Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
File:                     EF98E11472E211EEB93A4F72C4F9AE02.roa (raw, json)
Hash identifier:          g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=
Subject key identifier:   74:8C:2A:95:29:6D:34:8C:ED:77:7C:DA:AE:F1:58:99:16:E1:A5:3A
Certificate issuer:       /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial:       01C0
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 03:37:57 +0000
ROA not before:           Tue 03 Mar 2026 03:37:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140214
IP address blocks:        103.148.145.0/24 maxlen: 24
                          103.173.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
                          rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
        Validity
            Not Before: Mar  3 03:37:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a65795-69de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:fb:a0:35:ca:9b:92:3b:ac:66:fd:8c:e0:
                    35:97:32:09:d1:55:90:c5:7a:26:05:e1:74:59:af:
                    7d:ee:be:f7:df:ed:53:69:3c:67:ff:f0:ab:1f:77:
                    04:f7:be:d0:e4:7d:61:48:cf:bf:72:f7:e2:55:40:
                    3d:a1:a4:e3:56:94:59:74:3b:87:0b:5b:ab:fc:3d:
                    9a:bf:09:49:78:d2:a4:9f:41:c4:f9:65:cc:13:47:
                    f4:96:89:bb:b3:af:98:16:0b:5a:af:b4:71:d3:5c:
                    c5:8c:a9:9d:78:53:fe:ab:4a:7d:5a:f3:fd:66:fa:
                    69:5b:21:1f:44:71:05:6c:e9:6a:24:bd:13:24:86:
                    6a:fa:73:8d:f5:04:9a:dc:58:f3:a3:c6:88:40:41:
                    95:a2:25:f2:71:7c:06:89:6f:43:3e:3c:27:31:68:
                    d0:2a:3c:18:85:8d:c3:23:c2:f5:8a:c2:84:5f:fc:
                    43:3b:ae:6e:5c:8e:cc:4d:7b:86:82:a1:47:3a:a2:
                    f9:ab:98:74:9d:4d:f9:b5:fd:fc:03:67:c3:85:e8:
                    cd:28:21:ca:78:87:e2:9a:2d:fb:9d:31:c2:d8:ea:
                    67:6f:67:1c:d8:a9:10:97:f4:a1:3d:df:20:bd:49:
                    82:a3:ed:a3:b1:97:c6:eb:04:51:af:29:f8:e1:fd:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:2A:95:29:6D:34:8C:ED:77:7C:DA:AE:F1:58:99:16:E1:A5:3A
            X509v3 Authority Key Identifier:
                keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.145.0/24
                  103.173.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:00:e8:1b:3b:c0:e8:4d:e5:44:c1:d4:e7:17:c6:ac:82:c1:
         04:c2:99:09:7b:ea:56:21:92:9b:8c:b3:f6:99:cd:46:84:4c:
         eb:9d:ea:ed:72:4e:6b:50:6b:72:0e:da:15:81:bb:f6:33:ac:
         6d:02:7a:df:bf:57:15:4c:bb:ea:60:76:1c:4e:15:8b:04:e4:
         74:de:2e:67:17:73:0b:c7:40:e6:05:69:a8:ba:f3:cb:01:12:
         c3:11:b1:06:6e:48:d3:a4:ab:40:05:87:02:37:c8:7f:cf:c0:
         41:9b:3c:29:49:f2:82:63:36:bf:4b:45:3a:fb:ac:d4:c9:c3:
         ec:0c:30:7b:cb:37:64:69:e5:83:69:8c:e7:c0:cf:92:ea:31:
         66:05:d4:76:17:25:56:7f:d2:27:1e:88:40:21:27:3a:6d:8f:
         20:94:33:7b:aa:55:4d:61:f1:61:28:81:59:c5:77:36:53:24:
         9e:47:3f:a6:d2:3f:0d:55:e6:81:b5:74:40:51:82:cd:f5:9d:
         3a:1a:22:55:7c:d4:37:2d:ae:bb:ca:3a:34:88:0d:10:d3:b0:
         ec:f8:25:46:cb:96:b5:4d:8c:0e:cb:c7:4b:39:b1:e3:06:20:
         64:ec:4d:5d:32:89:5d:b6:cb:c4:bc:1a:71:80:3b:73:27:c7:
         24:ac:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:55 2026 by rpki-client