Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa
File:                     E070CA0CAA2E11EEA404D421C4F9AE02.roa (raw, json)
Hash identifier:          c08Yo3FkbztumTfTjD3wGOX0rDDCbgj4ZBpj86gFQsY=
Subject key identifier:   45:DA:D8:2D:81:59:F4:26:76:21:1D:55:DD:E3:10:37:8A:7D:3E:F1
Certificate issuer:       /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
Certificate serial:       019F
Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:02:22 +0000
ROA not before:           Wed 23 Apr 2025 04:31:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.164.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl
                          rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
        Validity
            Not Before: Apr 23 04:31:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a41cbe-5feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:a6:98:78:5e:c7:23:1a:a8:93:ab:d3:b3:
                    87:40:6d:db:0a:bb:37:86:7f:8f:27:38:e3:93:ac:
                    b6:9a:a4:9b:a0:2d:63:cf:6a:5b:fe:a0:ea:ba:30:
                    cc:2e:ae:98:fd:56:f4:cc:17:1b:26:8e:06:bc:1c:
                    22:f1:ea:cf:c1:b4:53:09:af:f9:33:1e:d4:af:37:
                    24:6a:1f:80:54:fb:7c:a3:a3:38:d6:be:21:4d:02:
                    f2:33:de:f0:9c:fd:21:35:72:ae:bf:d7:5a:80:72:
                    35:46:b0:e9:42:c1:8d:7f:b8:41:df:21:4d:c7:75:
                    a2:8d:38:69:87:cb:34:3a:34:20:c6:e2:48:88:74:
                    fa:58:2f:58:23:ee:59:aa:f1:53:93:a2:34:79:f3:
                    e2:26:17:bd:04:f7:17:d1:8e:62:fc:71:5f:e8:9e:
                    d0:a6:76:b8:9d:63:d6:c3:1a:5a:3b:8b:b3:28:c5:
                    b7:a8:eb:4e:c8:3f:01:42:35:f7:bc:59:be:3a:90:
                    c1:37:08:f3:06:44:57:97:88:b5:02:12:1c:70:c6:
                    40:ec:25:dd:5a:04:fb:ab:18:cc:3f:ef:89:56:cf:
                    c4:ad:44:18:ce:04:54:43:aa:65:9b:57:7c:cb:ad:
                    cd:b8:55:8a:f6:d8:4b:f5:32:ac:a5:28:0a:69:bd:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:D8:2D:81:59:F4:26:76:21:1D:55:DD:E3:10:37:8A:7D:3E:F1
            X509v3 Authority Key Identifier:
                keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:ad:07:47:4e:46:a8:f2:0a:98:9b:2d:18:d1:1f:91:0a:
         b8:70:8d:a2:3c:fe:bb:c1:84:82:f8:96:35:3f:58:37:34:dc:
         5c:5c:8a:c2:d8:f9:18:36:6f:10:ce:c5:66:62:87:aa:ea:2a:
         df:a7:17:be:97:bb:0c:c7:0d:ab:ed:bc:e2:c5:c5:b7:ab:7b:
         4d:16:24:ae:3d:ef:79:96:c2:53:62:62:1b:04:b3:43:8a:17:
         07:d3:ee:e2:67:e0:4f:fa:49:24:38:f3:93:fe:70:3e:a0:47:
         7a:0b:b9:e7:a3:96:18:ea:6e:97:55:ba:e8:ab:51:b3:db:29:
         74:75:a6:55:6d:5a:65:87:00:ec:db:bd:48:14:37:8e:5d:6c:
         d4:72:cd:fd:ab:c8:78:b5:ae:ea:7d:1f:67:7f:b8:33:cf:5b:
         10:89:a7:1e:80:17:f8:28:08:23:20:80:72:b8:7f:22:2b:b6:
         63:44:32:da:f3:3e:90:02:f1:f8:14:2f:99:b1:67:e1:74:cc:
         1c:71:72:84:36:65:9b:81:c7:b3:87:88:32:18:0d:c8:56:8a:
         34:01:7d:4e:65:40:99:7d:ea:3e:75:de:54:4f:d0:67:83:8c:
         5b:ad:a6:79:6f:4b:2c:1e:71:2d:01:10:b9:78:98:73:2e:db:
         f1:6b:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:01 2026 by rpki-client