Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/01E652108F4F11EEA2E9CA7DC4F9AE02.roa
File:                     01E652108F4F11EEA2E9CA7DC4F9AE02.roa (raw, json)
Hash identifier:          yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=
Subject key identifier:   B9:67:D7:F2:DF:1D:68:B2:0A:FA:F7:9C:4D:EB:48:01:A8:9B:FF:88
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       08D3
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/01E652108F4F11EEA2E9CA7DC4F9AE02.roa
Signing time:             Mon 04 May 2026 21:25:06 +0000
ROA not before:           Mon 04 May 2026 21:25:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137386
IP address blocks:        103.95.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: May  4 21:25:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f90eb2-d299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:7a:c5:a2:3e:4e:fc:9c:ac:09:c7:c4:30:
                    e6:f1:20:d2:af:ee:ab:bc:b3:87:58:58:2c:7f:a1:
                    91:af:c6:47:5e:3a:0e:c8:55:c0:61:ec:7c:33:06:
                    b3:e3:54:9e:9e:da:d8:fd:5c:f6:b4:a8:70:ed:ad:
                    28:1b:76:b2:e9:dd:07:1c:49:83:fe:61:37:9f:a8:
                    a4:f7:4e:ae:b7:de:f3:09:3d:37:bb:52:b0:1b:9d:
                    24:f4:65:00:4d:0d:8c:64:9b:79:09:2e:49:e9:f0:
                    16:37:3c:9a:c2:db:d0:b5:bc:05:a0:7c:5f:46:e0:
                    98:21:0e:74:85:27:69:32:17:35:d0:b3:f9:68:d2:
                    7c:b0:a5:ad:a8:f7:c9:ea:49:6e:2c:63:b1:f1:01:
                    0c:00:74:6b:26:9c:3a:ba:35:eb:ee:58:f7:8a:d8:
                    3b:c8:08:14:2b:f1:33:6c:5d:cf:26:b8:b1:af:88:
                    2f:bb:1b:3c:31:44:33:76:2c:91:99:d5:b2:ff:1e:
                    15:99:0b:6d:3f:2a:70:9a:1c:a7:dd:6e:2a:22:71:
                    de:0f:a6:36:92:1a:14:30:a3:ff:31:7b:d9:5a:87:
                    3c:0d:d0:66:5c:f1:be:60:b9:21:31:61:bf:7e:cd:
                    8c:2f:fa:ee:d1:84:c2:f7:07:23:ad:04:84:b3:f7:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:D7:F2:DF:1D:68:B2:0A:FA:F7:9C:4D:EB:48:01:A8:9B:FF:88
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/01E652108F4F11EEA2E9CA7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:02:53:f7:a2:e2:a8:b2:f5:17:cd:d2:d2:86:82:4c:b5:
         a3:7a:47:fa:a1:a9:af:dd:7b:8f:fb:2a:c7:06:b1:42:89:af:
         ff:96:45:2f:f8:8f:9d:62:ff:d1:31:73:d7:b2:ef:8d:03:80:
         c0:bb:d7:46:fc:06:ff:57:07:e7:5e:b7:9a:03:ca:da:13:35:
         a5:35:87:9e:57:9b:1a:d1:15:8a:84:0d:76:c0:b1:e9:bc:ec:
         22:4d:22:65:68:fc:0f:77:6e:f2:e8:c8:0b:19:60:fa:6c:bc:
         06:4a:d5:78:32:92:f9:a3:36:8b:b2:61:62:19:ce:e4:e9:88:
         c0:ed:2c:85:e6:1b:f1:6c:22:c0:0c:3d:4e:5f:21:8e:b8:f3:
         77:31:b2:14:22:c8:34:0a:d5:eb:90:fa:8f:5c:6f:f5:a7:42:
         dd:9e:34:cc:f5:e1:dc:21:4b:43:8e:5b:c2:3f:30:5a:3b:3d:
         e4:2b:ec:e9:af:c1:a4:40:69:7b:a7:44:3e:17:9d:38:31:00:
         31:8d:1e:17:b3:24:79:35:49:c0:08:85:da:53:e2:fc:23:5d:
         ad:98:a7:12:ed:c3:b6:44:b9:06:c2:5d:6d:fa:dd:b4:12:d2:
         07:7c:11:02:15:ca:3b:40:99:da:17:2f:fb:65:e6:b5:51:f4:
         98:9f:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:50:00 2026 by rpki-client