Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/53093BC469DE11F094E16744C4F9AE02.roa
File:                     53093BC469DE11F094E16744C4F9AE02.roa (raw, json)
Hash identifier:          1p73ZeotPbJ3TemVvVZqXvbSf05sdp3huzlwxxL33ww=
Subject key identifier:   8A:D8:AF:77:AD:0B:A6:FD:EF:BC:A2:92:CD:F1:6A:6E:B9:43:6D:F5
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       0828
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/53093BC469DE11F094E16744C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:39 +0000
ROA not before:           Thu 16 Oct 2025 23:01:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134926
IP address blocks:        103.142.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: Oct 16 23:01:03 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a452b7-c7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:84:b2:99:79:e6:01:0c:f1:c6:8b:fd:74:
                    c7:6e:3b:ac:09:a4:0c:5e:2d:80:f0:b1:a9:a8:5b:
                    3a:16:ea:31:2a:50:55:8a:1c:d5:57:2c:14:c3:07:
                    c4:a5:8c:e1:de:40:ce:87:63:e3:59:cc:dc:42:47:
                    67:a3:2e:12:cb:65:80:e6:43:e4:12:bf:36:30:64:
                    c4:28:17:2b:89:87:02:75:4e:8e:74:94:fe:42:ed:
                    77:81:97:cb:ad:a6:86:7a:30:27:a5:75:85:14:16:
                    07:4b:e3:d8:61:05:6f:6f:1e:1c:de:63:5c:60:66:
                    85:04:28:38:00:05:fb:d5:c3:35:6a:12:d5:10:81:
                    58:98:00:1c:69:e7:aa:41:69:58:52:d0:32:0c:9e:
                    e5:af:74:a8:0e:24:a5:66:38:bd:8b:ae:30:cd:0d:
                    9c:ee:fa:38:eb:26:74:d7:4b:53:cf:ad:29:12:eb:
                    3d:a0:07:e5:bf:be:34:70:e5:ca:58:96:55:fc:8d:
                    07:84:e1:0b:50:03:5e:71:82:9b:c5:a6:41:6f:d7:
                    36:af:83:60:f9:77:81:3e:fd:1d:6a:71:bb:e1:bb:
                    03:1f:71:33:d3:1a:6e:75:36:7d:31:2b:7d:48:f0:
                    75:0d:fc:53:26:59:9c:f8:ca:81:b9:e0:c1:ec:ea:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:AF:77:AD:0B:A6:FD:EF:BC:A2:92:CD:F1:6A:6E:B9:43:6D:F5
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/53093BC469DE11F094E16744C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:79:bb:6a:9d:f7:13:20:18:51:6a:4b:4e:9b:7b:1c:3b:18:
         ee:33:f2:76:c7:41:99:fa:10:d9:07:87:80:22:27:32:78:90:
         d9:c5:28:13:e6:d1:76:32:63:a1:fb:20:6a:7a:03:31:86:e1:
         c5:93:6f:95:ed:1b:1e:2f:15:b2:5e:b3:a5:5f:d4:84:e9:80:
         03:84:40:5c:74:0a:56:ad:9a:0d:48:13:6f:e1:02:ca:16:01:
         e8:0f:9b:c7:a7:84:9b:36:05:ad:3c:cd:28:eb:a5:74:ff:f8:
         80:81:3d:62:5c:0b:1e:aa:6d:a1:ec:16:25:9c:26:0e:2d:34:
         d5:ea:61:09:9c:52:ba:0f:40:f4:33:09:a9:83:66:31:90:d1:
         ef:d2:97:d9:bd:38:88:94:45:eb:6e:94:c7:41:2e:66:11:28:
         0d:5c:48:93:a3:18:43:b3:d6:91:b6:25:96:57:3f:b0:4c:30:
         e6:26:73:9a:f1:af:10:f2:c7:75:32:47:ea:15:b9:68:f1:94:
         ca:d5:38:96:d6:3e:21:9f:aa:03:9f:16:ea:f9:81:34:e7:c1:
         78:d2:81:d4:30:d3:36:07:c1:b7:54:12:29:4e:71:0d:d2:aa:
         82:68:fd:d7:08:3e:d1:77:62:5b:54:8e:35:b0:28:c9:05:74:
         07:7f:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:21 2026 by rpki-client