Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
File:                     E14490BE9C9511ED8014F84CC4F9AE02.roa (raw, json)
Hash identifier:          PUJrr6mZrbjL7JBY9o/q2jkIvMl5fNG0p60ilL3XIuc=
Subject key identifier:   1E:2D:58:DB:7B:69:36:64:4F:C5:82:A7:05:AB:B2:9B:2F:4A:5F:90
Certificate issuer:       /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial:       05E4
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:38:46 +0000
ROA not before:           Sun 31 Aug 2025 23:45:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135098
IP address blocks:        103.170.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9670, serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
        Validity
            Not Before: Aug 31 23:45:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43356-05c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:57:a9:8d:c0:b1:a7:fa:de:00:2e:f1:a6:
                    cb:30:2f:b4:bb:7a:52:7e:20:b2:50:1f:8e:16:16:
                    a2:ea:39:ed:ea:dc:d2:dd:44:2b:c1:3a:b2:d7:84:
                    7b:10:a2:a4:d2:99:36:84:9c:1a:91:08:96:bd:a2:
                    78:fb:6c:b6:78:cf:8e:b9:30:fc:6f:95:90:f9:fa:
                    2e:d5:ca:a9:5b:0f:05:fc:57:3f:de:17:b5:84:e9:
                    51:60:c5:c0:a4:e8:a5:d7:fb:55:c7:be:ac:32:cd:
                    d7:79:27:3d:11:1c:4d:13:b4:f4:9f:2d:ca:9c:af:
                    61:8e:69:26:d5:e4:cf:bc:98:36:fb:35:e5:c4:bd:
                    71:c0:2a:22:5c:ab:f6:de:b0:8a:27:04:7e:ab:87:
                    50:f5:28:5b:1c:55:2a:f5:db:96:ba:21:d3:6a:28:
                    52:11:05:7b:7a:3f:a0:5d:4c:fa:ee:c1:15:d1:96:
                    60:74:bb:0c:e7:5e:8c:7f:95:86:0f:14:a9:ed:78:
                    55:f8:1f:72:cf:e1:92:b3:51:cf:fd:2a:3c:36:4a:
                    81:d7:c8:d1:49:b9:8a:0d:4f:57:ed:30:d5:bb:a7:
                    8f:7f:72:f7:0a:19:49:e3:6d:76:af:1e:c2:67:c1:
                    a2:e0:38:cf:21:bc:d8:d0:78:03:af:f3:b3:71:60:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:58:DB:7B:69:36:64:4F:C5:82:A7:05:AB:B2:9B:2F:4A:5F:90
            X509v3 Authority Key Identifier:
                keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:21:67:5d:44:bf:2b:d0:92:c8:c2:11:79:fd:6b:40:46:ee:
         2c:c6:a5:89:0f:4d:b2:0b:bd:e3:d0:84:05:c1:51:cc:0b:89:
         68:6f:69:3a:3f:50:27:c9:cf:fa:1a:bf:b3:00:f0:de:9a:5a:
         2a:2b:24:c0:2f:07:e4:ca:d8:86:c0:a9:57:10:23:27:18:33:
         4c:6f:c0:93:90:8c:1b:9f:68:6c:2b:74:a0:d1:cf:89:8b:60:
         a0:fc:50:0e:0e:ce:56:e1:fd:18:3c:64:6a:b6:c0:24:e4:e6:
         a1:f2:04:58:9e:34:89:c7:02:77:cc:e7:01:df:39:d6:d3:40:
         8d:11:a3:bf:34:ca:38:40:18:21:83:96:9b:ac:6e:92:f9:ab:
         fd:17:b3:eb:97:8a:b8:fa:dc:00:2c:31:ea:e0:ba:d4:73:2b:
         5e:5b:de:21:33:33:42:a8:bc:02:7a:52:c5:ef:c8:c2:dc:e8:
         6f:8c:b8:ec:94:4d:aa:d2:fc:8a:bd:30:7a:20:b0:55:2d:d5:
         9b:4b:1f:06:98:de:aa:c5:5c:60:5a:e8:2f:8c:57:99:e8:05:
         7e:be:70:0f:e5:33:cc:32:87:6c:cd:6c:1d:11:fb:8d:d9:e7:
         28:f9:00:61:5a:97:d5:67:ec:a8:de:c8:9d:f6:ab:29:be:bc:
         fb:89:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:21 2026 by rpki-client