Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
File:                     EE44E774314411EF956C0046C4F9AE02.roa (raw, json)
Hash identifier:          mSB8uynASz5JULPqU2um7D00gtNkbXdaEHU3YnsuCGU=
Subject key identifier:   90:D5:32:53:96:18:C5:EB:68:6A:16:EC:5B:29:02:2B:4F:F0:10:20
Certificate issuer:       /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial:       01D8
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:04:29 +0000
ROA not before:           Sat 07 Jun 2025 04:32:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     61414
IP address blocks:        103.93.76.0/22 maxlen: 22
                          103.93.76.0/24 maxlen: 24
                          103.93.77.0/24 maxlen: 24
                          103.93.78.0/24 maxlen: 24
                          103.93.79.0/24 maxlen: 24
                          103.225.68.0/23 maxlen: 23
                          123.253.108.0/22 maxlen: 22
                          123.253.108.0/24 maxlen: 24
                          123.253.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
                          rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 02:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
        Validity
            Not Before: Jun  7 04:32:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4395d-03cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:e2:40:4c:1d:e8:56:be:aa:c1:0e:77:e3:
                    fb:f6:08:be:77:00:78:f9:61:ca:09:a7:44:fd:95:
                    ab:2e:ea:13:f9:f6:e1:e2:6c:6f:e6:4d:97:38:3a:
                    0d:9a:21:18:35:f2:87:45:17:2b:6c:79:d9:8f:a3:
                    be:92:6e:a1:93:15:5f:d9:8d:4d:70:68:5e:96:d0:
                    45:07:91:ef:05:8e:53:d0:af:2f:9f:dc:c4:15:ef:
                    20:6b:aa:e2:64:a3:fc:99:f2:92:71:45:c2:7e:68:
                    3f:23:f4:e1:0d:94:67:ef:31:8c:00:4b:be:e9:ea:
                    4b:3b:61:a8:a6:cf:48:a3:27:aa:d7:ac:57:95:ce:
                    eb:1b:53:19:70:10:72:5e:4a:fc:13:66:e7:3b:66:
                    0e:bd:5d:ff:1e:49:59:50:19:ce:b2:6a:58:20:56:
                    54:12:da:7d:39:8e:e6:75:65:1b:a5:c4:cf:e4:a3:
                    b3:e3:7c:69:8f:ac:6b:55:a2:56:d1:90:6d:c9:ae:
                    06:92:75:ac:48:65:23:c4:0e:df:1b:c0:e4:fa:d9:
                    f5:02:2f:88:a2:32:0b:8f:a1:6c:ba:d8:2b:20:17:
                    83:0d:97:bb:95:90:f2:1b:4d:1c:87:44:f7:9b:cc:
                    cd:7a:01:0b:cb:f7:1f:a8:e0:c1:b3:91:f9:c6:50:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:32:53:96:18:C5:EB:68:6A:16:EC:5B:29:02:2B:4F:F0:10:20
            X509v3 Authority Key Identifier:
                keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.76.0/22
                  103.225.68.0/23
                  123.253.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:7c:36:32:af:31:f6:04:53:50:20:de:98:1a:5d:8a:c6:
         70:56:1c:58:f8:96:c6:46:70:a6:4b:e5:9d:d4:45:27:33:a7:
         c7:47:a0:57:e9:ff:da:7f:1a:38:89:f8:f9:ff:45:39:de:59:
         20:3f:39:48:a0:7f:84:ef:d3:fd:34:6f:63:85:69:96:74:26:
         a4:9f:3f:d5:93:0d:4c:c6:11:d6:33:9b:f9:23:09:7f:ce:12:
         aa:f1:1f:89:d4:bd:c7:ab:21:27:1f:a4:32:40:ca:a1:b2:b8:
         90:1b:d0:17:f1:18:84:a9:d8:2b:7a:22:93:93:0d:57:d3:23:
         d6:96:69:eb:81:5f:ff:25:b3:64:03:11:38:b3:95:7e:b2:df:
         87:e8:22:e1:fc:d5:71:6b:fa:0b:a4:83:4b:cc:8e:3c:02:11:
         fd:25:36:69:64:7e:98:1d:6b:ce:b4:54:9c:77:46:a7:be:43:
         8f:96:24:1d:de:fc:3f:cf:7d:8b:94:dc:be:bd:04:d7:0b:46:
         d1:1d:e3:d1:41:60:f6:ef:93:29:03:cd:b7:1d:66:3c:0f:ce:
         8e:d8:0f:c6:ac:0e:7c:02:08:f8:3a:ed:c6:55:d1:90:89:d8:
         38:c1:da:27:5a:03:6c:57:e9:d0:00:c5:c0:be:db:1b:6b:73:
         ea:35:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:34:31 2026 by rpki-client