Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/02D13C94D4B211F093413921C4F9AE02.roa
File:                     02D13C94D4B211F093413921C4F9AE02.roa (raw, json)
Hash identifier:          5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=
Subject key identifier:   40:45:4C:9C:B3:7C:BC:85:FD:F0:1B:8C:FC:62:26:E3:DA:4F:5D:1B
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       04C9
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/02D13C94D4B211F093413921C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:59:40 +0000
ROA not before:           Tue 09 Dec 2025 03:49:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132110
IP address blocks:        103.175.14.0/24 maxlen: 24
                          103.175.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Dec  9 03:49:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a42a2b-f82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f6:a9:e7:04:ed:c3:9c:b0:6f:a5:c9:2a:0e:
                    08:b8:22:b8:39:32:9d:a0:25:29:c0:10:23:8d:83:
                    0c:54:5f:fe:7a:c6:c0:61:7a:20:f2:d9:cc:bf:59:
                    04:28:41:5a:d4:59:e3:d5:ea:ac:b5:32:bb:35:d1:
                    0b:8b:ce:9b:9d:8e:66:8a:5d:1e:30:37:3d:1e:9f:
                    5d:7b:8e:4b:e5:be:ca:12:8f:da:08:7f:af:06:28:
                    1b:dd:6d:75:b0:f0:29:1d:5a:e8:0e:a1:c2:5c:5d:
                    8b:84:e4:1e:00:29:7b:92:6b:22:14:f0:cf:53:7b:
                    5e:a5:8e:01:0e:c6:92:4f:0a:1f:45:84:b8:85:e9:
                    11:91:96:ae:c3:1b:9a:93:ea:eb:91:30:ee:82:d3:
                    f5:e5:1e:10:0c:6a:8e:b1:fe:d1:ee:05:39:61:73:
                    a1:57:ce:d1:74:8c:5a:ad:ee:59:a7:7d:8a:62:78:
                    ca:b3:f1:9d:1e:76:a1:ff:14:8a:2e:a3:dc:c6:d9:
                    4e:74:9d:fd:b0:7b:46:48:1b:c9:9f:e9:23:ae:1a:
                    fc:b1:60:9c:57:35:0a:08:fc:93:23:64:19:fa:46:
                    c1:39:53:21:7d:12:e1:d4:d8:46:da:57:1b:3a:68:
                    48:a3:f4:b0:3c:c6:1c:b6:e0:d3:24:e6:72:d4:72:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:4C:9C:B3:7C:BC:85:FD:F0:1B:8C:FC:62:26:E3:DA:4F:5D:1B
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/02D13C94D4B211F093413921C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:15:db:dd:d1:8c:2b:51:66:33:ce:7b:13:e7:5e:1e:cf:05:
         10:c2:bf:ee:07:da:43:5e:52:50:a1:1a:93:dd:c1:84:52:da:
         d8:7b:c2:c1:c4:6c:9a:b3:d0:49:15:e5:8e:ab:73:b2:81:23:
         33:a6:af:5c:a0:b3:8f:a8:e8:d7:ff:f0:42:ac:21:29:80:4a:
         d0:fd:a2:92:34:83:08:bc:eb:fa:b3:91:2b:b6:68:77:1c:85:
         e0:95:93:dc:d9:f5:04:ad:d4:1b:a4:21:fb:f4:c5:95:43:a8:
         b1:20:89:4e:26:52:f1:72:11:ac:29:ef:1b:fe:c0:44:8c:84:
         0b:0e:c7:f7:78:c0:0e:05:f6:20:8b:39:75:1d:f4:23:81:04:
         0f:cf:0d:11:d4:27:30:36:fe:8f:1d:09:43:fc:31:6c:c6:6d:
         17:86:66:15:e9:cd:22:59:36:4a:17:69:3f:ae:f1:09:e2:78:
         9f:e3:e6:69:84:bf:c8:19:15:88:1f:ea:99:da:8a:2c:e9:f7:
         f3:e2:da:8d:38:bf:c1:4e:ca:e1:4a:c2:57:9d:64:78:71:af:
         eb:29:b8:08:ca:56:16:f2:81:81:ec:de:ba:7d:56:b6:eb:e2:
         61:13:53:bb:f8:29:4f:b3:cc:a2:7e:c1:94:97:7c:8d:ea:5e:
         3d:cd:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:49 2026 by rpki-client