Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
File:                     FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (raw, json)
Hash identifier:          EhzEr12MKYRhFjAu1OCUgJCldiu5pOljwgsY2sAb5cE=
Subject key identifier:   14:99:25:4F:23:6B:46:54:5F:99:96:15:2D:B9:B7:91:90:52:3E:E3
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       06B5
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
Signing time:             Thu 26 Mar 2026 22:30:09 +0000
ROA not before:           Thu 26 Mar 2026 22:30:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134136
IP address blocks:        103.166.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Mar 26 22:30:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69c5b370-a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:58:45:90:9e:60:f9:9e:a2:11:a3:8d:1b:
                    ef:f4:60:1f:4f:e7:8c:a8:50:f3:ec:43:d0:ce:33:
                    9e:c2:5b:23:c7:b0:48:94:e9:bb:12:14:31:0c:40:
                    e9:fe:e4:71:69:71:bc:93:84:ed:1c:91:ac:e3:11:
                    5a:e9:96:7d:96:46:3c:b5:90:7d:11:9f:2d:b2:bb:
                    af:05:3d:df:03:17:f1:c7:fd:5e:36:9b:c3:c3:69:
                    da:0d:ee:2d:9a:8c:94:25:72:12:cd:38:9d:71:0f:
                    3b:18:99:84:f9:dc:ef:24:73:1e:b4:78:75:d0:d6:
                    ca:bf:1c:78:c2:f3:3d:d4:4e:3b:28:72:fa:e6:18:
                    82:60:d4:06:35:87:3f:d9:55:f2:9b:c3:87:d0:79:
                    f2:bd:6f:95:de:c7:93:50:96:54:6a:47:65:80:a5:
                    8c:76:92:f7:66:0b:0f:8d:52:91:5e:c6:0e:48:1a:
                    15:05:74:b2:dc:49:d9:4f:57:96:c0:25:5c:69:1b:
                    e4:c4:41:08:15:25:8c:c0:6f:a8:ad:59:c4:86:87:
                    94:86:5e:08:92:e0:26:90:da:c1:96:ad:dd:ee:ec:
                    56:91:f9:54:e7:9f:cd:97:49:21:72:3a:dc:71:1a:
                    0c:93:4e:e4:da:9d:47:bb:a7:77:d9:a4:5a:6e:0b:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:25:4F:23:6B:46:54:5F:99:96:15:2D:B9:B7:91:90:52:3E:E3
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:47:6f:9b:13:90:0a:76:71:7d:20:be:e3:eb:63:53:17:
         b8:e0:3a:12:e0:ad:98:31:ed:08:aa:8b:de:08:95:31:4a:bd:
         60:bc:1f:11:e5:12:b7:4a:f1:3d:5e:c0:15:5c:fc:1b:08:3e:
         d0:ea:61:7f:a4:f6:d1:bd:93:c6:9c:90:c3:ec:b4:b2:35:4f:
         65:6c:22:8d:04:6c:6a:83:c1:2c:aa:df:ce:d1:f3:37:21:79:
         91:fe:44:15:08:54:20:ed:f9:c9:12:7f:dc:6c:91:85:72:1f:
         94:d7:cc:d9:e4:8a:29:f0:b6:ad:0f:7e:aa:98:24:c9:fb:7f:
         d8:77:36:e2:6b:8b:ab:bc:fe:6b:38:10:34:21:91:89:6b:8f:
         90:0e:9b:bd:69:03:57:18:ad:95:4f:9c:93:d9:27:5f:1b:aa:
         01:dd:71:7e:17:56:50:4f:4d:8d:df:7e:10:6f:f1:7a:61:b1:
         8a:e0:a4:03:dc:7f:9c:63:2d:62:27:83:25:08:94:46:d0:85:
         85:62:c5:a4:34:4a:e7:b7:97:f4:d0:32:5e:45:4a:d7:eb:b2:
         d6:28:14:82:8a:86:fe:45:69:90:0e:03:70:be:49:e0:0a:4c:
         8d:b6:e1:2e:29:dd:bf:c9:41:63:e5:d3:bc:41:8f:e5:81:f8:
         9e:86:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:00 2026 by rpki-client