Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa
File:                     93FE3B60220111EE8E5D8D0FC4F9AE02.roa (raw, json)
Hash identifier:          FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=
Subject key identifier:   6E:FB:50:BD:29:3E:6C:07:10:E1:CF:A0:99:89:C1:8A:E7:E1:B4:B0
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       08B5
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:02:49 +0000
ROA not before:           Fri 18 Apr 2025 21:23:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133104
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24
                          119.252.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 18 21:23:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46328-dbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:7d:e3:10:04:02:2a:7f:59:a7:0d:83:d7:
                    21:32:40:08:2f:10:a4:12:a1:7a:64:fc:1e:82:6f:
                    42:c8:f5:ca:e5:bf:ae:d1:7d:b8:fc:14:af:81:eb:
                    8d:26:c0:1c:7f:e2:1a:49:9f:4e:dc:64:48:45:e8:
                    88:36:21:78:bf:30:28:20:49:b0:f0:8b:09:b2:3a:
                    d0:92:e0:9a:66:41:76:5b:07:15:14:5e:b4:54:56:
                    a6:68:2a:cf:59:cc:3c:8b:25:ef:23:b7:9a:28:5e:
                    05:56:35:20:77:c3:52:4e:77:67:0f:94:45:7f:53:
                    ed:ab:a3:8a:cb:ee:1c:03:50:8e:22:d4:a4:d0:7c:
                    96:a8:38:30:19:86:bb:1c:7f:13:71:e7:00:4b:61:
                    64:e5:32:c2:7f:89:53:23:43:45:7d:ed:47:b8:b2:
                    b8:04:2c:fb:12:8b:87:ab:cf:74:23:76:cf:d1:8a:
                    f9:b2:db:d0:2e:bc:9b:5f:b9:af:53:b8:21:a4:cb:
                    e0:75:74:c0:d9:34:30:8b:c1:c1:59:fc:97:6e:d3:
                    2c:e9:97:03:21:b5:f5:99:df:87:c7:b3:ad:76:85:
                    77:19:5d:cb:9d:3d:82:15:3b:04:a3:b6:87:3e:25:
                    cb:3c:0b:88:f7:ec:02:51:dc:00:d9:b4:de:86:dd:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FB:50:BD:29:3E:6C:07:10:E1:CF:A0:99:89:C1:8A:E7:E1:B4:B0
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23
                  119.252.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:f0:9a:70:de:c1:93:74:79:1b:36:eb:d6:9e:72:f7:ba:
         45:05:07:36:7d:23:b6:9e:52:65:eb:f2:bf:1e:13:53:b1:a0:
         c5:42:61:9c:03:75:41:1c:2f:a4:3e:50:ed:90:46:13:00:f0:
         10:3d:c9:17:c2:89:72:3e:2d:fc:0f:bd:f6:d0:79:5b:e3:58:
         7e:22:ab:3d:4a:4a:82:22:ff:16:e2:b9:5b:ff:f7:92:7b:58:
         6a:18:03:66:d4:57:83:4f:6d:ba:5d:95:4e:e9:93:5b:58:8a:
         85:80:c0:bb:2d:68:91:bd:95:4b:74:a3:5b:6a:67:79:83:ae:
         26:1f:30:10:3c:e4:40:cf:f9:87:48:11:96:dd:ad:e9:f1:aa:
         85:fc:bf:9b:61:54:05:a3:87:9a:f4:56:e8:a5:3c:aa:81:c4:
         51:71:7a:cc:23:0f:a8:68:6c:0b:fb:da:c9:e2:92:b4:ec:59:
         7b:76:56:14:4d:bf:5d:ea:93:52:37:2c:90:f4:57:56:4c:b7:
         7e:8a:d0:7e:1f:71:cc:31:91:ec:86:14:1c:d1:65:fa:b5:e3:
         06:6d:e5:9a:1c:ed:d1:cf:71:64:92:6d:aa:21:95:a1:67:87:
         e6:8b:79:12:bb:14:59:3e:f6:ed:c8:8a:18:64:f4:a1:17:6c:
         a5:1b:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:20 2026 by rpki-client