Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/E9F94792A5CC11EC85A86A1FC4F9AE02.roa
File:                     E9F94792A5CC11EC85A86A1FC4F9AE02.roa (raw, json)
Hash identifier:          RTRGzx3DTtJG0iPu4hiw7fBG/3vhdOfJ/25U/hTfNGM=
Subject key identifier:   68:70:E1:1D:E5:89:9E:80:CE:B4:40:76:28:FC:FD:E3:06:83:A3:FA
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       042E
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/E9F94792A5CC11EC85A86A1FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:11:18 +0000
ROA not before:           Wed 09 Apr 2025 01:07:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142005
IP address blocks:        103.164.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Apr  9 01:07:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a896-0bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:c4:60:a7:cc:bf:90:b2:c2:c4:70:70:28:
                    c7:81:de:1f:82:46:e2:ff:e5:3a:c5:6f:c9:66:74:
                    0b:48:a5:a3:8b:e2:65:2e:04:8c:08:e0:43:d0:44:
                    7b:47:ae:7e:e9:c4:63:0b:62:70:00:1d:d5:44:47:
                    e5:7a:08:61:1c:d2:66:eb:1b:24:6b:38:91:d3:4e:
                    b6:31:dd:d1:47:f8:ec:93:87:7f:2b:ca:34:65:9f:
                    26:6f:0b:29:d4:ca:b2:75:3e:c7:3e:b1:ac:0c:b3:
                    a6:9c:29:8b:83:3c:b4:e9:39:f1:a8:93:89:53:f5:
                    d7:5d:f3:be:7f:07:fd:e4:4f:8b:7e:89:36:a3:a7:
                    0a:a9:08:c2:0d:1c:d4:cb:04:6a:f6:fc:31:a9:fe:
                    9a:cd:a5:b5:12:bb:bf:bf:28:a4:0c:e2:2d:10:c7:
                    a8:94:31:e8:e0:41:7b:be:df:1a:0c:66:40:e8:05:
                    08:b5:f5:3f:26:b4:89:fa:e5:19:20:82:4d:23:29:
                    24:db:16:a6:45:b0:d3:bb:fc:1a:a8:ed:86:d6:a4:
                    38:61:ab:59:eb:9d:1b:ca:b3:45:ac:c2:28:76:1b:
                    33:c3:87:41:c5:0c:5a:c8:98:14:4e:e5:5e:ae:de:
                    d5:5b:92:29:3f:4a:bd:b4:6f:e2:b9:62:d7:9d:91:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:70:E1:1D:E5:89:9E:80:CE:B4:40:76:28:FC:FD:E3:06:83:A3:FA
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/E9F94792A5CC11EC85A86A1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:90:cc:b0:17:93:8a:2d:91:a8:1e:91:75:6c:ad:21:05:
         2b:85:49:11:fc:23:d7:91:a9:1e:5a:a2:8a:5d:2b:d0:0a:b2:
         24:48:4f:46:d1:0e:6c:a8:eb:f8:15:10:25:9e:08:9d:88:d2:
         54:4c:55:02:3d:f4:9c:46:3e:fb:29:b3:0f:ae:9b:b7:3b:97:
         ae:1d:81:ea:85:d9:d6:8a:43:90:b6:07:08:f7:be:7c:91:1c:
         cb:9c:41:75:14:fa:b6:6b:e0:05:03:58:ba:6f:45:b4:d4:c5:
         6c:b4:5a:aa:5d:74:3c:de:70:b7:e0:23:f7:0c:66:b7:4c:4d:
         e3:da:7a:4a:7d:af:ac:a8:44:ef:88:d1:19:f0:2e:d9:f4:57:
         ee:02:b9:4a:27:ca:9c:d5:19:cd:32:b5:8c:8a:d2:da:28:44:
         ea:e7:c0:5e:fd:2a:24:8b:54:b7:c1:42:42:a1:ed:06:d2:12:
         a0:6f:6a:99:78:de:f6:ef:d5:0b:f7:a1:27:45:d1:73:08:c8:
         d6:87:08:6b:53:0f:ab:9b:55:25:fa:dc:28:d3:db:01:ba:54:
         2a:f2:89:ab:80:19:0f:26:6a:2d:e4:a8:a2:88:88:12:47:6d:
         5a:f6:7a:6f:a3:77:15:92:59:5f:2d:cb:d2:70:81:bb:44:f0:
         f7:2d:57:32
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG
REJCNjJGN0EwHhcNMjUwNDA5MDEwNzI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTg5Ni0wYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEPEYKfMv5CywsRwcCjHgd4fgkbi/+U6xW/JZnQLSKWji+JlLgSMCOBD0ER7
R65+6cRjC2JwAB3VREfleghhHNJm6xskaziR0062Md3RR/jsk4d/K8o0ZZ8mbwsp
1MqydT7HPrGsDLOmnCmLgzy06TnxqJOJU/XXXfO+fwf95E+Lfok2o6cKqQjCDRzU
ywRq9vwxqf6azaW1Eru/vyikDOItEMeolDHo4EF7vt8aDGZA6AUItfU/JrSJ+uUZ
IIJNIykk2xamRbDTu/waqO2G1qQ4YatZ650byrNFrMIodhszw4dBxQxayJgUTuVe
rt7VW5IpP0q9tG/iuWLXnZGmGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGhw4R3l
iZ6AzrRAdij8/eMGg6P6MB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0
RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQyQzUvMjkyNjQ5Q0NBNEU5MTFFQ0FGM0ZCMTUyQzRGOUFFMDIvRTlGOTQ3OTJB
NUNDMTFFQzg1QTg2QTFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6SCMA0GCSqGSIb3DQEBCwUAA4IBAQAtNpDMsBeTii2RqB6RdWyt
IQUrhUkR/CPXkakeWqKKXSvQCrIkSE9G0Q5sqOv4FRAlngidiNJUTFUCPfScRj77
KbMPrpu3O5euHYHqhdnWikOQtgcI9758kRzLnEF1FPq2a+AFA1i6b0W01MVstFqq
XXQ83nC34CP3DGa3TE3j2npKfa+sqETviNEZ8C7Z9FfuArlKJ8qc1RnNMrWMitLa
KETq58Be/Soki1S3wUJCoe0G0hKgb2qZeN7279UL96EnRdFzCMjWhwhrUw+rm1Ul
+two09sBulQq8omrgBkPJmot5KiiiIgSR21a9npvo3cVkllfLcvScIG7RPD3LVcy
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:03 2026 by rpki-client