Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/02414522C98A11EBAF4F9280C4F9AE02.roa
File:                     02414522C98A11EBAF4F9280C4F9AE02.roa (raw, json)
Hash identifier:          YXFZrtfFm5pkvH2NYI0HEWecJLkCcvqN2SJE43kttYc=
Subject key identifier:   BC:FC:A1:2E:72:1F:2C:73:95:1A:5C:A1:32:E9:80:C7:F1:76:19:80
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C0F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/02414522C98A11EBAF4F9280C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:19 +0000
ROA not before:           Fri 04 Jul 2025 14:50:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131094
IP address blocks:        103.162.52.0/24 maxlen: 24
                          103.162.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15375 (0x3c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4aefb-fae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:48:27:e0:3e:91:38:f8:f0:d3:76:2a:34:
                    5d:3c:7b:31:07:ef:62:03:50:fa:36:db:38:34:de:
                    eb:3a:8b:8f:73:89:1e:10:a0:ef:09:83:f0:62:01:
                    e1:5f:1b:6d:27:4d:51:13:1c:93:3a:bb:03:0d:af:
                    4f:a3:ed:28:a8:88:da:49:80:be:0c:41:2a:41:a5:
                    cd:f4:c7:f2:f6:51:b9:8c:7e:dc:e8:64:7e:90:9c:
                    a0:fd:8f:45:42:77:f8:9b:42:7b:df:07:e7:38:d2:
                    42:fe:09:af:83:dc:ee:53:a3:a2:79:b8:0d:3e:1b:
                    a9:00:04:da:a2:9e:e4:22:1b:09:57:05:e7:e2:a2:
                    60:30:1b:53:18:c8:79:ff:10:3a:7f:f5:e4:b5:86:
                    f9:22:9e:5f:d5:a0:49:e7:ea:c8:5b:95:a2:71:91:
                    6a:02:09:fb:96:c6:ed:bf:b7:a4:19:94:ee:7f:a5:
                    aa:7a:0c:62:31:7a:3a:d6:16:b5:3d:f1:3b:2a:de:
                    48:ad:30:10:ab:47:21:94:5d:da:53:c0:83:8e:9c:
                    41:4a:a5:09:7f:f0:6e:fe:c8:49:5a:da:c3:2c:ac:
                    34:66:6a:56:e0:0a:a1:8e:7a:a0:8d:0f:5c:e9:59:
                    83:8c:36:01:95:a7:8d:17:af:13:82:f7:45:93:1b:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:A1:2E:72:1F:2C:73:95:1A:5C:A1:32:E9:80:C7:F1:76:19:80
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/02414522C98A11EBAF4F9280C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:65:19:7e:4d:ed:bd:7d:65:ea:4e:27:4a:a3:ee:e5:7d:
         a4:ed:1e:49:3a:56:89:79:01:4a:4c:b8:a3:d3:fe:68:b0:ab:
         1d:b4:10:e1:e9:4d:31:99:6c:95:bb:c8:7c:65:87:71:c9:f5:
         43:29:f8:ce:26:bc:af:af:a9:f3:1c:29:11:8b:ca:7e:17:28:
         1c:e3:1a:c2:8b:0f:56:da:2d:3a:74:42:11:ad:ef:02:52:70:
         f8:22:72:d4:64:dd:6b:48:72:19:80:00:f8:b9:c5:2d:cd:6d:
         19:5c:36:09:65:a7:1e:63:d0:89:11:18:e8:7d:d2:32:49:6b:
         b3:fe:71:5d:bb:12:71:24:32:ed:c7:60:30:1c:21:4c:dc:a0:
         a4:3c:10:f5:8b:9e:16:1c:b0:a4:5b:4c:4a:71:42:11:d9:b4:
         be:d3:a6:5f:93:54:ca:7e:bc:6c:2b:44:b1:f8:a3:35:61:35:
         78:27:6b:25:1c:6c:fe:cb:47:bc:51:95:a1:ec:24:ca:5c:16:
         9c:d5:56:8a:e6:7e:ab:6e:1b:52:98:42:3c:53:da:5e:95:97:
         ff:0b:29:9a:80:e8:9c:8f:71:c3:6e:4f:65:aa:1f:fe:b7:3d:
         46:85:07:14:7b:c4:99:8e:e4:30:8e:1a:8b:7b:df:5c:02:76:
         38:d6:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:41 2026 by rpki-client