Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa
File:                     E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (raw, json)
Hash identifier:          hOKbF/UZYbhecuwlV+zdHCPg8weFXKYWyqedrkILS2Y=
Subject key identifier:   D0:46:4D:F0:D8:56:A6:E9:E3:30:20:50:69:C3:98:00:84:61:F9:C7
Certificate issuer:       /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial:       017B
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:09:11 +0000
ROA not before:           Wed 29 Oct 2025 04:49:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139599
IP address blocks:        103.142.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
                          rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
        Validity
            Not Before: Oct 29 04:49:05 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5a817-7d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:13:a5:48:14:5b:2a:1f:5f:30:fd:06:cd:
                    6f:14:96:c6:35:30:d6:10:cc:32:ce:11:90:1a:d6:
                    89:8d:43:1d:02:30:49:b2:7b:c8:5c:ac:2b:04:58:
                    15:1a:0a:49:14:7c:f1:ec:5c:96:67:c1:df:41:d8:
                    bd:9a:e3:bd:48:00:d1:e4:3c:24:43:68:42:4a:77:
                    ed:bc:e7:7f:d0:ed:c5:6e:4c:30:f7:16:79:76:bd:
                    16:c7:3e:cf:da:58:14:28:78:d5:3c:0c:0d:9f:a7:
                    83:aa:2a:88:52:d2:7d:30:b8:3b:c8:67:89:e4:25:
                    4c:5c:0e:6b:c5:b7:66:57:fb:50:8f:52:90:17:36:
                    aa:cb:0d:ca:72:9d:61:c9:cc:c5:a4:f0:dc:13:f0:
                    91:b0:61:c0:81:93:4a:9f:c1:fb:0c:fa:eb:da:dc:
                    6c:5f:75:48:aa:c4:45:9e:71:7c:ce:44:7f:8b:a6:
                    f0:e5:9b:11:6b:52:d4:8b:df:9e:fe:45:01:c2:bc:
                    c5:c9:c2:1b:e5:d6:d2:f8:59:5b:7a:55:4b:41:be:
                    ee:af:b2:87:75:ea:ae:76:37:28:b7:75:9e:4c:24:
                    bd:8c:a1:cf:86:a1:b7:5f:54:89:cb:bf:c2:b8:ec:
                    6b:65:ed:bb:06:c4:fa:92:99:c2:ec:71:65:7d:52:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:4D:F0:D8:56:A6:E9:E3:30:20:50:69:C3:98:00:84:61:F9:C7
            X509v3 Authority Key Identifier:
                keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:1b:4f:db:33:60:8e:78:e2:28:c7:44:22:1d:b6:18:f4:
         c2:aa:10:e2:c4:18:56:02:f7:38:97:66:be:71:3d:0b:9b:5c:
         14:9f:6d:40:82:0a:9e:7f:bd:50:fa:ef:ce:9c:31:8e:8f:40:
         cd:8f:4e:e0:32:80:93:6b:b4:51:a6:62:a7:23:4c:d8:91:c8:
         56:14:66:05:fc:d9:7a:6d:98:c1:db:f1:1d:d1:14:d7:2f:43:
         d7:91:6b:4b:1a:19:60:0e:9d:9f:c1:82:53:5d:02:e9:ca:2e:
         28:f9:a2:fd:5d:51:b1:ad:cf:a2:23:c5:ea:ef:51:17:4f:c6:
         20:fe:55:21:33:ce:bf:1c:bf:5e:2c:9e:98:13:c0:eb:bc:60:
         48:34:61:ef:99:b1:5e:41:35:b2:e0:ac:da:48:d7:19:dc:b6:
         53:14:7f:05:b9:60:56:96:df:d7:fb:5a:06:ca:87:16:59:20:
         72:01:b0:7a:62:01:2b:db:49:5f:35:e7:9a:6c:b2:c8:47:a3:
         47:e6:f0:f7:c4:de:f7:07:8a:97:3b:1d:b1:ab:89:8b:c2:a0:
         cf:a6:bb:d0:e7:31:a1:2d:8d:06:29:ce:01:8a:f5:fa:d3:cc:
         05:be:42:36:18:55:ac:ee:15:5c:34:a7:d1:2c:4d:1b:39:43:
         87:58:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:35 2026 by rpki-client