Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa
File:                     205AD1805C8A11F09D065A67C4F9AE02.roa (raw, json)
Hash identifier:          jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=
Subject key identifier:   13:13:44:35:E7:B7:F9:09:89:41:FD:1B:5E:51:56:0B:B8:01:47:32
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03F2
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:46:15 +0000
ROA not before:           Wed 09 Jul 2025 06:01:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.26.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 00:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jul  9 06:01:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48977-47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:16:02:2a:ed:6d:d2:53:de:43:1e:eb:13:
                    ef:b1:98:23:60:9d:90:1a:33:08:b8:0a:40:7b:cc:
                    96:b3:6d:7f:92:3e:88:b9:2f:7a:11:96:4b:fe:c7:
                    0a:14:3d:3c:3e:71:e5:aa:f8:a3:06:52:e3:63:d5:
                    59:e4:17:00:30:41:dc:82:5a:a4:ba:93:f1:2c:f4:
                    cd:2e:87:4b:c6:86:68:9f:34:b4:36:78:eb:64:b2:
                    f5:3a:44:0e:71:f8:bf:8c:07:40:38:cf:6c:55:31:
                    df:a5:49:c9:bf:2e:af:9a:8f:78:46:a5:d8:00:dd:
                    03:43:e6:34:a0:3a:8b:47:e4:31:7b:bb:f3:6c:61:
                    19:a5:97:62:98:0d:d0:f7:cc:14:62:60:6f:fe:2c:
                    e6:25:32:07:0f:00:26:c0:ef:de:f1:0a:37:fd:a9:
                    ed:6b:4d:0c:d5:21:e6:5f:8b:a2:27:4e:26:eb:af:
                    81:4f:53:2d:a3:9c:ec:d7:33:6a:5b:69:f8:1f:b3:
                    ec:d1:a2:a8:ce:0c:8d:fa:45:01:32:eb:32:2a:4a:
                    0b:2e:9e:44:03:95:70:42:e3:e0:d9:c3:6f:95:9e:
                    b3:ec:13:56:dc:a8:0a:a9:9e:dd:3c:4a:81:ae:98:
                    ed:d8:55:79:73:47:92:28:f6:7d:33:39:5c:02:ce:
                    3d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:44:35:E7:B7:F9:09:89:41:FD:1B:5E:51:56:0B:B8:01:47:32
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:76:c5:6e:35:5b:89:f6:b0:cd:7c:f7:95:d6:17:f2:44:
         ba:be:2b:78:15:83:20:9d:2c:fc:0d:f5:aa:ab:00:6a:13:fb:
         5c:db:a8:62:9f:ef:c4:2c:53:2b:12:14:22:8d:e7:d9:d8:3e:
         fa:0c:fa:df:6c:ee:62:d3:a4:5e:ca:38:f2:e9:8b:aa:1e:c1:
         4a:d4:60:79:c1:59:69:cc:3d:0b:fa:52:7c:64:18:9c:85:1f:
         43:a5:18:99:2e:80:4f:b5:60:59:d4:3a:12:21:0b:9e:2f:b1:
         12:3f:ef:42:14:50:10:90:f2:39:97:60:d2:b9:37:fa:81:f8:
         18:ed:1b:68:99:3f:98:44:af:fa:86:cb:48:5e:de:51:93:9c:
         85:cf:14:03:e9:ab:aa:97:2d:6f:e7:88:7a:7c:b7:b7:c4:36:
         2e:c9:79:06:8a:d0:38:3f:de:5d:15:3c:94:23:11:03:40:7b:
         a6:d8:56:c7:86:77:00:e6:bc:ad:66:2c:bd:72:b9:7e:fe:b2:
         09:cf:34:6f:29:ae:16:60:86:b2:e1:a1:98:4f:b1:f9:46:64:
         60:b0:c3:79:d6:93:8e:22:28:99:b4:5d:15:4a:2d:23:b1:69:
         96:79:d8:3c:92:37:f7:e9:41:0c:74:8b:9c:16:c9:79:f1:ff:
         36:d6:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 15:53:17 2026 by rpki-client