Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
File:                     0913CC14A59911EFBA373D1BC4F9AE02.roa (raw, json)
Hash identifier:          orF+fCZHbfbY4ughfyxj36yRT872IPKzGFkv9K8j5SA=
Subject key identifier:   33:2B:52:E5:14:47:A8:E4:0F:FA:4E:FE:9F:5A:81:A1:22:38:0D:56
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       015D
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:43:34 +0000
ROA not before:           Mon 21 Jul 2025 23:36:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152734
IP address blocks:        103.142.150.0/23 maxlen: 23
                          103.142.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Jul 21 23:36:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a216-cd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:05:21:96:2b:58:fc:0f:68:da:cc:71:15:
                    de:4f:76:c0:72:8e:3a:c6:8c:5f:94:67:8e:9f:5e:
                    09:6e:25:ae:f2:62:65:f7:54:85:7d:cb:f7:cc:c6:
                    2d:76:02:a0:1f:b7:e6:0a:77:4c:4c:f8:f5:20:b1:
                    92:de:14:ce:48:c1:59:09:40:8d:32:c6:b5:7e:4d:
                    09:7b:28:58:6c:0e:ee:e6:67:3f:62:e6:a8:be:20:
                    4b:d5:81:93:59:9c:06:33:ad:3c:2f:5e:9b:d7:05:
                    63:b3:aa:21:90:8a:ad:89:75:5a:15:6f:ac:7a:4d:
                    8b:81:e1:86:cb:5a:81:a8:a6:ec:8a:0c:1e:f3:9d:
                    37:40:de:a4:e7:ed:ac:fd:a8:15:db:44:05:f8:1c:
                    d9:46:5e:89:e3:33:a1:ff:ba:a9:95:b2:9c:55:90:
                    48:19:94:a9:3a:fd:be:44:e1:fe:38:e9:3e:45:e3:
                    8d:51:64:94:3c:b9:b8:28:95:e5:2d:ea:ac:c7:4a:
                    a8:1e:41:1d:70:40:8d:7c:08:ec:1c:05:f0:db:b5:
                    d4:12:85:08:e2:e9:59:de:42:84:3a:df:14:7f:98:
                    c7:31:e9:73:24:51:5e:8f:f3:1b:35:f7:c9:fc:91:
                    80:f0:19:2d:5e:d3:89:c8:87:fa:14:b7:dd:64:76:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:52:E5:14:47:A8:E4:0F:FA:4E:FE:9F:5A:81:A1:22:38:0D:56
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:38:e8:9c:1b:fa:06:95:0e:02:60:ae:97:03:c8:20:9e:
         da:6c:d7:e9:1e:2c:51:c4:de:76:3a:63:f0:e7:08:c4:90:72:
         fb:33:8f:cc:b6:6c:78:97:a8:9f:84:71:7b:57:4c:ed:56:19:
         b1:9a:86:e2:5b:26:02:ed:3d:58:e7:ff:84:f3:61:5a:79:c5:
         7a:43:46:e9:44:09:fa:75:f1:54:d7:94:26:12:6b:d7:d9:f3:
         2e:3a:44:da:9d:9a:97:2a:18:29:0a:6c:df:08:3f:a7:b6:fc:
         d8:af:af:5c:32:90:77:85:2f:0d:a8:43:1d:e5:47:6e:09:8f:
         f1:56:7a:ef:56:ac:1f:69:9d:62:c5:78:5b:6c:9c:00:4d:e1:
         c3:19:91:83:ab:8e:c6:a4:3c:fc:9f:01:d2:42:9b:6a:28:d6:
         dd:77:9e:e8:40:2c:8d:9b:02:26:d4:9b:d3:f9:05:df:ba:60:
         e4:5a:a0:da:fe:c3:9d:65:b6:6f:2e:ab:47:5a:09:da:65:19:
         db:1f:86:e9:51:89:69:ab:b8:ae:31:b8:a4:2c:fc:46:d8:68:
         99:c1:4f:7c:0d:80:e1:95:5b:58:30:34:d2:f9:fb:0c:9b:eb:
         61:c0:92:49:fc:1d:16:12:34:43:3e:47:2f:87:83:96:67:59:
         4f:80:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:01 2026 by rpki-client