Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
File:                     E88EE726E93611EF9E3FF729C4F9AE02.roa (raw, json)
Hash identifier:          OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=
Subject key identifier:   DB:6F:99:EA:D0:B5:08:7D:1F:BD:17:12:47:B1:D4:7C:7D:34:E0:C0
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       06D6
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:12:45 +0000
ROA not before:           Tue 30 Dec 2025 22:18:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138453
IP address blocks:        103.79.17.0/24 maxlen: 24
                          122.50.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Dec 30 22:18:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4738d-1299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:e8:a9:4f:79:dd:a6:59:b4:83:20:e8:23:
                    e0:7e:3f:6b:9f:f4:e4:14:b0:b1:d7:0a:b2:20:b4:
                    82:e0:4f:97:b2:62:2a:fd:bd:9b:b8:37:d4:21:f3:
                    82:e5:86:14:6b:3b:57:98:28:81:5d:39:26:2d:f4:
                    fe:9d:56:5c:51:78:78:55:61:14:81:2e:01:34:ec:
                    67:8d:13:53:cd:95:46:8c:9c:f8:a4:83:ef:ad:ee:
                    84:50:55:2d:e1:bf:c8:52:14:df:8c:60:50:23:1a:
                    65:51:57:ac:11:39:0e:24:1c:7b:d8:93:6d:03:36:
                    62:f6:06:c9:30:5f:3d:54:f1:af:05:7a:27:e7:20:
                    51:33:ce:30:ad:66:3b:b5:a5:1a:c1:a6:8c:72:74:
                    04:79:b7:b1:5c:49:c5:12:69:7a:d5:fb:64:89:1b:
                    62:16:f2:62:48:b5:74:d1:6e:e9:3c:89:0b:14:be:
                    96:26:95:f5:a1:79:3e:a0:e2:4d:03:d5:7c:ff:7c:
                    d7:9b:1e:92:a3:ed:d7:72:50:3f:01:d2:16:2f:36:
                    f9:23:1a:57:c1:b7:f1:94:79:d2:07:15:5d:23:6c:
                    3e:e1:85:f6:c0:2e:5d:5f:25:15:34:fe:b9:bb:3b:
                    ad:76:d6:80:ab:a9:c6:2f:d1:d1:45:68:62:8d:43:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:99:EA:D0:B5:08:7D:1F:BD:17:12:47:B1:D4:7C:7D:34:E0:C0
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.17.0/24
                  122.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:29:13:11:37:a6:d4:dd:6d:5a:3c:f1:1a:53:ac:75:ae:
         3e:08:dd:63:83:70:b9:c0:35:0e:3e:a1:d7:ce:ef:61:d8:4d:
         df:c1:46:5f:29:ed:b6:6e:57:f5:0c:1a:8b:25:65:1e:96:4b:
         fa:3b:b0:bf:04:9e:25:7b:6f:a3:98:07:37:ea:d3:7b:17:5b:
         d5:0b:a7:af:7b:12:47:3e:2e:6e:c8:1b:68:36:a1:26:63:06:
         9c:17:a0:22:56:4f:a0:fe:da:db:58:46:d4:23:f5:07:12:a2:
         fb:65:62:ed:d0:97:39:bc:34:a1:35:eb:8b:93:a7:c3:57:91:
         32:db:9e:f7:f5:31:43:48:55:d0:1b:69:24:72:c8:66:75:e2:
         1a:c5:ae:8d:ac:4b:47:c1:73:32:7d:9c:13:fb:74:9c:53:29:
         4d:53:a6:12:d9:2a:b0:bf:bc:04:b4:db:7c:f4:d7:89:d7:9f:
         96:fa:39:ad:e3:2e:1c:4f:21:75:d1:2a:47:0a:0c:19:be:17:
         24:29:59:c6:9e:37:22:f5:30:cc:08:4f:21:10:b8:90:a7:fc:
         71:2d:0b:17:f1:e3:72:95:2a:ee:f0:c6:0b:7c:04:78:4b:bc:
         43:60:22:b6:95:a0:d0:65:9b:95:d7:cf:fc:92:6a:51:15:af:
         8a:ce:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:27 2026 by rpki-client