Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
File:                     E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (raw, json)
Hash identifier:          4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=
Subject key identifier:   AC:91:2E:81:CA:9F:C8:E1:EA:CF:2D:F9:A0:20:7E:5A:50:B4:8F:D3
Certificate issuer:       /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial:       0BD1
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:37:31 +0000
ROA not before:           Thu 16 Oct 2025 20:28:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133149
IP address blocks:        103.75.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
                          rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
        Validity
            Not Before: Oct 16 20:28:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45d3a-4566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:ed:54:47:32:cb:f9:43:89:92:93:ab:39:
                    8f:00:12:7e:cf:a3:ba:01:91:e4:c4:27:ee:21:c2:
                    6b:24:0d:78:2d:b8:a4:8d:e4:4a:d1:da:58:6a:88:
                    a3:57:84:92:d4:03:ca:18:d4:db:d2:ae:96:8a:47:
                    8c:32:66:2e:5b:fa:cc:4e:f4:f8:9d:d3:0a:34:c2:
                    5c:61:c8:a2:f3:19:fb:4a:93:ce:dd:aa:2c:de:79:
                    79:72:a9:5f:8d:7c:fd:1a:7c:36:f7:ca:71:10:f8:
                    86:98:13:03:66:a4:ca:2e:84:22:12:21:88:7f:3f:
                    44:65:6a:a2:20:ae:72:4a:ed:59:25:9e:2e:81:ac:
                    98:30:43:a5:36:bf:a5:bd:a3:e9:0c:7c:94:28:4f:
                    99:39:ce:2e:b2:30:8c:18:da:ae:c1:68:d9:0d:67:
                    df:b7:60:c7:0f:bf:a0:61:91:b2:29:f2:c2:43:58:
                    32:29:6c:35:c8:ea:c6:8e:a2:d1:1d:7f:c3:6a:63:
                    bd:06:cd:28:0f:ce:b8:fb:46:98:b8:f5:89:2f:e8:
                    d7:c5:ce:49:49:81:53:be:68:22:9b:53:25:5c:93:
                    5a:33:2b:d4:84:30:12:b7:a5:84:3a:e8:27:88:65:
                    ca:90:4a:1e:7b:2f:a3:69:8e:60:5e:90:45:3a:0c:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:2E:81:CA:9F:C8:E1:EA:CF:2D:F9:A0:20:7E:5A:50:B4:8F:D3
            X509v3 Authority Key Identifier:
                keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:74:da:95:26:8e:71:f2:03:b8:6f:ac:da:bb:ed:97:3e:68:
         93:5d:2b:bb:64:14:33:33:74:65:54:7f:e8:9a:e1:96:8a:44:
         4c:99:31:12:5d:9c:26:fb:28:0c:08:15:ec:25:40:79:aa:2c:
         45:b5:cb:1e:a9:69:1c:e5:03:1e:53:56:ed:5c:58:ca:94:53:
         8c:eb:6d:82:f6:6f:26:a7:dd:7b:94:60:ef:3a:1a:9f:14:ad:
         39:81:f3:7e:a3:f7:f6:0e:cd:66:da:67:1a:28:97:59:d8:95:
         1f:55:eb:b6:1f:e0:f1:d7:21:e6:98:5a:de:40:00:52:02:91:
         56:c6:9a:ba:64:fc:a0:52:d3:18:bd:2e:34:ba:1d:bb:9e:c9:
         27:ce:14:df:22:51:89:ce:60:b2:5a:18:07:1d:df:a7:36:18:
         32:a4:5a:36:b5:10:7a:9d:e9:e3:94:9f:8e:1f:ea:80:0d:8a:
         17:58:eb:3b:fd:1b:34:96:46:51:82:91:a2:75:36:af:c4:b9:
         2f:0f:89:54:71:60:68:0d:f4:d2:28:4c:ae:83:08:79:5e:c2:
         1a:a7:2a:c8:ed:e0:c9:0f:14:a9:f2:fe:4b:6e:e7:d6:2a:2d:
         cb:90:d9:40:dd:d3:a0:7e:65:fb:91:3a:94:bd:d6:33:94:71:
         74:72:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:12 2026 by rpki-client