Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
File:                     2DED090C18F211F0B4DFD036C4F9AE02.roa (raw, json)
Hash identifier:          BRyHiVdfA5rcD2IpQkNpMRHdXqL3kNvzj/UlFoc/cWo=
Subject key identifier:   F6:99:ED:9F:63:61:08:A6:9A:8C:B4:70:24:F8:F7:B8:D7:71:45:B8
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       02ED
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:28:26 +0000
ROA not before:           Mon 14 Apr 2025 05:34:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139358
IP address blocks:        103.211.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Apr 14 05:34:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44d0a-1905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:c4:6e:7b:58:4a:91:35:df:5b:92:c2:5c:
                    34:a8:10:08:48:2f:98:9f:6b:16:0d:6b:ff:6a:63:
                    68:d0:45:03:6a:92:4d:d0:55:16:9b:1a:15:d2:9f:
                    0a:c8:4c:38:c6:29:a3:1e:05:e4:66:93:55:f8:fd:
                    f6:73:2b:dd:54:2b:73:90:ef:36:1b:e4:f6:f5:7e:
                    68:c9:c3:34:7e:56:c1:1d:49:4f:cd:ff:ad:e8:9b:
                    fa:1a:21:a4:89:88:0e:2d:dc:ab:99:5f:0e:9b:74:
                    1b:de:ed:ab:75:42:7a:17:a9:3b:63:6a:6c:25:ed:
                    07:a8:a1:7e:b7:2d:dc:4a:4a:25:27:11:e2:03:95:
                    aa:bf:04:7d:ca:ef:7b:36:06:61:f1:27:34:48:de:
                    c7:72:f5:58:1b:27:16:35:af:ba:9b:8f:e5:92:21:
                    4a:c3:27:43:26:01:95:f4:5d:85:b7:56:4a:46:41:
                    c6:26:95:94:ac:48:96:99:b2:3a:e2:e2:b4:b9:20:
                    06:25:ab:35:03:0e:72:f6:12:3a:fe:ac:4c:b3:23:
                    71:c5:b6:4a:d3:11:bd:d9:9e:96:77:4f:d0:c8:cd:
                    7e:f9:27:5e:f2:1a:c2:2f:c9:38:19:4a:05:b0:6e:
                    fd:1b:ac:a0:59:7f:24:d2:2f:e2:d4:b1:b1:ed:e6:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:ED:9F:63:61:08:A6:9A:8C:B4:70:24:F8:F7:B8:D7:71:45:B8
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:52:84:52:8b:cf:fd:ea:64:25:ad:b8:0b:50:ff:b4:41:
         1a:5b:26:fb:db:d3:04:da:e3:b0:ea:23:39:31:3c:c2:65:f5:
         55:e5:ef:26:16:67:b5:c2:11:d6:f2:da:d0:5c:e9:dd:92:ba:
         78:af:72:f2:c3:87:a4:bf:e1:51:19:3e:ef:fa:d4:52:fa:56:
         2b:17:01:1d:15:b3:f7:53:c0:a6:47:64:aa:db:06:ab:2e:9b:
         30:9a:12:22:8c:b0:a1:af:dc:7d:a3:af:24:33:4b:b3:fe:59:
         a8:56:d8:91:56:b7:46:72:20:55:7a:c9:21:bc:8a:65:8f:8f:
         5b:f8:04:1b:b1:ac:14:ec:ef:dd:57:3e:fd:1a:3e:87:1f:5a:
         1b:d2:b6:39:4e:35:80:16:65:56:40:ea:bc:e2:7b:24:c2:f0:
         79:6e:10:48:9e:aa:45:7f:0a:98:bf:4b:91:5e:96:c9:87:1f:
         aa:72:6f:cc:86:66:81:16:bc:fc:33:43:7b:bf:7c:51:24:2f:
         0c:1c:10:41:54:a8:cb:94:7c:63:c0:5f:ea:b4:be:c9:b6:29:
         ea:1d:ef:3f:4f:2e:88:12:e9:18:98:37:b2:c3:f1:fb:51:04:
         55:ca:ea:fd:9f:d3:08:14:30:55:69:58:f2:d5:8c:f7:f2:f4:
         2a:b1:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:12 2026 by rpki-client