Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa
File:                     E0A2D2B040C811EE90859140C4F9AE02.roa (raw, json)
Hash identifier:          G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=
Subject key identifier:   54:15:2E:43:31:1D:46:AC:41:1D:36:5F:07:76:3D:DB:08:04:06:00
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11AB
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:55 +0000
ROA not before:           Thu 26 Feb 2026 17:15:10 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135628
IP address blocks:        103.132.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4523 (0x11ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Feb 26 17:15:10 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472a7-bf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:d4:ff:c2:36:3d:2c:df:1f:c9:ff:07:87:
                    be:b2:10:1a:c4:8a:6b:75:8f:0f:d8:70:6e:2a:08:
                    a7:d9:bf:28:b3:a9:0f:4b:f0:28:09:ec:52:ef:44:
                    23:02:0b:97:61:1e:df:cb:54:eb:fd:4d:46:de:49:
                    8f:b9:8f:e9:23:64:42:25:d3:63:82:8b:db:b0:f9:
                    dc:98:57:32:19:58:91:c8:f5:f5:50:0d:7f:83:db:
                    f2:0c:68:3d:f8:ba:e6:cd:27:95:4a:f5:67:8b:74:
                    a9:59:b7:da:15:ec:4a:96:c6:e3:59:50:5e:a7:f7:
                    31:1c:c5:cd:55:fb:75:53:94:0e:d5:73:7c:36:08:
                    c2:4b:ea:08:3d:75:43:99:36:2a:4b:0a:c3:28:a3:
                    7b:68:8f:db:20:7d:6f:b4:aa:ad:62:dd:9c:23:00:
                    e2:35:0f:23:20:1e:e9:7b:53:6a:de:f3:53:de:12:
                    a7:1b:b0:af:5a:5b:ed:08:3f:76:c3:ad:d3:b7:57:
                    0d:42:93:9e:e5:6b:30:ac:9c:03:8d:e6:89:fc:cf:
                    8d:0f:1e:02:d6:c9:ec:3d:da:3a:57:84:33:7e:99:
                    d6:7d:de:41:c1:4f:c1:28:0d:26:01:f4:3e:3c:dc:
                    f7:72:c7:48:b6:62:ae:32:fe:bc:3d:57:99:1c:ad:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:2E:43:31:1D:46:AC:41:1D:36:5F:07:76:3D:DB:08:04:06:00
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:f9:fd:60:8a:50:ba:b5:71:95:cc:04:ba:80:b9:aa:ab:
         ef:ce:d1:84:fb:f4:63:a6:f1:86:8a:20:e6:6d:96:19:f8:a0:
         4f:a4:df:e1:95:c6:56:e9:c5:9d:68:65:96:ea:c2:7a:c3:d6:
         1a:20:8a:0a:1a:6a:f7:e6:7d:70:98:d6:55:03:63:2a:77:f7:
         70:cf:46:67:24:9f:60:ee:7a:c7:ed:86:de:3b:ed:a9:71:01:
         a1:fe:06:c6:14:03:b4:83:25:02:a8:15:89:ff:66:7f:21:f3:
         7c:1d:5e:34:72:f4:cd:fd:1b:97:39:1d:94:bc:e2:7d:2a:c8:
         7e:76:a1:f6:c1:47:82:66:57:be:00:ac:8b:9a:de:b3:1b:ef:
         71:ba:f2:0b:b7:63:ca:5b:e7:63:50:bb:cc:b3:2f:c6:a8:6c:
         06:18:34:17:c1:19:a6:30:79:90:a7:5c:bf:e8:c5:59:b0:c4:
         33:77:74:2c:51:9a:8f:84:12:4f:ea:7b:ed:a9:5b:dd:d2:4d:
         5c:68:53:32:c5:55:d3:8d:e6:e9:94:96:6f:0b:72:f3:19:30:
         af:2a:6b:82:4c:59:37:1b:00:34:db:eb:2d:7d:a9:d6:c7:9e:
         84:cf:3f:6a:5d:c8:e3:23:ae:d2:19:b7:bb:de:6f:4a:6a:83:
         da:e7:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:36 2026 by rpki-client