Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa
File:                     93D558E84A8411EE8643216EC4F9AE02.roa (raw, json)
Hash identifier:          HUZWj7ga443aIErZjEl5uCaPuZU/RcRW4dLtq/yzLeo=
Subject key identifier:   8B:72:DD:1F:7E:E9:C1:BE:BD:9F:D2:71:0C:5A:56:68:FF:0E:25:E2
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       0229
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:16:12 +0000
ROA not before:           Tue 03 Jun 2025 03:21:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150731
IP address blocks:        103.132.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Jun  3 03:21:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3f5cc-f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:24:4a:8b:35:49:ab:64:e5:d4:1e:6d:77:
                    ac:b5:00:23:b2:5d:d5:da:84:02:c7:91:22:e4:56:
                    a0:a5:a2:d9:2d:72:d7:6f:bf:67:df:dc:9d:23:6f:
                    98:fe:43:ce:c9:7b:58:68:7d:ae:ea:82:94:ff:70:
                    af:f5:07:d2:98:69:9d:4f:34:76:6f:26:8a:db:04:
                    c9:a6:59:5a:f5:e6:03:24:c0:08:93:81:22:f0:ec:
                    70:9f:60:00:db:62:b4:bf:69:fb:82:07:05:0b:87:
                    1f:63:35:ab:06:69:35:a3:dc:45:db:07:67:33:d6:
                    73:0a:5e:ca:fd:43:e2:9d:a6:07:a1:3d:31:a2:c4:
                    f8:68:52:f7:92:4f:e3:47:87:95:67:74:46:51:22:
                    e3:56:97:82:07:b4:e9:22:52:11:dc:4c:22:24:26:
                    1a:64:8a:0d:a2:f6:61:43:4d:a7:83:a3:db:57:11:
                    85:69:cf:7d:c0:a9:3d:b4:58:0c:ca:02:d7:9b:c6:
                    d3:a7:80:33:c1:5d:b8:b9:cc:d0:e1:1e:16:65:4f:
                    a7:e1:17:6b:97:3e:bf:f1:27:e8:be:54:5a:98:99:
                    4c:bb:36:9a:53:0c:ec:a5:d2:33:d4:75:df:fd:c5:
                    2e:16:13:8b:05:d8:8d:17:2d:34:5f:a5:88:29:9f:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:DD:1F:7E:E9:C1:BE:BD:9F:D2:71:0C:5A:56:68:FF:0E:25:E2
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:2c:5d:b1:32:a1:a5:b8:c8:2a:b8:00:3b:a6:58:f3:35:
         d0:2a:6e:31:14:2e:29:7c:37:9a:6d:87:8b:e4:e3:3b:8c:3f:
         b7:24:dc:e3:a3:6a:17:2d:c7:15:7d:03:21:13:c2:2e:9e:4c:
         0c:77:32:36:32:b0:e6:42:37:76:13:00:9b:b3:48:dd:55:f5:
         a0:36:14:52:c1:84:8d:ab:9f:10:a1:83:2e:d9:28:95:75:53:
         9e:8d:9d:34:05:00:4f:f6:8f:12:c5:50:0e:d5:54:96:55:d0:
         0a:f1:51:e6:54:f5:f6:68:29:f8:71:66:23:b5:53:7d:72:7c:
         72:c9:60:f2:5f:1e:ad:6c:91:1a:7f:73:d9:d0:3d:4c:df:ac:
         59:4d:7a:25:41:12:a7:27:24:11:2a:38:cd:89:7c:95:bb:eb:
         df:a0:1d:fa:9d:9e:38:08:90:5a:8e:c8:4a:6e:6d:8d:b3:9d:
         19:34:d9:cf:96:ae:6c:4f:40:91:b1:1a:f3:76:72:9a:7f:0d:
         eb:67:b5:42:83:f4:34:74:23:ac:4c:ae:0b:ab:07:ad:24:cc:
         a6:8b:8d:41:56:6d:8d:8e:11:e5:02:4a:17:6e:b9:45:d1:c6:
         f9:d7:64:1c:51:28:3e:45:ad:7d:b4:36:22:9b:8a:21:83:bd:
         59:32:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:03 2026 by rpki-client