Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa
File:                     279B0372DDF811EAA553705EC4F9AE02.roa (raw, json)
Hash identifier:          0lV+81b9RxF3wcx4IicrWRetZXK3VtJEDFXrSkR6osQ=
Subject key identifier:   4E:38:C7:EB:25:E7:10:B1:E5:B1:F4:4B:A5:E3:AE:EB:42:CA:2B:32
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0E54
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:33:48 +0000
ROA not before:           Tue 08 Jul 2025 18:27:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.24.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3668 (0xe54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Jul  8 18:27:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45c5c-c1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:b5:f4:8d:23:d1:dc:96:c3:f4:5e:26:a2:
                    94:eb:fb:ca:84:f7:4f:eb:0e:77:97:54:f3:5b:0f:
                    b7:0a:d9:e9:a8:17:2c:11:35:4a:d4:0d:c7:a3:cd:
                    7a:69:0b:bf:9c:33:62:ca:be:ba:5e:b4:8e:1d:a5:
                    a6:70:7d:04:78:eb:d2:c2:c6:c1:9b:85:df:46:63:
                    54:73:94:4d:7d:95:e4:3c:8b:d4:92:52:19:83:33:
                    54:bd:42:7d:5d:ec:3e:4f:4d:f4:cc:a8:9f:be:33:
                    2f:9a:11:f7:26:ff:15:05:24:10:20:8e:ce:55:78:
                    9d:98:d0:32:d4:45:8b:4c:e3:3e:5d:a0:fc:27:32:
                    5e:9c:ac:78:84:89:48:bb:ed:70:16:8c:17:b6:3d:
                    0e:82:0b:0d:90:68:61:9c:08:d8:76:65:24:44:11:
                    7f:25:d3:35:6d:88:84:ed:12:2c:40:98:42:84:f5:
                    36:66:cc:ca:ae:39:4c:2e:2b:7c:fe:9e:20:1d:4a:
                    3d:78:55:df:eb:29:e9:8b:18:ad:73:65:d4:60:ce:
                    fe:ba:44:eb:e7:f4:56:59:e2:87:37:60:8e:ab:b9:
                    c5:3d:e8:6c:a9:8e:d1:ec:68:b5:e4:d0:24:74:b7:
                    ce:76:e8:5b:59:d8:66:90:55:e1:7d:d8:71:66:c0:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:38:C7:EB:25:E7:10:B1:E5:B1:F4:4B:A5:E3:AE:EB:42:CA:2B:32
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:e3:59:b9:f8:ee:f5:81:f3:34:1e:be:f0:ea:0a:6f:69:
         fd:64:fd:99:49:60:09:29:e6:68:34:56:cf:10:9d:68:8f:a3:
         14:96:62:6b:ec:f6:71:0b:fe:bf:8f:d4:e3:36:51:83:cb:91:
         c4:9b:5a:bd:a5:f4:d6:57:1b:5b:f6:7e:61:94:8c:4a:df:00:
         03:ac:60:d4:d3:a0:f0:79:ab:53:4a:5f:10:94:4e:1b:88:01:
         cb:60:93:68:43:67:dd:5b:54:76:be:10:ad:0d:e0:22:3e:11:
         3b:c8:67:d8:52:a8:46:21:30:db:21:bc:71:e4:9b:12:52:e0:
         6c:d0:27:21:c7:32:67:4f:24:a1:32:97:b4:cf:2e:2d:85:5f:
         bb:d6:82:68:45:14:d0:dd:a1:30:2b:49:49:cc:81:17:f1:f5:
         a4:3c:e2:95:78:79:cd:22:7d:80:66:93:3a:b7:bb:3d:91:05:
         85:e4:7f:ed:19:53:dc:ac:e2:97:12:55:e0:50:25:7a:b8:25:
         e0:65:c4:00:49:1e:67:62:a3:06:0d:c2:df:0e:18:8e:c9:d6:
         38:39:78:31:86:a4:58:c7:65:a6:49:1c:be:a9:8c:c2:88:85:
         74:9d:e7:c2:8b:5c:99:44:ae:6a:91:5c:d0:20:7c:e1:a9:c5:
         ed:42:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:17 2026 by rpki-client