Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
File:                     05F74AC4B99C11ECA1344C85C4F9AE02.roa (raw, json)
Hash identifier:          fPiSn9EKp07Pksf7OzdvkznMDYTa4tFQoVJ+7TRcTvU=
Subject key identifier:   54:35:9F:5C:73:B0:87:65:0B:D0:55:B6:CC:DA:E8:1E:86:39:82:D5
Certificate issuer:       /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial:       03E2
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:03:13 +0000
ROA not before:           Mon 07 Apr 2025 01:05:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149775
IP address blocks:        103.186.22.0/23 maxlen: 23
                          103.186.22.0/24 maxlen: 24
                          103.186.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
                          rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
        Validity
            Not Before: Apr  7 01:05:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40ee0-8ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:75:e0:5d:71:e1:a9:05:ac:20:b5:bc:22:
                    cf:a8:b3:24:b7:dd:69:4b:80:52:5d:04:a5:c7:a3:
                    5e:21:48:60:bb:38:2b:6d:2d:7d:3c:58:ac:06:87:
                    a5:ff:a0:11:dd:be:36:3f:7b:bc:57:26:2d:42:32:
                    fe:a8:48:d9:e0:cf:0a:88:07:47:b9:4f:52:e6:f3:
                    04:4d:df:07:97:77:12:0c:5c:de:15:6f:3a:f0:c6:
                    6a:98:c2:b9:3d:08:66:ef:5e:f5:47:94:01:2b:57:
                    d6:0e:0c:d6:fc:2a:5f:d9:5b:2b:76:ff:3d:9e:66:
                    cb:e7:79:5d:7d:d7:70:b7:60:10:5e:c2:5c:1d:2c:
                    dd:9c:c0:e2:f2:0a:20:ee:69:d6:68:b7:43:3d:f4:
                    96:d5:7d:65:0c:72:a7:19:4d:05:06:2f:c6:ce:64:
                    04:3f:45:51:c4:a5:35:9f:ab:b2:1a:47:92:f6:33:
                    11:aa:98:d8:6a:31:ae:76:2a:61:84:73:5a:6c:93:
                    b3:26:6e:c4:e9:70:b3:f0:11:da:8f:a0:30:cc:47:
                    a3:03:fb:e6:3c:25:88:7c:bd:71:37:3c:bd:94:ff:
                    f2:aa:44:e7:1f:50:b7:73:f6:5e:9d:02:47:cf:86:
                    b6:e0:7c:fa:62:69:a2:32:4a:75:25:11:dc:a4:79:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:9F:5C:73:B0:87:65:0B:D0:55:B6:CC:DA:E8:1E:86:39:82:D5
            X509v3 Authority Key Identifier:
                keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:12:d9:e8:83:ef:a8:e1:c1:0f:dc:6e:4d:1b:8a:76:0f:b2:
         f6:a1:a5:01:88:5c:d9:aa:ab:90:62:7a:0f:cd:84:71:df:89:
         d5:a2:52:b3:41:23:07:99:af:67:9c:3f:b0:52:c0:9f:a2:06:
         07:71:b2:38:e4:a9:28:12:f1:04:a5:c0:19:47:5e:34:ca:eb:
         ed:9d:ac:20:cc:d1:1b:ad:de:d5:46:74:87:f0:d8:73:47:68:
         89:5e:f5:40:15:57:c6:a2:86:b3:32:d9:e6:56:fa:ef:de:14:
         26:ed:44:52:81:d9:2a:8b:d5:00:91:07:fd:87:4d:f6:92:ac:
         dc:9f:4a:ba:4b:58:62:ea:f4:04:8a:f5:26:fd:ae:37:5c:73:
         5c:8f:c8:c8:51:cf:4b:c7:40:5f:27:49:4b:dd:a8:47:65:a1:
         df:fc:a2:35:29:2a:a6:c7:c4:04:e0:b8:83:2a:1d:78:f7:50:
         d6:ad:06:94:e0:ec:4b:b8:89:ab:74:c8:af:92:9a:92:a2:18:
         6f:7f:e8:b8:a6:46:cc:3c:89:96:88:c5:4e:22:4e:c3:71:8b:
         f6:48:25:dc:c9:e5:ed:1b:e5:ab:3c:8b:8c:f9:d6:fb:c6:58:
         a8:f5:81:43:34:ec:ed:e7:b6:dd:d8:1f:cb:ec:f5:c1:16:69:
         b0:3f:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:59 2026 by rpki-client