Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa
File:                     E614FEEED6AF11EEAB03B528C4F9AE02.roa (raw, json)
Hash identifier:          RDlVLDLOhqOnI9I6d3Hl9srXxZWtSoRzaaXEKYVLEDs=
Subject key identifier:   57:31:A0:5F:CB:18:6E:D8:F6:E8:56:E9:86:B7:E3:B9:A9:9D:A1:35
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       019A
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 04:37:12 +0000
ROA not before:           Tue 21 Apr 2026 04:37:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132174
IP address blocks:        103.109.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Apr 21 04:37:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e6fef8-dc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:95:ed:62:de:b2:3f:93:aa:87:41:96:56:
                    52:a4:3e:ca:cd:7c:55:e3:cb:cc:9f:a3:ec:26:65:
                    b0:95:e2:65:62:95:45:ca:94:1f:d8:b0:4d:f1:2f:
                    40:2b:36:ee:3c:c2:8e:15:fc:e3:37:85:ce:f6:a1:
                    40:99:9a:06:98:2e:59:19:00:c6:bc:07:64:11:36:
                    f4:2f:fd:1b:28:dd:81:f5:94:77:58:d0:b0:65:d3:
                    8e:17:d8:44:94:3d:97:47:01:e5:89:74:ba:ea:6d:
                    bd:0f:78:3f:77:48:fe:c0:85:12:97:50:a7:ed:18:
                    c5:2d:6b:5a:11:e6:1e:65:73:74:dd:8d:2d:b5:5f:
                    e6:47:33:bd:02:1c:2a:96:8e:0a:bd:0f:a8:fb:5f:
                    b8:ef:7c:b5:ce:b7:81:4a:19:64:12:52:eb:93:81:
                    87:8d:df:81:1c:1b:77:c0:c2:21:54:f3:3b:c0:5c:
                    05:11:79:a5:0b:a6:8f:dc:76:5b:a1:c4:13:f3:0a:
                    22:b6:45:cf:dd:fd:7d:79:4a:ca:32:93:1f:c9:a9:
                    23:f5:f4:b3:df:1f:59:18:ad:53:3a:1b:11:b7:7e:
                    87:57:6e:7e:c1:c4:e5:fc:7c:ae:91:56:6f:c4:b2:
                    a1:3f:ab:92:a0:4b:cc:03:c4:b4:99:6a:5a:f9:d1:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:A0:5F:CB:18:6E:D8:F6:E8:56:E9:86:B7:E3:B9:A9:9D:A1:35
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/E614FEEED6AF11EEAB03B528C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:1d:c6:c2:dd:f1:0d:ae:fe:07:72:46:30:66:6b:85:1d:
         ae:db:b6:3d:a9:a1:7a:53:ac:f6:93:15:ca:29:95:40:7f:06:
         cf:f2:98:71:7c:bd:c3:5e:46:ef:5e:32:78:b9:cd:54:33:7e:
         cd:eb:24:c9:24:fa:40:94:d1:1a:41:63:20:ee:78:14:d5:b7:
         51:ac:c1:d8:66:40:04:51:80:4b:07:95:20:53:04:e9:bf:39:
         54:4b:4c:b1:1a:be:96:9f:ad:1f:ae:6f:2b:6f:31:04:99:50:
         4d:08:65:bd:01:70:55:21:d0:bc:d9:4e:7e:69:e3:25:6c:45:
         d1:bd:c6:0f:16:e5:55:39:73:9e:db:c7:2a:4d:b1:65:7d:82:
         b1:f5:80:71:e1:7f:e7:5f:97:61:dd:c1:0c:05:6b:1f:f4:0f:
         08:1f:a0:12:69:70:16:14:64:0a:b3:61:c5:12:4c:3e:ba:b7:
         1e:5d:62:1b:76:85:dd:ae:4e:02:79:5d:4c:f3:a2:d1:ef:22:
         2c:e9:fc:13:e1:b9:0a:96:7a:27:9b:15:d1:0a:16:d7:f8:cd:
         34:88:38:35:da:b4:7c:82:a9:a9:c5:d0:d4:6e:5c:f4:0a:ff:
         ee:14:3f:8b:4e:09:5c:ef:ed:9a:0f:f1:c2:11:7f:b5:fc:1a:
         fd:b0:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:14:37 2026 by rpki-client