Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa
File:                     29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (raw, json)
Hash identifier:          eZnBeGRp/XjPgjBo8RzoLFHJq1ASGdJfGhbtwCwrNO4=
Subject key identifier:   E9:3F:62:BC:C8:D5:BE:45:84:A8:D5:A7:F4:44:C8:D6:5D:99:80:5A
Certificate issuer:       /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585
Certificate serial:       07FB
Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:39:51 +0000
ROA not before:           Tue 02 Sep 2025 22:12:06 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133578
IP address blocks:        103.153.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl
                          rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585
        Validity
            Not Before: Sep  2 22:12:06 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40967-500e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:49:ca:ba:76:80:b3:89:cc:53:90:b9:dc:
                    8e:ec:51:5c:69:57:a3:f3:f0:e1:9c:ad:ae:1d:21:
                    d8:07:6a:b7:b7:f3:b0:d0:5f:c4:7c:95:22:15:b7:
                    43:a9:cd:7b:36:90:85:5e:98:1c:06:05:34:d6:ab:
                    4a:ba:85:5b:fb:0f:ed:df:88:04:b4:92:ec:0c:24:
                    e1:20:7a:13:38:d3:2a:63:23:36:72:9a:57:73:cf:
                    ba:85:6a:07:e3:6a:ff:3f:15:0b:9c:e7:0f:c8:39:
                    0b:4d:9d:57:c7:62:84:a4:a0:83:d2:55:fc:0a:4f:
                    5e:c6:47:ec:2c:98:57:8f:2d:71:f5:f7:ba:cf:71:
                    f5:31:0c:b9:ae:ae:58:f4:a0:ca:7c:ff:30:12:c4:
                    01:5b:27:2f:8b:85:08:1c:e4:f4:4d:c5:fb:21:4f:
                    6a:30:bd:a2:d8:1b:3e:4a:5f:c6:78:7a:4b:ad:0c:
                    ce:ea:c5:b8:5b:06:6f:df:d3:8b:74:1f:f6:de:63:
                    fc:a0:9b:3b:6e:69:13:0d:aa:c2:ec:15:36:d2:38:
                    92:26:2a:a1:10:38:67:40:24:39:0c:84:5b:4c:88:
                    e1:be:b1:af:37:aa:0e:22:be:4a:05:30:a7:14:9a:
                    ff:65:4a:15:81:a6:aa:33:01:b8:92:fb:15:80:e4:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:62:BC:C8:D5:BE:45:84:A8:D5:A7:F4:44:C8:D6:5D:99:80:5A
            X509v3 Authority Key Identifier:
                keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:db:ac:22:f8:a8:c4:db:02:e0:6e:e6:de:ce:bb:fc:c3:
         a1:2e:d8:9e:44:0f:b0:45:09:7a:75:37:b4:d7:c4:26:c5:2b:
         27:0f:99:3e:6c:0b:5a:9e:4a:8e:b9:e7:31:1e:dd:72:01:dc:
         22:e2:16:c3:91:d6:d7:7c:d2:1c:ed:78:da:82:54:93:6a:ef:
         05:2f:ff:9b:ec:71:5d:88:57:64:4e:47:57:b3:b1:68:6d:b1:
         cb:a2:72:67:45:e7:71:86:76:18:3b:bc:ec:72:83:6d:cb:f1:
         47:28:37:ce:a3:7d:78:82:10:7e:42:26:42:af:4b:93:4e:8d:
         4c:aa:87:04:f3:a8:ef:3d:d7:0b:45:48:b1:8d:cf:82:90:0f:
         96:07:1e:d0:8a:93:c9:aa:47:46:8d:a9:20:95:1b:17:c0:78:
         e7:e2:c2:f8:53:91:a6:c5:bf:28:a1:de:6a:73:38:38:fc:c5:
         1f:c3:65:ad:66:b2:6c:89:15:64:24:1e:a3:99:64:f0:02:bd:
         5b:6e:b2:ea:4c:56:f6:82:94:b7:e9:d6:fa:31:37:b3:e0:13:
         7c:7b:84:5f:bb:2b:de:ea:1f:06:0e:f7:bb:30:1e:f1:df:e6:
         ef:cc:42:5d:0b:78:e1:57:91:6c:73:fe:45:a0:69:b5:75:27:
         ed:22:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:50 2026 by rpki-client