Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa
File:                     E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (raw, json)
Hash identifier:          /xAde4zUSJSZYR1j5igrhJaFQ7bG1suxzqZLn0y3VbM=
Subject key identifier:   62:7F:16:73:0B:DF:50:94:E4:22:3D:52:1E:27:74:75:36:3D:D4:C8
Certificate issuer:       /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial:       0BD7
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:26:18 +0000
ROA not before:           Thu 10 Apr 2025 03:35:50 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138623
IP address blocks:        103.134.240.0/24 maxlen: 24
                          103.134.242.0/24 maxlen: 24
                          103.134.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
                          rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
        Validity
            Not Before: Apr 10 03:35:50 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a4063a-f64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:cb:07:cb:5a:84:bc:ca:f0:9e:ea:51:d4:
                    db:ae:da:d9:ff:fe:e9:42:45:8d:32:87:57:84:e9:
                    82:a3:de:5a:46:95:9f:00:42:9a:7f:7a:e1:b3:5a:
                    a5:41:cc:53:1d:28:db:82:b8:05:a1:9e:71:99:32:
                    51:2f:00:ca:48:a9:f3:1c:f5:8f:42:13:7f:94:d6:
                    d7:6a:2d:94:32:1f:4c:0f:d5:09:09:4c:20:d6:4a:
                    f2:0f:72:10:3a:c9:f6:3e:f0:eb:fd:ba:ad:e3:f3:
                    eb:58:fc:51:9c:82:0f:d4:87:cd:81:6b:43:7a:6d:
                    ce:e4:bd:da:7f:02:17:3c:8f:01:19:d3:de:a7:13:
                    f0:3a:4e:ab:cc:ef:45:ca:b4:6d:12:6d:bf:19:f8:
                    db:32:09:39:a3:bd:14:54:34:90:ad:d1:b1:10:29:
                    12:a6:8e:71:e7:42:67:cb:70:e7:73:36:70:2b:d3:
                    0b:60:56:4d:6c:9e:ae:66:61:ea:a0:5c:6a:ef:32:
                    d3:2d:2d:f7:10:46:38:ad:7a:a6:e5:a3:54:48:10:
                    34:bf:1d:3f:fa:98:89:4e:8c:46:3a:c6:9b:05:3e:
                    f1:e7:48:9b:56:9f:41:62:d8:3a:2b:78:16:b0:b3:
                    e8:f8:eb:5d:16:d1:9d:78:54:69:1b:00:28:eb:04:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:16:73:0B:DF:50:94:E4:22:3D:52:1E:27:74:75:36:3D:D4:C8
            X509v3 Authority Key Identifier:
                keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.240.0/24
                  103.134.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:f8:4a:b6:8c:d7:d9:c6:4d:0b:f3:da:00:c6:0a:9f:6b:
         d0:2c:10:79:15:63:cd:64:67:9e:16:c7:7a:c4:b8:a9:25:92:
         8f:f0:0d:0a:85:ed:a8:9a:ac:f9:ae:0a:66:64:56:ba:ce:4f:
         3f:33:34:55:d1:d0:8f:04:62:54:96:d6:40:78:13:31:ad:fe:
         b5:63:b6:f9:6f:f2:25:f4:c4:2c:78:c3:fe:bf:5a:84:28:a7:
         26:76:43:51:17:5f:6f:1c:4c:b9:7f:5e:52:f4:64:63:00:2c:
         3e:e7:1c:f5:fa:56:9c:0d:c4:b0:74:f3:92:c4:ff:bf:f6:65:
         3e:44:d8:2d:2d:f8:d2:c1:94:da:31:d0:26:0e:65:b7:15:3b:
         1e:68:26:f4:73:db:bc:47:9f:48:95:85:3b:76:48:83:cc:39:
         c9:ba:1c:47:9a:92:3c:41:99:3b:68:5c:70:71:00:5b:86:06:
         e2:11:4f:d0:03:2e:5d:42:69:72:73:fc:cf:35:bc:87:f2:eb:
         48:eb:4b:e4:ce:2e:ff:43:79:d7:c3:9e:e8:c2:90:8d:ba:da:
         e2:90:9a:c4:a4:6d:1d:b7:08:6d:96:63:cc:d3:29:bc:69:df:
         b6:3e:e8:10:2b:90:94:c2:c8:31:5e:e6:a0:ae:e4:14:2c:89:
         8d:a0:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:02 2026 by rpki-client