C11F1A100880B383D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:39:1b:6f:5c:3c:5e:7a:bc:7f:1d:70:60:95:a0:e9:80:
         53:8f:13:d1:ad:8f:fc:1e:00:59:dd:0b:84:44:74:5a:3a:0d:
         74:fa:e6:21:dd:fa:26:0e:88:76:82:37:a5:bc:11:cc:21:a1:
         5a:7a:78:c8:b8:c5:b5:ca:60:9b:e9:a0:bf:ad:cd:20:e9:c7:
         d6:46:41:b2:06:a8:9b:52:3d:5d:72:8b:d0:51:4f:f6:bb:ed:
         60:c6:d2:1c:54:22:54:f8:be:1c:09:97:13:9b:de:31:af:07:
         a3:15:39:76:7a:d2:27:32:ef:42:18:48:74:2f:92:57:ff:6a:
         96:ab:ca:13:c5:8e:dd:11:dc:16:e0:bc:bd:f6:c8:df:98:ed:
         c1:03:40:2c:43:e6:03:82:aa:75:39:eb:f7:8e:0c:14:82:43:
         b5:0e:88:e7:ba:42:7f:78:1a:ba:e7:db:68:cb:57:ab:41:62:
         c5:8a:d6:11:c1:2b:8e:8d:65:14:21:f0:88:48:63:03:dc:ae:
         90:64:74:fa:c2:8f:3a:ea:35:db:6a:da:be:84:4a:fd:51:5a:
         88:24:e7:60:5c:3e:a5:7b:6a:5d:18:29:2e:d6:e4:4e:22:73:
         49:f9:91:b7:a3:79:11:aa:96:94:7d:d5:64:d7:49:35:bd:57:
         e9:0d:09:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:00:23 2026 by rpki-client