Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
File:                     AE14DBAA997711EAB12AD74CC4F9AE02.roa (raw, json)
Hash identifier:          guZuB0dXyOc4/gAv+AWXzPZOYx7scwoTWZS6jSL3120=
Subject key identifier:   03:B7:0F:70:F7:AB:01:C4:7C:D7:F8:EF:91:E3:55:F3:9D:F9:B6:BD
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0EA9
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:40:28 +0000
ROA not before:           Sat 02 Aug 2025 18:27:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134963
IP address blocks:        103.141.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3753 (0xea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Aug  2 18:27:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5934b-2c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:0f:4e:4c:70:39:95:d3:76:d0:37:e1:3a:
                    2d:ee:bf:fd:ef:a5:f9:54:48:ca:1a:09:e3:be:0c:
                    a0:2a:15:6c:31:6c:b0:14:ad:58:d1:00:e9:fd:d3:
                    0a:85:3c:2f:29:80:bc:4f:d2:41:76:8b:96:dd:5f:
                    a3:57:d5:4a:da:83:46:cd:da:41:af:09:4f:ea:d0:
                    6c:73:f6:fd:e8:21:b5:a0:31:2c:6b:9a:2c:fe:4b:
                    12:76:71:c3:ef:45:42:33:d4:e2:23:92:eb:3e:1a:
                    f0:b2:f4:26:08:4b:b3:a1:16:23:a5:29:8e:4e:73:
                    e4:34:0f:a3:5a:7e:79:ef:d0:c6:00:3e:93:1a:18:
                    f3:40:df:06:a5:ae:71:0b:ca:a2:83:99:85:47:1f:
                    66:39:d1:b4:28:43:43:3c:21:7f:27:de:c8:0d:c9:
                    d2:87:a1:6a:0a:87:d4:5b:e8:a0:c9:cc:3b:6d:6a:
                    a0:db:bc:36:65:bb:c0:95:00:49:c6:b8:86:93:cf:
                    54:12:c9:48:6f:65:4c:d8:30:89:8c:8b:b6:bc:21:
                    10:e6:0d:cc:02:fd:cf:34:f9:03:48:ad:8e:80:58:
                    31:d4:19:ab:7a:91:56:d4:99:61:57:86:76:73:0a:
                    0e:72:8a:8e:3f:6e:69:fa:f9:68:00:c0:51:7a:11:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:0F:70:F7:AB:01:C4:7C:D7:F8:EF:91:E3:55:F3:9D:F9:B6:BD
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:f6:84:e5:b2:80:53:0c:ab:dd:fd:2c:23:12:63:6c:f8:
         ff:ed:48:59:f5:0e:36:fa:e9:4b:43:dc:7d:db:f0:e9:f3:82:
         41:d4:3f:32:c9:8d:2e:0a:d3:aa:3a:7f:ae:33:67:ea:3d:6d:
         e1:73:e9:e2:4d:6b:15:de:0c:02:7c:cd:8d:4c:d1:ab:c7:8f:
         40:3b:11:1d:51:49:0c:1f:49:c3:eb:67:18:de:e9:8d:1c:f8:
         30:3b:8b:68:d6:19:4f:99:06:ae:df:b1:92:9f:1f:fd:a1:f2:
         23:eb:92:19:ff:18:a0:64:6e:71:1f:56:a0:50:73:8f:db:cb:
         7c:0a:f8:32:30:bf:bc:00:ef:03:15:da:89:b9:3a:c7:36:84:
         46:5b:ff:a1:55:ed:45:0e:14:10:7e:d8:f6:c6:6b:60:56:fe:
         ea:a4:56:10:7d:55:26:3d:3d:35:62:c1:bd:52:36:b2:17:be:
         d3:c8:9a:5f:c1:a0:a7:b5:cc:79:78:09:16:12:1b:c9:a9:94:
         bc:34:b7:9d:44:06:3d:98:a9:20:60:74:89:b4:33:50:a4:95:
         40:8a:30:d4:11:17:ca:54:bb:02:0b:b2:58:c3:fc:f5:61:df:
         91:04:ff:0a:d5:08:2f:d4:7a:eb:3e:c8:5a:d2:c4:9d:4a:00:
         75:84:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:54 2026 by rpki-client