Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
File:                     5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (raw, json)
Hash identifier:          WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=
Subject key identifier:   92:F8:5E:73:15:37:C4:47:45:6D:41:64:05:5B:E0:A8:CE:89:48:6F
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       06B0
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:48:39 +0000
ROA not before:           Tue 06 Jan 2026 22:18:29 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134804
IP address blocks:        103.13.132.0/23 maxlen: 23
                          103.13.132.0/24 maxlen: 24
                          103.13.133.0/24 maxlen: 24
                          2001:df6:89c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: Jan  6 22:18:29 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46de7-507b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:e6:6b:17:b0:00:25:61:c1:a6:db:ab:b5:
                    20:b5:5b:43:a5:c9:15:ad:77:80:79:ad:37:10:50:
                    b2:2e:24:88:fc:08:dd:53:7d:39:99:9a:7c:83:8c:
                    9b:b1:7e:04:76:38:64:c0:94:38:36:dd:4f:18:b9:
                    8f:de:b4:32:0e:cb:a2:b5:4e:ff:d8:2e:ae:5e:01:
                    55:99:db:b7:48:63:54:92:2b:bb:4e:7b:d8:1f:e2:
                    f6:f4:b1:86:db:b3:87:07:77:69:c0:bb:12:a1:e8:
                    58:b3:9a:74:b9:ed:14:52:19:92:01:b9:ba:17:6c:
                    28:7c:2a:f1:d1:3c:bd:c6:24:35:22:a4:0c:5c:a8:
                    e5:f6:b9:5f:f3:09:23:43:42:b2:ee:89:f9:50:ee:
                    3a:19:bb:e3:6a:76:dd:30:5f:96:82:3f:98:80:fc:
                    8b:bd:1f:c6:c9:13:09:52:d6:f0:42:f7:b9:fe:b0:
                    bc:17:a3:1b:9f:0c:15:f8:5a:20:ff:be:9a:e9:c3:
                    0d:bf:7b:4b:0c:40:67:2a:12:75:f2:8d:0c:ff:c9:
                    b7:d9:d4:bb:86:80:9e:00:56:7d:ba:6f:b2:1b:b7:
                    23:1d:c4:aa:d9:c6:86:51:78:1d:89:a8:2c:a8:b3:
                    48:5c:f3:40:76:91:8f:28:07:a6:d9:75:c5:04:b7:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:5E:73:15:37:C4:47:45:6D:41:64:05:5B:E0:A8:CE:89:48:6F
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.132.0/23
                IPv6:
                  2001:df6:89c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:34:d9:45:0c:51:0c:f7:c4:54:16:a7:20:86:6b:d8:95:
         32:56:a1:66:60:9c:2f:5f:86:a3:5a:a5:79:0f:e8:1f:d8:8d:
         bd:9a:74:a4:fa:5c:47:b6:9e:19:df:9e:a6:21:04:34:e5:72:
         39:99:d1:4c:54:05:7b:81:e5:ac:73:9e:0b:e7:0d:17:d1:58:
         76:e5:f6:58:76:ae:1b:22:76:4e:a5:03:db:53:38:47:08:fd:
         58:ce:de:ea:e0:e8:6e:0e:9c:0b:34:98:db:48:ad:4a:7d:51:
         67:aa:2d:59:7c:a9:76:83:6d:04:c3:ac:a2:fb:92:d9:42:f6:
         af:2f:05:d7:2c:d7:2b:5b:06:16:60:12:77:cb:68:27:da:1b:
         04:f7:25:e4:a0:43:05:36:b0:4c:5d:bc:d3:ec:1b:e4:5c:85:
         ce:1c:06:02:e4:46:09:1a:b5:5f:f8:cf:1a:d7:9b:ff:37:d9:
         e6:fc:ee:ae:41:bb:51:9f:84:42:b2:9a:da:26:55:60:ff:24:
         48:ca:26:5f:08:99:73:27:b0:20:7e:38:11:5f:4e:ab:cb:eb:
         43:93:0f:44:da:04:aa:21:48:4c:b0:e1:58:f7:2b:dc:e4:59:
         41:b7:15:73:f6:d5:db:58:ce:ed:0e:59:55:56:b2:69:8f:41:
         68:a8:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:51 2026 by rpki-client