Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/E097013E910C11EFB994E187C4F9AE02.roa
File:                     E097013E910C11EFB994E187C4F9AE02.roa (raw, json)
Hash identifier:          ZdZHwag+6Cd1JHK+9hW+Jbti2LN6Ngqb+sChSvSjYdc=
Subject key identifier:   48:13:FA:81:D9:71:38:3B:16:F7:0B:68:78:0C:64:83:5A:D7:2B:FF
Certificate issuer:       /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Certificate serial:       050E
Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/E097013E910C11EFB994E187C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:42 +0000
ROA not before:           Thu 07 Aug 2025 00:36:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56038
IP address blocks:        103.152.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
                          rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
        Validity
            Not Before: Aug  7 00:36:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a483b6-2674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:b7:d4:57:b6:64:a5:bf:8e:1e:8d:da:d0:
                    a6:83:d6:ca:8f:bf:b4:ff:94:56:ed:4c:78:a2:ba:
                    64:45:98:6e:16:8b:46:95:0d:5f:1d:32:ba:f4:73:
                    c3:a2:62:a1:88:71:9b:c7:c1:22:77:fd:f5:4f:16:
                    fb:9d:6b:3e:52:ce:8b:69:e5:68:0d:fe:e5:e1:e6:
                    38:45:37:f6:0c:3e:7f:79:da:9b:25:06:d1:5c:e8:
                    ea:f2:8e:2f:63:58:79:40:07:94:29:14:87:c5:7b:
                    28:ac:e3:72:59:44:ac:18:48:c7:55:c8:6c:5b:24:
                    63:a1:65:8c:6e:b3:9c:0f:f6:80:fa:a9:c2:06:8a:
                    63:58:8e:dc:6d:7e:a5:05:8e:40:87:66:f3:d2:d6:
                    fe:f0:cc:d8:34:3d:d9:82:2b:c0:2c:04:8d:27:7b:
                    26:a2:15:a0:4e:35:69:b3:00:d4:6a:f6:e1:66:b1:
                    74:a4:5e:4e:4a:75:3f:0e:e4:4c:ee:75:10:20:d8:
                    23:5c:b1:7c:27:c3:ad:25:a7:f0:ed:7a:32:fe:55:
                    11:54:4c:80:c5:69:2b:6f:c5:26:53:fa:1e:e1:08:
                    b4:78:ec:22:e8:4a:58:41:80:54:53:a6:38:b1:3c:
                    b8:35:b8:29:51:4f:d8:ed:10:39:06:79:ea:11:0a:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:FA:81:D9:71:38:3B:16:F7:0B:68:78:0C:64:83:5A:D7:2B:FF
            X509v3 Authority Key Identifier:
                keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/E097013E910C11EFB994E187C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:1f:f9:8a:de:f3:db:fa:40:a2:40:61:41:da:5a:11:94:
         19:e1:85:05:f6:51:8e:d3:7a:9a:9b:44:fe:91:06:98:81:1a:
         88:a6:27:9c:fa:a4:5f:4f:68:f7:36:65:3d:42:5c:44:22:1e:
         a3:50:68:12:66:9d:f1:81:5e:3b:ec:5f:75:5e:67:6a:7c:fe:
         4d:38:47:78:d7:08:00:93:11:09:17:0a:9e:7d:1b:b5:97:21:
         81:3e:7f:9e:90:49:a5:9a:7b:b0:7e:a3:2c:58:f0:1b:ce:d7:
         be:70:ce:3b:db:8e:56:35:3a:24:07:66:14:71:cf:ba:6d:1d:
         55:56:39:5a:ab:47:b6:eb:cb:8f:31:8d:61:08:9a:d2:1c:b2:
         e4:56:4c:50:f3:f1:da:b5:38:ec:4e:ef:32:b1:d1:5e:2b:e0:
         e4:ba:30:65:5a:80:e7:e6:fc:b3:e2:c2:29:38:19:d7:cd:d8:
         79:e9:94:3f:fe:40:63:8e:e0:81:eb:9d:85:de:8f:dd:d3:22:
         9c:92:23:30:35:8f:04:ae:55:4b:16:28:34:93:78:20:00:d8:
         7e:cb:57:b6:b2:7e:98:f2:e1:7d:1d:7b:b2:c4:9e:36:46:e0:
         c0:5d:d9:11:bb:42:1a:d0:c3:e8:c6:43:79:76:b2:78:6e:d3:
         f2:9d:9c:e3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy
RUYwMzlDRTgwHhcNMjUwODA3MDAzNjM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNiNi0yNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xW31Fe2ZKW/jh6N2tCmg9bKj7+0/5RW7Ux4orpkRZhuFotGlQ1fHTK69HPD
omKhiHGbx8Eid/31Txb7nWs+Us6LaeVoDf7l4eY4RTf2DD5/edqbJQbRXOjq8o4v
Y1h5QAeUKRSHxXsorONyWUSsGEjHVchsWyRjoWWMbrOcD/aA+qnCBopjWI7cbX6l
BY5Ah2bz0tb+8MzYND3ZgivALASNJ3smohWgTjVpswDUavbhZrF0pF5OSnU/DuRM
7nUQINgjXLF8J8OtJafw7Xoy/lURVEyAxWkrb8UmU/oe4Qi0eOwi6EpYQYBUU6Y4
sTy4NbgpUU/Y7RA5BnnqEQrb3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEgT+oHZ
cTg7FvcLaHgMZINa1yv/MB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC
NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcxMEMvMkYzNjc2MTI0QjYwMTFFQzk1NTREQzUwQzRGOUFFMDIvRTA5NzAxM0U5
MTBDMTFFRkI5OTRFMTg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5hAMA0GCSqGSIb3DQEBCwUAA4IBAQA7vB/5it7z2/pAokBhQdpa
EZQZ4YUF9lGO03qam0T+kQaYgRqIpiec+qRfT2j3NmU9QlxEIh6jUGgSZp3xgV47
7F91XmdqfP5NOEd41wgAkxEJFwqefRu1lyGBPn+ekEmlmnuwfqMsWPAbzte+cM47
245WNTokB2YUcc+6bR1VVjlaq0e268uPMY1hCJrSHLLkVkxQ8/HatTjsTu8ysdFe
K+DkujBlWoDn5vyz4sIpOBnXzdh56ZQ//kBjjuCB652F3o/d0yKckiMwNY8ErlVL
Fig0k3ggANh+y1e2sn6Y8uF9HXuyxJ42RuDAXdkRu0Ia0MPoxkN5drJ4btPynZzj
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:09 2026 by rpki-client