Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
File:                     E9874B2A16D011EF90793868C4F9AE02.roa (raw, json)
Hash identifier:          RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=
Subject key identifier:   1B:EC:6A:6D:A7:DC:BE:E6:BC:2B:84:A7:3A:3F:01:D6:C7:F5:DC:7F
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0216
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:04:51 +0000
ROA not before:           Sun 03 Aug 2025 04:10:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        103.112.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Aug  3 04:10:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47fc3-abf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:d2:94:0a:fd:42:5d:35:85:1c:fd:db:39:
                    12:77:33:11:ef:0b:a2:6a:39:a4:c9:b7:ef:91:9b:
                    23:4f:8f:3e:3c:93:12:d5:5f:2d:1d:b9:89:94:27:
                    70:74:e5:2b:fb:62:9a:2a:7a:54:9f:e5:00:68:7e:
                    d4:23:53:30:40:16:8b:5e:4b:17:aa:c8:01:5a:b1:
                    ab:f9:ac:a9:ea:48:61:c4:99:52:85:c8:3f:d8:45:
                    ae:9b:a7:8b:6d:53:d2:1c:93:44:02:ab:d6:91:52:
                    ff:8d:34:be:2e:25:6c:7e:5b:0c:82:4c:f3:a9:4d:
                    e5:ae:25:35:da:2c:8c:d2:e1:bb:05:ca:e3:61:e4:
                    37:f1:22:7e:5e:ed:df:d6:df:54:32:19:dd:56:80:
                    3d:4e:c3:51:f1:d5:fe:cd:26:dc:ab:c4:ba:96:03:
                    a1:c2:b4:1a:12:d8:aa:0f:6f:bc:93:5f:63:32:77:
                    d6:80:09:2b:1c:09:0f:f6:7b:e3:91:c7:1b:58:c7:
                    93:ae:65:19:f3:83:c1:79:d5:73:92:5d:bf:1b:17:
                    a2:bc:c1:87:46:e4:97:28:02:52:e8:67:f4:52:7a:
                    17:25:5b:48:b2:b8:2d:f7:3b:54:d8:77:c7:6a:52:
                    ac:0e:fc:12:5e:fd:4c:b5:2e:e7:9b:dc:39:3f:6e:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EC:6A:6D:A7:DC:BE:E6:BC:2B:84:A7:3A:3F:01:D6:C7:F5:DC:7F
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:94:34:92:17:cb:ba:15:43:7d:1d:a8:91:42:c1:11:02:4b:
         0a:a3:73:3c:5d:e8:77:90:2e:ab:57:ac:a4:f0:45:6f:17:f3:
         ed:f3:60:d1:8e:46:b3:ac:ad:a5:39:c1:ba:d7:21:cf:6e:dd:
         c3:70:b5:4f:0b:9c:43:54:e5:ec:a1:8b:02:89:94:2f:f0:dd:
         6a:f5:db:a9:3d:26:52:7d:1d:d1:a6:84:61:91:f6:28:07:58:
         0f:d7:ab:03:94:2c:9c:54:41:a7:a3:ac:f0:78:a9:e4:bf:ec:
         a2:c7:ea:4e:1e:de:15:a4:e7:d4:c0:78:c4:61:54:ef:80:66:
         79:e2:30:58:dd:8f:6e:ef:d1:5d:b6:d4:e1:0a:e8:11:d6:ca:
         89:17:dd:03:44:d0:80:9c:ec:af:20:9e:dd:05:b1:a5:0b:5a:
         b2:c0:db:4a:f6:04:34:37:12:96:fd:ff:57:e7:5f:7a:78:79:
         3f:5b:e2:0a:e5:a2:d6:b8:60:95:72:a1:b8:c8:8b:f5:b5:24:
         83:df:9a:04:02:bb:20:29:10:bb:49:b3:30:88:de:ab:0c:cf:
         2f:16:c6:ca:4e:2c:6b:35:63:16:23:a4:81:15:84:c4:21:8d:
         54:02:13:b0:66:60:fa:40:b3:96:ba:9e:1d:94:ea:43:7f:25:
         cd:4e:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:33 2026 by rpki-client