Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/AE493460CA7011F0B41AE018C4F9AE02.roa
File:                     AE493460CA7011F0B41AE018C4F9AE02.roa (raw, json)
Hash identifier:          xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=
Subject key identifier:   29:03:72:4B:40:B4:3B:77:AD:4A:57:31:B7:69:62:A4:0F:03:DE:91
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0B6A
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/AE493460CA7011F0B41AE018C4F9AE02.roa
Signing time:             Fri 08 May 2026 20:24:41 +0000
ROA not before:           Fri 08 May 2026 20:24:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153462
IP address blocks:        103.28.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2922 (0xb6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: May  8 20:24:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe4689-7252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:05:58:23:4d:cf:74:43:c9:3f:c2:52:22:
                    ea:5e:97:46:ff:51:b5:c5:90:7c:87:84:18:04:0e:
                    bc:ee:2c:c2:74:36:ca:9a:d7:af:b9:44:73:df:a5:
                    82:e1:98:b4:74:ff:49:33:02:56:e8:35:6d:4e:a9:
                    72:75:f5:3a:42:cb:d9:05:db:c4:0d:08:3e:49:75:
                    9a:dc:a5:4e:f3:cd:4e:62:b5:bd:43:1b:b8:29:8e:
                    61:1c:bf:93:64:92:2d:2d:4e:8e:68:19:b9:b6:1c:
                    7b:39:a5:55:09:11:5b:28:a6:e7:63:d3:46:db:a0:
                    47:14:65:92:a7:c5:ef:85:0b:1b:d7:7b:4d:53:0e:
                    b6:af:e3:1b:ba:20:71:f7:0f:fb:06:af:16:e8:2e:
                    e1:03:f6:b5:a8:bd:a4:0f:55:4d:12:ff:ab:d6:88:
                    1b:9c:f9:8b:b2:b3:f3:b9:7b:e8:d4:dd:db:5c:8f:
                    a4:52:78:02:91:6a:a6:08:61:2d:fd:a7:6d:7f:d9:
                    9d:6d:69:00:71:9a:9a:fc:33:29:aa:d1:2d:bc:8d:
                    11:12:63:0e:72:1f:16:c4:7a:9c:ed:c7:e4:21:86:
                    e0:80:90:cf:b5:c0:2f:9e:fb:d6:2b:f6:e3:48:98:
                    4a:5a:84:3e:30:d2:16:ae:5a:59:d5:1b:65:d2:35:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:72:4B:40:B4:3B:77:AD:4A:57:31:B7:69:62:A4:0F:03:DE:91
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/AE493460CA7011F0B41AE018C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:db:f2:60:e1:a9:83:a9:b7:ea:3d:81:c0:74:17:fd:05:
         1d:2c:c1:d3:d7:27:f6:8c:49:7d:0b:bb:d1:4c:15:5f:7c:87:
         42:42:cc:68:7c:5d:ce:03:c0:8a:1e:44:66:5a:c7:1b:2e:55:
         11:b3:35:68:cf:bc:7e:18:e4:03:35:ee:3a:fe:eb:ec:aa:46:
         c5:7f:43:d4:1a:1d:3d:4a:2a:c8:b7:75:70:58:80:1a:ea:19:
         af:29:23:c6:9e:f4:4d:b0:f9:40:2b:84:2a:7d:2a:08:2c:c5:
         55:07:2e:b7:95:a1:2c:68:30:cd:49:d9:80:f2:28:0d:ed:f7:
         cd:a8:72:6d:00:d4:2c:9f:d4:e4:23:b7:6c:8c:a7:54:15:da:
         3d:e6:37:6e:fc:d7:b5:34:76:4d:60:be:47:30:c5:ca:73:72:
         82:61:f6:21:87:74:0b:a9:c4:f3:41:3c:0d:b6:f4:4b:e4:b4:
         d0:58:f6:7f:8e:b1:7a:5d:19:ad:9c:22:9f:dd:74:6a:38:8e:
         05:3a:65:e8:6a:67:f8:2b:7f:77:bd:e2:fa:bd:04:39:be:45:
         83:ec:8c:38:6d:4a:e4:2f:2b:47:f3:07:64:e8:21:c0:af:cf:
         d3:aa:bf:d8:1d:e8:36:45:c2:52:39:81:3b:7b:b2:bc:13:a4:
         8b:57:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:30:26 2026 by rpki-client