Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa
File:                     E614FEEED6AF11EEAB03B528C4F9AE02.roa (raw, json)
Hash identifier:          x6L3LpggPOK31aWAe0J+uMK7KgUnq0y5XWoD738Vc5Q=
Subject key identifier:   A8:91:90:D9:99:1A:A4:89:5B:72:95:46:0C:AE:B0:21:7F:40:AE:50
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       017D
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:26:46 +0000
ROA not before:           Sat 05 Apr 2025 05:10:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132174
IP address blocks:        103.109.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Apr  5 05:10:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a58206-0c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:c1:e4:86:47:b6:ca:9b:f7:c8:1b:c8:04:
                    1e:34:b9:62:7c:5e:4b:24:0e:6f:27:13:bd:17:e7:
                    a1:6d:93:30:e1:c5:bc:2f:c8:f5:bb:b5:ba:22:fe:
                    18:82:49:b6:8d:9a:4d:45:c5:28:a1:98:19:4f:d3:
                    94:4b:18:d7:e1:54:3b:bf:d1:4f:a7:3b:51:bb:36:
                    be:6f:9e:65:ee:7a:32:84:0a:60:85:66:66:97:6e:
                    e8:ed:59:1c:20:06:f7:af:82:a4:00:a3:89:18:db:
                    a3:e5:a8:77:28:5e:d5:07:a8:be:c9:2b:7e:a3:39:
                    c1:c2:18:36:64:e6:8c:3e:29:3d:31:84:47:22:2e:
                    7d:a2:02:79:be:3a:5b:f8:41:ac:aa:8a:99:d4:78:
                    86:f2:69:5a:bf:d1:72:9a:56:cf:61:ac:08:62:ac:
                    39:98:f3:81:16:ca:a0:04:a2:74:84:cc:21:f0:c8:
                    90:9a:ef:85:c6:f8:b2:83:bb:27:cf:78:66:07:b1:
                    9f:15:25:2c:8d:65:f4:60:9e:c9:96:8f:8c:d1:b0:
                    56:fc:c0:af:d9:5b:cf:00:a7:e9:b9:53:c3:f9:2b:
                    65:f3:72:20:68:eb:ae:a2:ef:c1:f4:01:8f:67:ce:
                    ef:9b:3e:d3:45:a4:e1:d4:2b:5f:dc:90:25:ea:3c:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:90:D9:99:1A:A4:89:5B:72:95:46:0C:AE:B0:21:7F:40:AE:50
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:02:a0:11:fd:bc:2d:53:3f:01:d9:7c:21:e0:7e:98:43:
         cf:2e:95:9d:c4:8f:fa:7a:9e:d4:5f:8a:16:61:43:7e:d0:c7:
         76:d2:bb:82:70:5f:fe:ce:10:d3:63:61:05:28:55:06:a3:f6:
         0a:03:f6:18:19:2b:cf:55:11:b3:28:46:87:eb:70:6d:87:84:
         66:de:44:f3:21:8d:01:06:ad:69:fd:17:24:3a:76:f2:11:9f:
         bb:f7:45:85:00:d9:58:04:77:43:c5:53:1b:c4:33:3c:d3:e8:
         05:6d:a4:b2:f2:ab:1b:f1:2c:7b:7f:a0:c8:e1:34:5c:2a:28:
         21:5c:45:85:c8:8a:ce:ad:c5:ac:5a:0c:98:a8:3e:24:48:ed:
         d8:ea:d2:16:35:60:08:17:fd:36:db:0f:9f:f8:b3:fc:d7:58:
         04:c5:26:ca:86:20:00:67:7e:8c:b7:08:62:5b:fa:81:76:59:
         8b:25:95:35:91:d4:75:98:e5:75:cf:9b:96:1e:1d:2a:cc:a6:
         cd:d8:5b:16:3c:05:f5:2f:b6:f0:dc:1a:dd:7b:d5:49:e7:d2:
         b3:8f:01:2f:8d:73:0b:45:29:5c:b0:bd:8e:4d:0c:8c:7e:81:
         9b:7e:b1:56:9c:e7:03:e3:cc:b1:d3:d9:3b:2b:9e:eb:41:68:
         46:ff:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:24 2026 by rpki-client