Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa
File:                     267FE3681C4B11F082276911C4F9AE02.roa (raw, json)
Hash identifier:          7yw2rVB0AyM3xlLHChI+9eH6QNQqAwz/hS/gm7AplhM=
Subject key identifier:   D8:FD:BA:89:58:91:D8:43:80:71:C4:E9:31:9D:9E:EB:84:6E:D2:98
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       027B
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:36:46 +0000
ROA not before:           Fri 05 Dec 2025 01:11:03 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        43.224.151.0/24 maxlen: 24
                          103.43.174.0/24 maxlen: 24
                          103.43.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: Dec  5 01:11:03 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5926e-263f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:1c:06:6c:f0:5d:85:d3:95:c6:b9:d9:11:
                    ca:09:30:66:41:6a:24:d1:e6:83:af:36:82:cf:4a:
                    71:e2:0b:17:4b:ac:84:f6:8c:75:52:f5:d9:f1:8d:
                    90:af:16:fe:41:06:32:25:31:82:93:77:3c:11:56:
                    82:33:f5:d0:d0:f9:43:0a:f2:7b:27:8c:bf:cb:ac:
                    89:04:a9:97:ce:d9:c0:b2:4b:23:eb:d7:7c:1d:53:
                    59:a8:72:21:fc:1b:63:ca:51:12:fd:1c:bd:82:4b:
                    a9:9d:1d:24:e0:f4:52:16:89:d2:7d:54:e0:2c:e6:
                    8f:97:d3:e3:79:8a:ae:91:18:64:e0:88:0d:57:96:
                    32:4d:21:b0:75:95:ae:00:65:91:27:a3:9f:1b:ef:
                    27:aa:8c:6f:6f:b5:c8:78:26:bd:82:23:b8:c3:29:
                    65:cf:e1:0b:e8:17:93:2a:9f:55:6e:86:51:2e:55:
                    5c:dd:2b:d7:fb:64:e1:1a:6d:3d:67:1e:b1:40:1c:
                    5d:af:36:5d:52:ac:f4:87:f2:6a:f1:42:24:1f:97:
                    eb:1d:dc:85:25:47:0c:05:58:a7:5e:c5:e7:33:ff:
                    17:a5:91:0e:68:7c:06:f6:4e:1c:44:60:a4:1c:86:
                    3f:6d:31:be:18:c3:2f:35:29:64:e7:00:70:5b:c6:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:BA:89:58:91:D8:43:80:71:C4:E9:31:9D:9E:EB:84:6E:D2:98
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.151.0/24
                  103.43.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:db:ad:db:11:55:6a:35:8e:91:fe:96:2b:f1:c9:64:ca:
         cc:44:7c:cc:0c:36:42:3d:13:dd:5a:15:80:23:03:b6:3f:32:
         df:4b:80:39:59:96:31:54:ac:03:2f:c8:8a:ba:52:64:f4:d3:
         0e:c9:44:ef:cf:af:48:ea:c6:fa:c3:51:6c:8f:41:22:0a:de:
         03:fb:83:c6:fb:d1:50:53:a5:21:df:f0:89:8f:91:65:06:3a:
         64:9d:36:a0:60:5c:7a:c7:f6:75:99:32:33:d8:56:b7:17:4e:
         22:ad:b8:2b:9a:4c:cf:1f:a7:66:d3:53:d7:90:4c:4b:ed:0a:
         5a:e2:2d:0f:b5:33:44:6d:bd:77:3f:b6:0a:2c:7c:86:c9:20:
         b2:ad:42:3a:14:b8:a8:72:eb:76:b6:1e:b0:bf:0a:38:39:8a:
         a4:bb:01:fa:7c:6e:81:bc:49:c9:38:0e:4d:41:c7:49:57:69:
         98:d3:90:a7:c4:42:16:c5:9d:41:c8:6d:65:55:fb:f3:09:31:
         e4:b9:47:d3:97:39:97:56:63:8d:40:d5:76:ba:f6:db:78:67:
         f8:e4:13:06:57:c0:d8:6a:55:1e:d0:75:9b:a9:a8:54:75:49:
         06:0d:3a:7b:61:19:93:ce:42:39:03:a0:10:67:bc:6c:54:10:
         81:53:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:27:44 2026 by rpki-client