Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
File:                     E188EE7A935711EFBE98944CC4F9AE02.roa (raw, json)
Hash identifier:          +BzmtEHFPYhJd7eBI+fhK9pFudklIV0KEa7Qtl+OyT0=
Subject key identifier:   D9:EA:84:2D:AE:EA:04:69:AA:B9:2A:67:58:16:BE:99:0D:36:C4:88
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       0113
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:06:38 +0000
ROA not before:           Mon 07 Jul 2025 07:13:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     10096
IP address blocks:        203.104.68.0/23 maxlen: 23
                          203.104.71.0/24 maxlen: 24
                          203.104.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Jul  7 07:13:13 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a58b5e-7640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:bf:e1:19:5b:d7:07:8a:ec:d3:b1:40:5d:
                    47:15:a3:29:49:76:4a:93:55:2a:9d:59:bd:d7:b8:
                    cc:7e:ee:98:e8:a0:61:2c:ae:d0:ab:a3:01:3e:c6:
                    e6:64:3a:7e:99:11:2a:c9:0e:62:c2:f5:0d:57:2e:
                    13:0f:38:98:ab:c0:22:bd:28:f6:d1:91:54:d7:8e:
                    00:49:b5:74:f1:9c:55:52:e4:a3:b0:a1:3a:c0:f7:
                    e7:5e:df:8b:42:58:e4:1b:bf:5a:55:54:ae:78:bd:
                    87:13:f9:af:66:4e:43:b2:a0:e8:38:9b:62:bb:89:
                    68:de:3f:da:ce:9f:b2:f9:2f:1d:4c:e7:a7:1a:d7:
                    e0:46:01:31:59:cf:61:81:94:b0:3a:c2:47:84:46:
                    c1:b3:96:7d:39:f3:c3:40:32:cd:24:0b:a2:c1:d8:
                    20:60:c3:8a:13:b5:11:13:74:c6:f6:7e:9c:fa:cb:
                    bb:3a:f8:2c:de:4f:ee:9b:a9:5e:a6:4c:64:68:66:
                    fb:21:17:77:69:73:60:4c:fe:83:28:d2:f3:8b:64:
                    22:c6:8c:2e:82:8f:41:31:96:0b:8a:df:18:88:ba:
                    37:84:5e:c3:d4:5f:6c:a9:1a:2e:6c:aa:b7:5a:e4:
                    24:c8:ed:a3:00:78:37:ce:73:05:90:f2:56:72:1e:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EA:84:2D:AE:EA:04:69:AA:B9:2A:67:58:16:BE:99:0D:36:C4:88
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.68.0/23
                  203.104.71.0-203.104.75.255

    Signature Algorithm: sha256WithRSAEncryption
         66:30:d5:5f:2d:fb:ed:0d:46:3b:14:c4:ac:af:ab:55:d4:c6:
         9f:05:10:f2:82:8a:81:09:85:69:46:66:ae:94:31:53:be:87:
         45:8f:54:0b:ed:a9:5b:9d:de:c8:42:94:29:a6:4a:a0:73:b0:
         80:0c:f3:64:47:46:c8:12:6f:8d:cd:76:9d:40:d7:17:b1:9a:
         ca:da:0a:be:6a:f2:e4:9b:bb:d9:bf:dd:52:0b:0e:1c:43:e6:
         73:b2:f4:0c:7b:23:c8:f7:3a:15:18:bc:2c:25:0b:5f:6f:24:
         e0:a6:8f:d6:b4:e7:28:fe:6a:d0:8c:55:4f:f9:9b:5a:7f:e9:
         ce:b7:78:fc:23:f1:5d:df:e3:bd:ee:f0:a6:21:51:62:df:5b:
         73:07:90:c9:68:17:02:fa:9b:45:6a:a7:bb:35:03:bb:07:36:
         4a:ea:89:6c:9d:8f:38:7a:d8:27:63:f8:33:5f:94:d6:cc:a2:
         cb:c7:04:70:b7:c0:2e:62:f5:77:1c:18:e0:a9:02:13:59:6b:
         7f:da:3b:c3:07:c8:a6:7e:4a:96:79:21:44:50:79:03:01:fe:
         44:9e:43:7b:43:7a:44:56:a0:19:cd:d4:aa:68:17:d0:aa:14:
         93:5f:30:19:b1:0d:69:31:90:7c:64:f1:4b:d8:d4:0b:33:a6:
         ef:e8:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:48 2026 by rpki-client