Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa
File:                     2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier:          Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=
Subject key identifier:   B9:3F:7F:93:8E:37:D9:23:F9:60:B4:DD:B2:63:92:20:E7:36:5F:11
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       54
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:39 +0000
ROA not before:           Fri 17 Oct 2025 13:35:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55933
IP address blocks:        103.237.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Oct 17 13:35:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3da03-e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:62:08:c4:d8:34:02:5a:e2:b5:63:0c:67:
                    5e:3a:96:c1:e4:3a:6c:95:e7:7f:62:85:1f:1f:e1:
                    0e:cf:39:c4:12:db:29:a4:e1:6c:af:ad:92:34:2d:
                    f0:4d:4f:b1:7c:c0:c3:de:4c:0d:68:ea:01:55:47:
                    dd:46:50:33:54:0e:c0:fb:6c:9d:de:9d:a9:57:2c:
                    a3:03:75:64:d5:63:f0:e8:0f:f0:5f:a3:1a:c4:89:
                    16:ab:77:64:99:f9:63:fe:18:9d:45:e4:5c:03:f3:
                    11:65:45:4b:49:0f:89:0b:f7:a7:65:82:99:37:0c:
                    11:73:a7:e0:c7:f7:39:05:0a:d1:7d:53:2a:64:2a:
                    dc:5d:f9:c9:cb:eb:56:bc:97:35:aa:7c:11:dd:a9:
                    e0:bb:64:b1:c9:98:38:86:a5:d4:29:2f:9f:7d:0c:
                    d2:76:0d:3e:dc:51:b2:49:9a:2a:87:b7:2b:78:73:
                    7d:a2:7d:ba:1f:d3:36:89:14:36:37:9e:4f:06:df:
                    63:50:96:b3:72:76:b8:89:8d:7b:1c:fe:1d:df:af:
                    50:0f:1b:f4:de:2b:55:02:5f:76:5f:3c:22:ef:2c:
                    f4:8e:6f:b1:c8:b4:7a:8f:04:f7:e0:14:79:5e:6d:
                    89:bd:7c:74:bd:7a:ce:07:4a:e0:f1:ab:52:4c:56:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3F:7F:93:8E:37:D9:23:F9:60:B4:DD:B2:63:92:20:E7:36:5F:11
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:c5:8f:ca:84:0c:2e:d7:ba:99:89:10:c1:a5:a0:75:87:
         e6:56:3f:6f:6d:40:37:93:be:e5:c2:e7:73:d8:13:99:be:7c:
         ea:38:79:22:7a:c7:a4:98:66:ee:fd:35:93:5d:79:20:04:6f:
         82:fb:d0:22:91:a5:ed:a4:81:9c:c1:16:9b:49:da:fb:69:fd:
         63:c9:cd:f2:43:d4:2a:b2:6e:cc:68:07:7f:c4:21:1c:a5:66:
         51:b2:eb:2a:ca:bc:42:f6:3c:47:1e:54:c3:b3:37:16:f7:ee:
         ac:d2:d8:8f:6c:f1:37:9e:e4:68:b5:f2:5a:b7:e5:5f:fb:38:
         8f:82:f9:7c:37:bd:17:de:f1:7b:1d:f4:c5:43:85:ee:0a:b3:
         ae:64:25:fb:02:96:bc:10:d0:69:a2:f5:f8:99:ff:18:6e:61:
         f0:4e:fc:59:43:9a:85:7e:94:95:0c:ed:45:8d:b2:3a:24:dd:
         18:27:c8:6b:b8:57:d1:1c:4a:ed:76:0b:0b:c7:d3:f0:57:be:
         bb:3d:c9:1c:ff:9c:3d:6e:9d:59:14:44:7e:ac:0c:5e:8d:6d:
         bb:1a:d4:90:98:81:16:1a:27:58:dd:a1:43:7e:ea:e6:0f:54:
         93:e4:dc:7d:f7:d7:16:34:33:63:1b:26:38:3e:b9:83:84:1e:
         9d:50:4c:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:53 2026 by rpki-client