Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa
File:                     E667E45629D211F19DF1399897833773.roa (raw, json)
Hash identifier:          In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=
Subject key identifier:   ED:72:40:5A:F0:E7:B1:E2:DD:02:A6:60:68:D2:85:27:0D:0F:07:E1
Certificate issuer:       /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
Certificate serial:       02
Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa
Signing time:             Fri 27 Mar 2026 11:48:41 +0000
ROA not before:           Fri 27 Mar 2026 11:48:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18229
IP address blocks:        103.13.96.0/24 maxlen: 24
                          103.13.97.0/24 maxlen: 24
                          103.13.98.0/24 maxlen: 24
                          103.13.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl
                          rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
        Validity
            Not Before: Mar 27 11:48:41 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69c66e99-d793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:18:6a:1d:20:28:1e:05:17:99:eb:f2:58:
                    40:e2:6c:42:21:87:9c:74:46:9f:27:ed:0a:5c:37:
                    04:11:f4:e3:76:25:43:ef:9a:48:33:d7:0e:87:b1:
                    67:e2:d4:b4:98:14:e6:69:02:73:c3:69:d6:72:68:
                    59:2d:e0:2e:d4:c4:35:d8:08:75:50:96:8f:58:b6:
                    95:b3:4d:1e:ce:9f:26:17:a6:ff:1e:ea:b8:d8:12:
                    8b:c9:ea:5f:43:66:69:14:6b:33:5b:c0:f9:62:b2:
                    c8:10:84:90:54:d2:cc:4a:af:f9:cb:f1:2f:dc:9f:
                    fe:9a:33:d5:2b:67:ea:a7:ee:dc:3c:77:8c:13:a2:
                    32:bb:49:78:84:e8:7a:cf:db:ff:aa:24:66:28:7e:
                    39:8d:4a:69:ef:bf:eb:4f:8c:1e:6c:71:be:7d:fb:
                    14:ba:44:0b:84:4e:86:94:68:b1:e9:dc:15:1d:f3:
                    82:b5:01:bc:49:9e:e3:af:94:a8:8c:76:db:e1:52:
                    89:84:62:a3:9a:26:c1:d3:9f:41:88:1b:14:a0:4e:
                    96:cb:e3:46:b3:76:3c:ff:40:76:7f:0e:25:3a:74:
                    27:27:1d:11:ab:e0:98:72:73:08:a1:d1:7f:51:97:
                    e9:8b:8d:be:b2:a0:bf:bf:d9:6e:4e:19:46:05:ca:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:40:5A:F0:E7:B1:E2:DD:02:A6:60:68:D2:85:27:0D:0F:07:E1
            X509v3 Authority Key Identifier:
                keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:36:c3:c0:32:86:99:24:79:96:8b:42:ac:d9:fd:e7:7e:
         a5:ce:38:90:a5:6a:6d:2a:69:91:e4:c3:f9:8a:97:13:13:6a:
         38:4b:58:1f:a7:13:a2:5b:73:b9:4d:b5:4d:25:5f:86:cf:21:
         13:bc:5d:84:a1:ba:52:8c:71:c7:e1:1b:8d:0e:f5:42:85:78:
         bd:e5:22:41:ec:f6:4f:33:92:76:59:47:86:70:bf:4b:1e:b1:
         90:a0:6f:e6:10:d8:ce:62:1b:e7:c3:06:f4:ce:75:dd:e2:8d:
         55:b5:c1:25:4e:5f:84:09:78:e8:2f:57:38:2f:71:03:07:73:
         f9:6b:e7:31:96:fb:99:82:14:1b:4d:f3:77:b8:f3:31:9f:69:
         89:66:9f:66:13:2f:90:92:50:66:8b:0d:3a:62:e3:31:ee:9b:
         bc:4d:bb:e3:06:bd:fe:2f:c5:17:89:fc:6b:fa:ea:49:69:5b:
         ff:2f:38:67:c3:a9:a8:fd:2f:ef:a8:ba:31:06:21:67:b9:4b:
         8c:aa:7a:73:00:e0:aa:b6:33:cf:17:75:d6:f5:79:bc:6b:64:
         ef:19:1c:4a:08:2d:5a:dc:36:d4:d6:5c:fd:93:20:d7:73:14:
         e9:cb:1b:82:08:54:e4:75:9d:0d:27:23:56:90:2a:f1:be:ee:
         19:81:74:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:51 2026 by rpki-client