Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
File:                     E84DCBC422D211EDAF1F924EC4F9AE02.roa (raw, json)
Hash identifier:          pwlC3i6Dw77h4VjdOciKa1OoCdf0YqgEjmXujNfwxJs=
Subject key identifier:   97:9D:BC:75:CD:99:6A:CF:C8:B1:DB:63:A5:45:D8:1C:51:99:B1:1A
Certificate issuer:       /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial:       0712
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:31:09 +0000
ROA not before:           Sat 04 Oct 2025 22:23:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132382
IP address blocks:        103.14.172.0/24 maxlen: 24
                          103.14.173.0/24 maxlen: 24
                          103.14.174.0/24 maxlen: 24
                          103.14.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
                          rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
        Validity
            Not Before: Oct  4 22:23:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4318d-0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:fc:39:73:13:03:ae:4a:ad:52:68:90:5d:
                    c8:6b:8f:d5:d9:57:8e:89:be:67:27:e6:78:05:a3:
                    9a:24:8d:31:69:83:6f:75:98:19:9c:c1:94:9d:97:
                    1b:8f:65:69:c6:72:7e:0d:68:cf:4a:c3:21:e9:60:
                    24:2a:55:72:c7:9f:e6:7e:a0:38:f0:79:c0:b0:04:
                    68:7e:ad:fb:f8:c7:d5:e2:94:4a:c5:c7:92:e5:90:
                    ee:5d:62:11:9f:2c:0d:37:07:17:45:7e:34:e8:6c:
                    c9:80:24:1c:7a:f2:c4:20:25:2b:e0:3a:fb:50:c3:
                    55:7a:24:0c:0b:4e:fb:6b:8d:d1:97:ab:1b:fb:77:
                    e5:5c:a5:c7:0f:84:55:af:17:86:d1:dd:14:5a:92:
                    61:92:c8:e2:09:84:b2:5c:79:4f:df:c2:97:2a:90:
                    fb:77:59:8f:9f:ab:ec:6b:b5:3c:b9:eb:b5:a0:99:
                    2a:6a:39:2f:47:d3:78:b5:b8:27:2e:44:fd:29:46:
                    dd:14:26:29:a8:88:4b:c9:a5:a6:09:30:51:1d:cf:
                    a9:62:ec:4e:a0:90:14:dd:d3:f9:38:df:17:e5:da:
                    e1:d2:1c:11:7a:b0:d6:8e:34:5f:fa:d0:13:87:59:
                    6e:99:43:40:4e:8b:64:f5:c1:5e:c1:a2:c4:cb:91:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:BC:75:CD:99:6A:CF:C8:B1:DB:63:A5:45:D8:1C:51:99:B1:1A
            X509v3 Authority Key Identifier:
                keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:57:55:e9:54:35:0e:69:0a:bb:8a:95:1c:a2:ad:7b:24:51:
         4a:30:54:80:e4:6a:2a:ac:21:e1:1e:22:a3:7d:54:76:d7:58:
         50:a5:99:b3:95:b8:da:56:fd:be:65:43:a4:63:cc:f8:34:57:
         16:30:cf:29:d9:ec:29:36:27:0d:6d:b2:a1:c6:5c:1b:01:42:
         ad:f6:95:e3:0f:0f:05:ce:41:a5:9e:34:aa:6e:69:0f:e8:28:
         3a:d7:57:c3:ca:f2:27:38:e9:80:0d:d3:4d:45:47:38:d0:9c:
         e9:97:68:88:29:08:5b:23:f4:a6:3c:24:88:24:96:64:3d:37:
         b3:70:ab:e1:1f:6f:6d:73:5a:83:fe:ad:c0:be:61:2a:aa:47:
         e9:c0:74:9a:11:eb:a2:b8:03:a5:01:f7:74:3f:de:64:91:fc:
         7b:fe:45:4a:46:7a:d6:90:08:e8:6a:a2:09:73:5d:32:02:6e:
         c0:3c:56:b9:81:ce:80:51:d7:fd:0b:ed:19:a8:dc:ba:f2:a5:
         09:c9:06:65:f7:5d:58:75:fc:fe:d6:f2:b3:64:c2:08:2b:66:
         c9:cd:20:be:57:41:2e:cf:8b:5c:17:92:42:ea:3b:fd:70:e2:
         fe:5e:0d:44:5d:fa:0e:ab:69:dd:51:7e:61:58:47:20:59:ed:
         ce:ee:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:54 2026 by rpki-client