Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa
File:                     CEFC9F4C3EFD11F18502D769C6833773.roa (raw, json)
Hash identifier:          FVKpYfCHPdPaELMYVb2ZrEZUKTclZWOqDrHvXakeCfY=
Subject key identifier:   E9:72:EF:86:B7:2A:83:B0:F1:AF:ED:22:61:EC:0A:F2:75:9B:A3:AE
Certificate issuer:       /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Certificate serial:       0D47
Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa
Signing time:             Thu 23 Apr 2026 10:21:13 +0000
ROA not before:           Thu 23 Apr 2026 10:21:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136897
IP address blocks:        103.5.42.0/24 maxlen: 24
                          103.5.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
                          rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
        Validity
            Not Before: Apr 23 10:21:13 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69e9f298-ed5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:b3:0a:52:da:04:62:ef:d6:10:94:44:01:
                    1d:fb:0e:6d:39:80:5f:43:ef:49:81:f0:5a:4d:61:
                    fe:63:ea:d0:fd:02:7f:2e:b3:c8:bb:47:7b:82:98:
                    65:cf:2f:23:cb:b5:29:2f:d9:df:6b:bb:9a:8a:b3:
                    63:81:c6:69:f8:0f:a5:9e:25:c5:47:e8:d0:20:54:
                    44:28:aa:52:16:77:a6:5b:80:a7:e8:d9:9d:22:4a:
                    f9:2f:f6:3a:b5:49:73:85:e1:39:88:08:7e:d6:76:
                    a8:15:5a:9a:eb:69:bb:86:4b:63:94:14:25:bd:c4:
                    b4:71:c4:db:1a:4c:0c:27:22:42:9e:0a:97:3d:a2:
                    b2:81:0d:aa:49:a3:44:20:5e:e6:b4:bd:f9:1c:e8:
                    84:75:0b:dd:a2:51:b5:5b:5d:04:cc:ef:16:96:7f:
                    dc:86:1e:e6:b9:f6:9d:1a:45:34:f9:bb:63:7d:be:
                    4c:1f:f8:19:7d:c2:8e:98:3c:fb:93:37:4b:76:31:
                    79:4f:6e:31:2d:09:fa:a2:3e:ef:0b:76:79:09:ba:
                    61:4f:7a:c6:4a:4f:71:9c:bf:d0:4b:f2:40:f7:33:
                    25:c1:86:e1:71:bf:8b:bb:da:29:2b:26:51:6a:81:
                    9f:b8:f0:25:cd:2a:4a:13:74:c0:c8:4d:d3:a9:b6:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:EF:86:B7:2A:83:B0:F1:AF:ED:22:61:EC:0A:F2:75:9B:A3:AE
            X509v3 Authority Key Identifier:
                keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/CEFC9F4C3EFD11F18502D769C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:79:6f:5e:fc:93:5a:3d:ae:87:5b:c7:97:78:2a:b2:41:67:
         cb:94:39:9d:be:1f:47:f0:63:07:87:8a:24:46:40:8d:d3:bd:
         a4:77:47:d5:08:e7:d1:be:42:cd:73:2b:8d:c8:0e:25:ad:db:
         af:4b:c3:b6:55:5b:67:3c:14:8c:e1:d8:2f:64:da:0b:04:b5:
         a7:01:85:cb:7a:3c:eb:c5:fd:86:0a:93:4b:ef:6c:76:1e:a6:
         15:7a:82:51:7e:47:d0:db:34:de:97:8d:eb:70:1a:3e:28:df:
         df:00:b6:a9:c9:9a:e2:50:ad:7f:7b:21:6e:42:d5:8b:3d:37:
         15:fc:4c:5a:9e:80:e1:2c:f1:b6:8b:87:96:4b:dd:d6:c5:58:
         dd:64:11:1d:17:b5:76:66:d2:31:c8:87:01:bc:db:b4:12:0e:
         9f:8d:e3:03:0b:6c:49:ee:5a:f8:10:d1:21:5f:6b:83:bd:13:
         78:49:89:40:2e:ec:70:0d:e6:1f:ba:28:d3:e3:8e:a8:9c:be:
         f0:ce:7b:d3:31:91:41:78:04:05:ba:1b:62:b8:43:d5:01:c3:
         28:5f:dc:71:ba:88:a0:25:63:df:b9:51:4e:c8:e6:f5:2b:26:
         79:a4:2e:17:7b:3f:36:67:43:e8:00:72:64:1a:45:d2:1e:69:
         a9:72:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:53 2026 by rpki-client