Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
File:                     4B167396E74111EC80E35542C4F9AE02.roa (raw, json)
Hash identifier:          s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=
Subject key identifier:   EA:8E:04:90:24:35:EC:6F:70:84:6F:94:3C:41:83:52:96:7F:63:BA
Certificate issuer:       /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial:       04A4
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:37:00 +0000
ROA not before:           Wed 03 Sep 2025 00:45:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3786
IP address blocks:        103.99.208.0/24 maxlen: 24
                          103.99.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
                          rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
        Validity
            Not Before: Sep  3 00:45:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4793c-135d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:14:7d:68:28:a1:8a:c7:1d:84:cf:75:74:
                    50:69:cf:dd:4a:1f:3a:17:07:fd:64:56:ce:71:5e:
                    23:97:14:6c:a0:13:c6:ef:f5:ce:98:36:71:50:42:
                    ea:4a:ff:59:df:25:91:c6:b8:13:08:8b:ad:0a:27:
                    13:2a:08:1b:d2:1e:9d:70:88:a2:6a:fa:19:ab:36:
                    4d:8a:ca:d0:d0:56:27:14:a3:95:82:78:b1:22:d0:
                    c8:eb:1a:81:27:f2:5a:e4:12:05:68:5b:b6:67:69:
                    05:ec:b3:4e:f0:69:73:dd:a5:da:b5:5e:32:17:6e:
                    5a:aa:8a:b5:34:9f:dc:68:41:c0:db:0d:58:98:3a:
                    6d:34:35:10:53:3f:74:ce:35:a1:5a:f0:28:af:08:
                    c0:21:b5:6c:1a:59:ac:96:51:26:a7:46:bb:8b:63:
                    54:59:a9:32:b9:2a:e2:37:b3:d8:13:d6:59:b6:4c:
                    0c:de:19:3c:06:e4:5f:ae:7a:7a:ea:2e:3c:d7:f2:
                    c5:a3:97:32:6c:a2:22:bc:9c:9f:ba:86:33:91:db:
                    eb:46:44:69:d6:ab:1e:f5:8a:14:57:ed:b3:4f:84:
                    19:49:2c:6e:53:0f:82:c6:d0:4d:c1:98:b4:47:c9:
                    b1:ff:c3:fc:70:04:f4:5c:8e:e3:ad:aa:b5:43:bf:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8E:04:90:24:35:EC:6F:70:84:6F:94:3C:41:83:52:96:7F:63:BA
            X509v3 Authority Key Identifier:
                keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.208.0/24
                  103.99.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:15:16:91:49:61:b1:e3:0b:6b:57:7a:17:60:1f:eb:e1:
         3f:78:b7:60:96:ab:69:af:ac:06:16:84:80:ea:c5:d6:69:e3:
         29:12:5f:4a:32:54:7b:a0:ca:0b:2c:df:c1:ee:6a:29:f2:6a:
         9d:60:20:1c:a9:0c:cd:89:6e:af:a5:f9:ba:35:1e:3e:c6:17:
         62:a4:3c:49:53:21:3e:e9:91:89:6c:a6:8a:1b:6b:34:9d:ae:
         b0:d2:cc:76:60:5f:d5:82:7f:b9:6e:5f:70:9a:a7:66:22:24:
         59:c1:e2:31:89:a2:d2:84:ac:e5:c8:cf:80:03:0c:f8:62:4d:
         81:89:72:85:2e:7d:cb:46:3e:f5:f1:8e:1f:b4:d6:bc:55:87:
         b5:27:f6:f1:17:d5:ae:d3:d4:d9:6a:65:87:fc:d6:a4:fb:34:
         59:1d:eb:46:3f:75:01:ab:b2:e3:1c:27:3c:ad:0c:9e:9e:3f:
         75:8d:86:e9:a6:7f:38:5c:b9:1d:bf:89:15:2a:9a:41:e0:b3:
         8b:ae:8f:89:04:70:02:80:01:69:e9:fb:01:c9:74:79:d1:56:
         18:1c:d4:99:6d:fd:de:4e:3e:4e:8d:8c:ba:04:cb:41:3b:a0:
         26:8b:d4:b2:43:b8:9b:72:15:5e:b0:e0:82:b4:c3:52:07:80:
         c4:5b:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:36 2026 by rpki-client