Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
File:                     70B74E2A16D811F1AFC6DD17323D8C67.roa (raw, json)
Hash identifier:          qo7+SeJeuMvqrGm3R71qB0sZQ/2QkXoj4knUMSQMDAU=
Subject key identifier:   E5:53:5C:B6:B8:01:81:EE:95:76:99:BA:39:19:6F:C4:7B:6F:3F:E9
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       3589
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
Signing time:             Fri 17 Apr 2026 05:53:13 +0000
ROA not before:           Fri 17 Apr 2026 05:53:13 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        101.0.12.0/24 maxlen: 24
                          101.0.13.0/24 maxlen: 24
                          101.0.14.0/24 maxlen: 24
                          101.0.15.0/24 maxlen: 24
                          101.0.16.0/24 maxlen: 24
                          101.0.20.0/24 maxlen: 24
                          103.46.204.0/24 maxlen: 24
                          103.46.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Apr 17 05:53:13 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69e1cac8-4f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:24:8d:f9:ae:72:05:93:9a:60:61:af:55:
                    c4:fe:0f:d5:5d:4e:c9:ed:25:c0:b1:b5:f0:07:10:
                    57:51:3a:68:a3:82:f0:62:3d:c6:da:da:83:c2:db:
                    97:81:9e:e0:57:90:74:13:33:2d:f4:43:e6:b8:42:
                    15:49:4e:b8:83:a5:1b:3f:cf:4e:8e:09:f5:b0:93:
                    a7:ca:78:08:cd:d5:09:6b:6e:68:e9:73:5d:19:86:
                    e4:d8:19:eb:67:be:16:7c:ac:db:6a:1d:3e:62:aa:
                    ae:53:6b:1d:02:8d:92:1f:31:77:d7:e6:e9:7f:5a:
                    ed:ec:ac:a5:30:3e:37:e7:b5:06:d2:a8:72:d3:29:
                    25:ab:47:82:3b:ab:aa:2c:8d:e6:7d:74:36:f8:b0:
                    45:6e:63:c2:b1:14:d3:34:1a:00:36:e4:f7:5b:05:
                    88:be:42:38:31:8e:84:aa:23:89:7a:dd:1d:ea:3e:
                    6b:ff:59:fd:a8:f7:71:a9:07:ef:52:d3:97:7c:8c:
                    89:92:14:5c:08:10:ad:cf:cf:0e:99:5c:65:8a:d4:
                    79:ac:b7:fb:c4:e9:97:66:01:02:08:41:ed:8c:c1:
                    e4:71:5f:36:8f:a3:26:80:55:a5:ae:6a:45:dc:d1:
                    5a:28:fe:e8:ce:fe:92:d4:23:86:ba:aa:8a:23:35:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:5C:B6:B8:01:81:EE:95:76:99:BA:39:19:6F:C4:7B:6F:3F:E9
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.12.0-101.0.16.255
                  101.0.20.0/24
                  103.46.204.0/24
                  103.46.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:be:15:ea:4c:71:28:64:02:0a:f3:b0:7e:b4:de:d7:b8:
         d0:ca:68:a4:b3:a2:ad:de:77:5d:2a:f2:3e:cb:ae:3c:b8:29:
         14:6d:e0:f8:43:4d:28:f8:05:bc:78:2c:73:19:c2:f8:67:20:
         3c:2b:b6:42:03:38:9c:f2:99:ba:37:39:f6:79:b5:fc:49:97:
         b2:af:fa:ee:a8:9d:b3:a1:4d:e7:94:b8:6a:be:42:2f:53:a6:
         1b:3d:e0:3a:81:78:60:a0:8a:e3:2b:98:ac:61:6e:50:91:ee:
         84:bb:ac:63:b2:9b:96:c4:a0:6e:bb:14:2e:61:28:9c:ef:0c:
         d4:6e:1e:a6:a3:ba:7e:11:5a:03:c0:aa:0d:dd:60:6f:d0:e9:
         d9:d9:8a:68:3f:40:66:a4:bd:3a:56:bf:e8:73:23:db:d5:a3:
         fb:19:6c:e2:89:d5:19:20:07:47:a9:2f:91:e6:75:f8:3c:9e:
         71:eb:a4:59:3e:12:ae:6f:bf:b8:3c:5f:d0:45:67:15:cb:d3:
         3f:0f:d3:9c:60:1d:0c:bd:98:20:c6:fe:9a:c7:f9:bb:3e:89:
         78:4a:3b:5e:2d:ba:93:49:b7:02:12:4c:94:e5:a9:f1:b2:d3:
         b1:4a:2c:3a:ce:0d:a3:9a:d9:50:c8:3e:7d:d6:24:53:96:60:
         b8:f6:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:56 2026 by rpki-client