Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa
File:                     04DFAB682F3011EDBFC72D3FC4F9AE02.roa (raw, json)
Hash identifier:          mAtxkv/wqgmzqfA42MjqTkI7MG9Y+qqJMHSjYNhBQYQ=
Subject key identifier:   84:27:75:B2:26:E7:77:44:7A:3E:7E:A1:3B:D0:A7:86:F0:00:45:A9
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0ADD
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:08:03 +0000
ROA not before:           Sat 28 Jun 2025 19:54:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141711
IP address blocks:        103.93.12.0/24 maxlen: 24
                          103.93.13.0/24 maxlen: 24
                          103.93.14.0/24 maxlen: 24
                          103.93.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Jun 28 19:54:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a41e12-ba83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:d9:9a:43:7a:c1:f2:fd:a6:66:ef:63:0f:
                    fb:79:46:91:ed:ed:1b:89:88:75:df:23:c4:23:76:
                    d8:34:38:5f:fa:71:25:d9:14:6a:c9:52:fd:0b:15:
                    9e:37:a0:1c:72:c9:5b:b6:88:65:60:c7:df:4c:11:
                    c3:bd:ca:96:d6:90:ad:44:63:f1:f1:1a:61:b7:45:
                    f6:a2:9a:68:27:cb:4c:08:df:51:10:fd:61:be:91:
                    13:26:77:dc:67:04:21:d6:a0:62:be:88:17:63:c9:
                    1f:43:ac:d8:c8:be:64:08:27:2a:91:04:3f:ef:0a:
                    0c:58:13:a6:e2:cb:50:be:13:c6:f3:2f:16:67:c5:
                    27:82:ef:5a:5f:1c:a5:69:09:f7:fe:a6:32:3d:0a:
                    2a:cc:74:5a:c1:8d:48:bc:bb:88:03:ae:a4:71:88:
                    82:14:36:53:3f:46:1e:19:b7:78:60:27:27:28:8f:
                    30:b0:48:73:4c:1c:3a:85:7e:50:9c:65:1a:1c:ea:
                    8d:af:76:a0:f6:9f:d2:51:14:46:b9:9d:e3:d3:2c:
                    90:ea:a0:38:76:dc:b6:30:44:99:25:98:6c:0a:8c:
                    1c:31:88:5f:00:a1:67:3a:ba:0f:81:4d:23:ad:01:
                    90:f6:2c:61:4e:37:b5:dd:03:f3:38:08:88:43:3b:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:27:75:B2:26:E7:77:44:7A:3E:7E:A1:3B:D0:A7:86:F0:00:45:A9
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:a9:24:21:d7:32:b8:9b:91:80:e7:fc:39:b9:4f:ef:2b:
         f8:f5:be:25:6d:f7:1a:13:4a:49:02:bd:92:91:2b:81:80:f4:
         e1:59:fa:a1:79:d4:ac:b0:29:b8:ec:8a:fd:4e:a8:ed:92:96:
         22:e6:4d:67:77:af:9f:fa:77:f4:61:3f:f5:b0:c8:4b:60:cb:
         53:61:58:cb:b6:d0:2d:e7:37:e1:03:1f:2f:f8:85:6e:9c:42:
         64:2b:7e:77:9b:f9:ee:16:21:64:a6:ca:4a:9e:9a:69:a1:2a:
         82:b3:67:c7:f4:82:7e:0f:69:30:51:d1:4c:50:44:cb:46:89:
         c5:18:47:cb:0d:e9:77:e2:ee:31:7a:ee:fe:77:fb:59:45:7d:
         aa:d8:d5:cd:69:9d:55:b2:6f:4f:20:c5:08:fe:4b:66:8c:7c:
         2a:b6:ca:ef:94:78:ec:ac:84:bd:51:56:71:6a:f6:60:35:06:
         95:3a:a9:a2:3b:13:a0:f8:a2:82:5d:b7:53:68:15:77:ae:c9:
         90:a1:d9:0a:b1:22:6f:bf:59:de:a3:35:36:3f:a2:82:62:fc:
         28:d0:31:87:21:05:58:a8:5b:9b:dd:98:c6:42:bf:b7:ae:f3:
         35:b2:6c:f0:31:85:4c:7c:e6:a7:07:62:1a:08:bd:74:a6:16:
         af:b9:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:53 2026 by rpki-client