Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
File:                     E43CFABEB67611ECACB17C42C4F9AE02.roa (raw, json)
Hash identifier:          Q70ySqmVrWqXbqywsKojSz1uzuNP5lCm6hnb7zn8qM8=
Subject key identifier:   D2:7A:1B:07:B0:46:2A:74:F3:D6:60:A9:E6:F5:BB:F9:62:24:AC:81
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       09C8
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
Signing time:             Tue 12 May 2026 12:05:46 +0000
ROA not before:           Tue 12 May 2026 12:05:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139009
IP address blocks:        103.152.147.0/24 maxlen: 24
                          103.153.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: May 12 12:05:46 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a03179a-4d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7a:42:7a:5d:3a:75:31:6f:a2:0d:f5:f2:9f:
                    d1:d9:a5:c3:40:65:85:fb:99:3b:90:12:f4:ba:fb:
                    6d:bc:81:f1:cd:d3:4b:ad:2e:4b:6e:f6:2e:8c:90:
                    f4:3d:6e:3f:d6:f3:c6:48:70:4a:f2:1d:85:7d:b1:
                    2f:2b:b5:a1:95:b5:f2:d5:04:f3:d9:22:05:8b:f7:
                    ed:7b:02:72:4e:77:33:ab:23:e3:a9:d9:14:93:9f:
                    6b:13:a5:3c:df:ff:24:2c:71:96:e7:a5:54:85:76:
                    c3:cc:76:b8:d7:3b:00:e4:8c:83:62:c7:b7:8f:60:
                    af:4d:11:7b:bf:35:39:81:06:1c:1e:36:1c:ea:a9:
                    9b:d9:37:1b:bb:14:90:76:82:a7:4c:02:ad:4f:6f:
                    11:c0:b0:90:8c:3a:20:96:cf:ef:75:6c:30:f4:c5:
                    ce:57:a5:9a:60:61:15:c2:ea:15:63:30:7b:2e:98:
                    db:62:c1:1f:18:00:a8:ca:32:cb:a0:9e:d1:82:a3:
                    3a:10:38:ed:90:d5:49:0a:ec:23:70:26:3a:30:76:
                    a7:38:06:4e:6d:b1:c0:a5:f4:e3:0f:c4:3c:82:4c:
                    75:09:62:38:bb:6d:ac:89:08:0f:e3:dd:b9:df:4f:
                    ac:2b:3b:0b:d8:5a:58:9b:0d:75:40:32:d2:66:df:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:1B:07:B0:46:2A:74:F3:D6:60:A9:E6:F5:BB:F9:62:24:AC:81
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.147.0/24
                  103.153.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:95:11:97:67:99:61:80:d5:97:07:6b:9a:e9:d0:9d:7c:cc:
         15:fb:f4:e8:ef:72:7e:81:08:14:a4:75:65:32:8a:37:1f:e0:
         44:32:54:a3:56:31:90:fc:e4:7e:2c:71:57:fe:a8:d7:25:76:
         c3:07:96:66:06:7a:fa:14:78:97:58:6f:03:4d:cf:24:1d:2d:
         9f:3c:88:c1:e4:20:d0:9a:00:b6:e0:17:e7:f0:b6:43:01:97:
         70:73:3c:92:83:4d:28:d8:12:6c:1b:01:ab:49:f0:bd:dc:cc:
         52:df:42:2c:d0:a3:68:5d:cf:13:12:8b:8f:98:9e:27:c6:77:
         88:79:3c:8a:46:e9:02:88:7f:32:3f:1b:12:ee:06:20:26:e3:
         83:cb:91:05:9c:e8:f0:88:e1:9a:ad:d6:a6:be:da:ff:3c:0e:
         7b:80:45:fd:68:f3:76:a1:03:e1:0a:92:7c:2f:f2:62:75:8b:
         1c:22:cc:51:52:0b:8e:79:75:ab:5f:31:f4:c8:de:6a:8f:ad:
         08:7f:a2:b3:b3:7e:78:31:04:3b:14:99:e9:12:6a:8f:02:97:
         4c:70:ee:5e:04:1f:60:53:ac:f3:4d:5d:7c:93:f9:f1:57:f7:
         3b:a4:f2:e0:cb:02:bf:7e:ec:5a:d1:ec:a9:c4:97:35:54:e5:
         a9:3d:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:22 2026 by rpki-client