Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
File:                     E73006AA682811EB8D635520C4F9AE02.roa (raw, json)
Hash identifier:          bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=
Subject key identifier:   90:7E:7F:1D:90:58:10:E9:6D:A4:C6:81:13:13:BF:B8:24:50:FD:1E
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       3541
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 06:16:38 +0000
ROA not before:           Thu 02 Apr 2026 06:16:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17448
IP address blocks:        103.103.0.0/24 maxlen: 24
                          103.131.95.0/24 maxlen: 24
                          2001:df4:e900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13633 (0x3541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Apr  2 06:16:38 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69ce09c6-e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:6f:00:bc:83:09:c0:f4:b8:68:02:b5:ef:
                    b0:d8:65:10:04:d1:65:06:01:94:ad:4e:6a:d3:48:
                    65:42:f1:59:c7:7f:81:5a:d1:a0:26:85:94:c4:ec:
                    71:35:b6:f5:2c:3d:e1:6b:c3:de:f3:70:8d:2b:ab:
                    6b:eb:8d:1d:fb:ad:70:1f:14:8e:80:3b:8d:70:68:
                    85:22:e3:3a:7e:7d:8e:95:96:55:fc:7f:1b:9a:8e:
                    a5:74:04:d3:89:e3:ec:ed:a9:f1:aa:7b:ac:93:c7:
                    4a:5b:9a:3a:53:67:28:62:57:f6:eb:d6:de:c4:d0:
                    36:d6:d4:34:c4:2d:12:05:20:01:1a:e0:2c:c8:07:
                    29:6d:81:5b:97:ca:78:8c:2a:35:eb:b5:8e:0b:22:
                    5d:22:1e:1a:12:90:bd:a7:f3:f2:28:c0:b2:88:3b:
                    66:dd:38:71:aa:7b:9e:ca:8f:93:df:22:b0:16:e0:
                    b7:e7:6b:ce:49:bf:5a:a1:9a:c5:31:58:c9:fe:61:
                    c2:4e:61:4a:8a:21:cb:83:cf:aa:dc:fd:0e:71:0f:
                    68:fb:ef:6d:dc:d9:76:af:39:24:3a:04:94:b8:c7:
                    d7:02:c5:d2:1b:45:3c:eb:bb:bd:f5:8d:8b:7d:31:
                    b0:fc:1b:ca:cc:a3:58:04:0a:a8:1c:8e:e6:02:a5:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:7F:1D:90:58:10:E9:6D:A4:C6:81:13:13:BF:B8:24:50:FD:1E
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.0.0/24
                  103.131.95.0/24
                IPv6:
                  2001:df4:e900::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:e9:ca:b1:3c:3c:64:54:a5:85:f9:9c:e3:ea:e7:ba:4a:
         d1:3d:2f:ce:48:5d:1f:22:0b:3d:88:db:45:7f:b4:15:6f:b0:
         76:97:f9:c4:a3:1a:a4:cd:7e:4d:c2:8e:ec:48:dd:0f:02:6c:
         e5:a3:03:6b:db:23:f3:9b:c0:f7:e3:63:7c:eb:ef:9e:3a:ae:
         98:12:1f:23:09:46:b9:5b:06:90:50:e9:ab:46:fc:9b:5f:61:
         93:85:6c:28:bd:a6:56:4f:36:31:43:18:45:3a:72:23:74:a9:
         6d:13:ca:74:9d:4c:bd:34:7c:a4:d2:4b:80:9b:7f:a7:e2:b3:
         c7:63:37:fb:61:c0:0f:e2:cd:8e:b0:4b:91:a8:70:4a:5a:d2:
         40:01:72:21:cf:9f:56:ab:ff:9e:dc:85:bb:00:0f:26:b1:c1:
         7d:31:f1:91:9a:a9:b8:9b:0f:be:62:2c:71:b1:57:b6:13:49:
         04:80:db:21:75:5b:94:52:a2:89:4d:26:f8:53:69:a8:cf:6e:
         54:89:5c:c6:7f:38:71:3d:f1:1e:42:28:9c:f0:bf:d1:09:26:
         1c:29:13:60:8d:0b:a7:70:45:c9:d1:ad:70:24:e3:b9:75:61:
         09:76:ce:af:f8:93:1d:d4:f2:57:77:45:cd:dd:a3:71:b5:28:
         f8:36:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:09:20 2026 by rpki-client