Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa
File:                     FD1CE81824DC11F1AC9E21B6AD833773.roa (raw, json)
Hash identifier:          9EYbW/kP0EvaQviwyUMhvfFwghhwvUIQKiWZZgxHXKo=
Subject key identifier:   7F:2D:F6:7C:95:58:3A:39:2B:1B:DE:A1:C8:4A:63:C9:C7:DF:1F:EF
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       04
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa
Signing time:             Sat 21 Mar 2026 04:18:56 +0000
ROA not before:           Sat 21 Mar 2026 04:18:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133139
IP address blocks:        42.96.104.0/22 maxlen: 24
                          103.225.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Mar 21 04:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69be1c30-306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:a9:f9:f5:e9:b1:fc:97:a9:49:04:d9:3d:
                    18:e8:1b:b4:a9:54:6d:98:2f:83:36:13:8b:a4:05:
                    8a:90:34:cf:8b:52:62:dc:30:df:51:b2:11:74:71:
                    0e:5a:4e:4b:d4:2a:a8:1d:92:73:1e:59:f9:b4:2d:
                    c2:8f:82:31:5f:de:ec:b7:6f:61:cc:42:ce:3a:13:
                    51:52:92:6a:67:4f:7c:5c:21:cf:42:48:6e:1b:66:
                    6b:f5:bc:47:57:af:86:20:85:f6:63:b4:6e:c9:2d:
                    e2:1a:d2:93:2b:e7:1d:8e:9f:fe:51:31:4b:c5:29:
                    27:2f:1f:aa:6d:f3:6a:4c:a9:af:5b:df:33:f2:00:
                    e4:46:96:d6:b6:b5:f0:37:23:ff:b4:2f:cf:bf:b4:
                    84:63:3f:64:44:df:9e:3e:80:f2:00:12:6e:5b:c4:
                    91:44:6e:a1:ce:45:58:f4:05:3f:1f:3f:ab:cf:bd:
                    8d:07:3f:97:a7:99:e3:a0:5b:5d:19:23:83:6d:7c:
                    41:28:65:d9:db:64:f1:bd:66:cd:5e:69:d1:f4:7d:
                    cb:7e:8d:a5:83:7c:2f:02:7e:c2:e5:dd:45:ac:2c:
                    38:aa:41:37:14:06:cf:6d:74:a8:ab:b9:8d:b4:02:
                    84:cf:a5:2e:80:4d:01:f9:6f:5a:c7:f6:6c:a4:df:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:F6:7C:95:58:3A:39:2B:1B:DE:A1:C8:4A:63:C9:C7:DF:1F:EF
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.96.104.0/22
                  103.225.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:58:5a:c6:95:90:15:0b:ae:ac:66:d1:39:df:b9:6d:dd:ff:
         db:e1:63:a8:8a:44:66:f8:db:6a:7a:c1:33:43:bf:6c:7b:a3:
         9a:17:24:84:e4:c2:86:d2:30:33:fd:dc:3f:7d:f9:83:2b:dd:
         17:83:e7:46:c5:b3:cf:27:ce:c3:f4:70:67:3a:f7:75:65:7f:
         fc:6f:8d:b8:75:aa:05:1b:8f:81:83:e1:ae:5a:54:6d:f5:a3:
         e2:9c:d3:ff:ca:2b:5d:1b:00:c1:41:ed:d2:41:c4:a3:52:f1:
         a8:ba:46:35:70:fe:70:ed:f1:e6:00:6e:09:cc:17:6e:08:95:
         e4:22:9d:b2:52:67:ca:1e:8b:13:21:88:44:e3:e2:6b:f4:53:
         9d:a7:97:02:22:5d:2e:b0:80:d8:ba:59:39:06:7a:26:c0:67:
         db:70:55:a5:09:39:1b:24:de:d2:23:ac:0b:d6:f0:e2:49:db:
         c0:ea:3c:02:38:99:02:1e:30:e5:41:1f:6f:8d:4a:7f:5b:9b:
         52:be:b4:d0:e2:2c:a5:0d:1e:8e:e8:a9:94:c3:9c:7d:e9:2d:
         e3:18:55:d1:7d:45:c7:95:88:72:8c:c1:fc:c5:16:dc:59:81:
         ef:23:44:63:cb:a1:71:69:12:59:1d:20:81:fe:d2:22:dc:c4:
         c8:96:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:46 2026 by rpki-client