Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/E2B16FF23C8911F1A9897A359C833773.roa
File:                     E2B16FF23C8911F1A9897A359C833773.roa (raw, json)
Hash identifier:          i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=
Subject key identifier:   6E:85:5B:08:1B:0B:D7:DB:30:AA:4F:3F:DE:48:22:C8:D9:7B:6B:62
Certificate issuer:       /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial:       1366
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/E2B16FF23C8911F1A9897A359C833773.roa
Signing time:             Sun 26 Apr 2026 23:33:17 +0000
ROA not before:           Sun 26 Apr 2026 23:33:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133953
IP address blocks:        103.252.244.0/24 maxlen: 24
                          210.211.30.0/23 maxlen: 23
                          210.211.30.0/24 maxlen: 24
                          210.211.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
                          rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4966 (0x1366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
        Validity
            Not Before: Apr 26 23:33:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69eea0bd-8622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:69:4a:0e:7a:c9:30:bf:b3:09:00:0d:4f:
                    3c:c2:c7:45:2a:ea:bd:fc:84:5b:9a:67:40:63:ff:
                    f2:24:c7:fb:57:de:23:98:d5:c5:23:cc:91:a9:23:
                    37:a9:84:b4:37:6e:04:4d:0c:5c:38:1e:44:43:aa:
                    32:23:45:dd:31:c0:39:cc:1c:33:50:6b:94:90:ed:
                    a3:f9:52:d0:5b:99:c1:48:ca:a4:8e:65:85:a1:4f:
                    f2:26:ea:07:2b:0c:26:b5:16:57:71:e8:0a:55:05:
                    da:b1:59:97:25:53:85:90:75:0a:0d:ce:81:92:a3:
                    79:13:79:ad:f2:e7:ab:a7:ea:29:50:eb:08:02:8e:
                    b7:1b:42:92:58:96:cf:27:bf:b1:d4:9a:1c:4a:00:
                    72:23:3d:0f:c9:64:ea:40:b5:4e:1e:85:b7:8b:be:
                    2c:6f:72:6a:e0:61:1e:83:e4:ab:d0:9e:e3:82:5c:
                    f8:43:52:07:04:fb:76:30:a0:eb:ab:01:f5:ee:5a:
                    80:5a:ed:37:20:12:0e:c6:fe:d9:c8:0a:1a:10:d6:
                    47:d6:56:f6:ef:a0:8a:8b:e5:9d:f0:b4:3e:c4:63:
                    3a:36:7a:22:db:e8:b2:58:c0:23:92:a4:a7:c8:a9:
                    67:1a:00:70:7f:fc:aa:f8:8b:78:56:ef:d9:8a:14:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:5B:08:1B:0B:D7:DB:30:AA:4F:3F:DE:48:22:C8:D9:7B:6B:62
            X509v3 Authority Key Identifier:
                keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/E2B16FF23C8911F1A9897A359C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.244.0/24
                  210.211.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:b0:4f:4e:77:0a:42:57:da:67:aa:bf:7c:12:f6:f4:01:
         88:3a:a4:f3:51:e0:8d:01:37:2e:86:b7:20:10:7a:e3:06:9a:
         1e:73:dd:36:ce:3b:77:99:17:ff:58:8f:37:e1:3c:db:e0:a0:
         b7:80:e4:2f:54:c2:45:cc:29:35:93:5f:84:6f:05:5d:a8:23:
         ea:a8:46:be:a6:e1:c0:f8:70:46:6d:0f:16:f1:9c:5b:00:d9:
         6e:53:dc:5b:25:7f:23:88:83:51:f6:93:6e:01:97:8f:00:c2:
         37:dd:7e:33:91:94:f5:63:22:1a:00:ca:6b:a0:b4:e4:ef:05:
         8a:ca:d2:82:f4:6f:7f:41:9e:a5:9f:da:c0:3f:b8:aa:ab:dc:
         79:f7:a9:15:8b:02:01:ea:87:c3:6b:6f:b1:75:df:28:f3:c4:
         7c:0a:1a:77:f5:89:d6:1e:7a:5c:ca:a4:d4:f1:97:21:a7:cb:
         1c:75:da:87:53:db:79:e5:62:4b:1d:da:2b:e7:e5:05:d7:b4:
         84:7d:b0:6a:67:cd:98:6a:04:22:9d:d4:ff:02:a8:a9:9b:5f:
         0d:67:a5:75:c8:78:3e:b3:c2:f9:35:6e:09:1f:68:ab:5f:a0:
         b5:ef:79:0e:dc:9a:67:fe:c3:8d:78:bb:78:b2:73:da:8c:7d:
         ec:22:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:36 2026 by rpki-client