Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa
File:                     EE23EF6E857B11ECA3F32D50C4F9AE02.roa (raw, json)
Hash identifier:          2Drp2NUST+4Mxc9fvB99so6MZjFruiAkCYPMwsvvfnY=
Subject key identifier:   2C:A4:55:CE:38:82:69:D3:20:D2:98:17:56:FC:DF:64:DA:66:A6:A7
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       0475
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:22:33 +0000
ROA not before:           Wed 07 Jan 2026 00:19:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134802
IP address blocks:        103.13.184.0/23 maxlen: 23
                          103.13.184.0/24 maxlen: 24
                          103.13.185.0/24 maxlen: 24
                          203.17.12.0/24 maxlen: 24
                          2406:2dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
        Validity
            Not Before: Jan  7 00:19:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44ba8-df55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:30:f2:e8:c5:4a:54:ad:c0:04:0d:a8:00:
                    d8:aa:d4:82:04:dc:4e:3d:60:08:ab:65:7d:3d:09:
                    54:f1:bc:95:ed:02:48:9a:92:2d:1d:a9:aa:3c:95:
                    f8:4b:31:3c:28:5a:71:24:04:1d:0b:d4:3f:56:49:
                    7c:3f:14:d5:b3:cb:c0:15:6d:7f:2d:6a:a8:b8:75:
                    db:03:08:4b:54:8f:d7:89:e3:18:af:c0:6a:09:20:
                    d9:8d:ef:6f:f9:eb:11:13:76:3e:6a:0d:b6:a0:29:
                    ee:5e:95:4e:16:bb:f5:34:93:fb:a1:3a:00:d6:4f:
                    0a:7a:47:58:fb:89:78:d7:9d:0f:26:c2:7e:e5:ab:
                    58:aa:30:1d:20:87:f5:ea:31:f5:c4:7d:21:57:32:
                    4c:45:a5:e5:86:d3:27:91:e9:48:0c:0e:32:7d:cf:
                    9e:1d:db:33:42:8c:e8:6c:4a:ca:2a:a5:12:63:84:
                    0a:33:67:59:52:06:da:bd:24:13:d5:ed:83:53:6c:
                    d4:67:2d:05:de:fe:f2:4a:51:18:a2:da:f9:f6:72:
                    90:09:23:ea:e4:da:72:3f:d1:f4:1c:d0:14:cb:bc:
                    98:b8:72:3f:09:58:fd:a7:56:10:64:af:17:92:13:
                    b4:44:ef:23:2e:08:87:28:31:c0:4a:57:95:7a:6c:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:55:CE:38:82:69:D3:20:D2:98:17:56:FC:DF:64:DA:66:A6:A7
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.184.0/23
                  203.17.12.0/24
                IPv6:
                  2406:2dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c4:e0:ad:34:06:c1:8f:1a:36:5a:59:86:1e:33:c3:38:46:
         cc:78:90:04:57:c7:ed:b9:3d:ec:13:35:89:82:63:e0:01:70:
         a0:dd:92:74:43:f3:5c:58:90:31:e2:71:32:0f:a5:ae:31:df:
         6e:20:c8:5f:0a:38:e8:03:d6:74:23:c2:f1:61:35:4a:2d:0d:
         26:5a:3b:02:81:0e:3d:18:99:c4:cf:bb:9f:61:f8:83:bc:62:
         9c:82:36:a9:ef:5a:be:35:89:26:e4:44:81:27:26:2f:5b:b1:
         fe:c5:d4:2d:ef:88:1b:63:8c:7f:0b:4f:97:16:76:5d:88:dd:
         60:33:fd:42:6d:99:53:8a:fb:4c:ec:2f:0f:61:67:a9:ea:cb:
         11:f3:dc:41:fa:09:dd:06:28:cf:bf:be:e1:89:ec:7f:52:d4:
         56:0d:ad:0c:b8:b8:2c:bb:be:9c:c2:50:46:00:44:75:2e:e9:
         b6:f8:ce:cb:60:f4:28:97:c9:60:1b:ef:48:ef:34:b5:ab:c8:
         00:f2:ab:5b:7c:1b:e2:98:37:55:fa:54:2b:8b:92:e5:99:29:
         17:ae:11:d1:b1:49:f8:c3:70:4d:cb:e3:f2:2e:c3:c0:80:21:
         8f:a7:c3:2e:91:d4:d9:76:c0:e8:52:c3:12:62:dc:b8:85:e1:
         e6:ae:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:19 2026 by rpki-client