Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa
File:                     E2B81154741B11EB83EC7A62C4F9AE02.roa (raw, json)
Hash identifier:          jnVVhSXYnTs1B6znTFbJy7l0RU+BV0/7OxmBMqWMtrc=
Subject key identifier:   0B:B6:C8:7E:BB:38:58:1B:14:5A:78:27:73:62:DD:47:F3:37:B8:1E
Certificate issuer:       /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial:       072A
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa
Signing time:             Mon 30 Mar 2026 22:28:37 +0000
ROA not before:           Mon 30 Mar 2026 22:28:37 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132800
IP address blocks:        103.162.230.0/23 maxlen: 24
                          2001:df6:280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
        Validity
            Not Before: Mar 30 22:28:37 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69caf914-7ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:b4:0c:a3:f0:bc:98:4a:e8:57:d5:bb:20:
                    f0:80:20:eb:19:43:70:5d:01:19:69:22:ae:e3:55:
                    df:9d:32:0d:f7:39:bd:94:ea:e1:3c:2d:5f:b9:fd:
                    f3:da:06:86:58:1a:42:da:8c:ac:a2:a1:67:f2:dc:
                    af:df:db:bf:d0:ee:b3:af:20:56:81:a8:74:fd:61:
                    77:ef:eb:51:f7:d1:95:fc:6e:df:ba:e9:4c:5f:37:
                    85:e0:b4:ee:0c:1b:34:38:91:7b:8c:b8:33:56:c8:
                    51:c6:51:2f:a9:15:79:50:42:f5:47:a8:4f:56:1a:
                    a6:69:5d:23:78:c3:57:a4:aa:1a:cc:e4:61:41:bb:
                    6a:8c:4a:29:01:d0:8d:a1:23:8c:c3:a1:f4:e3:b3:
                    7f:d3:0f:6e:e5:4b:f3:f2:ab:41:c5:ed:20:e0:bd:
                    2b:20:e7:da:b1:bc:26:f1:23:56:37:02:06:6c:c0:
                    37:cd:25:e3:eb:7f:99:2d:7e:9a:ca:6f:5a:45:02:
                    a3:60:80:3d:99:f5:e6:6e:af:db:04:2a:f8:ff:5b:
                    97:b7:f6:5a:40:7f:b9:77:fa:9f:82:cd:6d:07:64:
                    34:06:36:dd:07:47:c4:7a:34:b1:cb:2f:39:09:cd:
                    57:10:46:57:cb:35:b0:cc:63:d8:7d:3a:2a:1f:ae:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:C8:7E:BB:38:58:1B:14:5A:78:27:73:62:DD:47:F3:37:B8:1E
            X509v3 Authority Key Identifier:
                keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.230.0/23
                IPv6:
                  2001:df6:280::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:00:65:43:16:e9:75:08:85:91:5b:5e:54:c4:b8:77:78:81:
         fb:3d:77:2c:3c:f8:7c:f4:d7:d3:46:5a:14:76:33:ba:99:c6:
         eb:38:ba:58:5c:0b:77:4f:a9:28:f0:ee:7f:78:2c:f5:36:4e:
         ea:a0:b3:57:47:e6:1d:67:8d:56:40:0a:ba:f9:3c:5d:4b:07:
         b5:3d:cd:59:91:16:55:79:19:3b:19:ca:45:70:63:60:87:fa:
         5e:9e:28:0b:2c:b8:32:5b:50:8c:36:ad:02:c7:ca:5c:80:bc:
         39:5a:0b:b0:d6:ab:ea:a8:82:84:21:bd:77:73:20:9e:99:35:
         78:88:2e:83:3f:eb:03:8a:40:e2:40:a8:a2:e8:26:ae:39:d0:
         6e:e7:bd:94:40:39:30:ba:a5:12:63:e1:a3:3a:61:ab:0c:8d:
         7e:89:bb:99:b2:3a:6e:0d:aa:69:e8:22:3c:7c:e5:8a:ef:db:
         04:14:3c:b3:fb:46:e5:75:2b:4f:9a:8e:14:98:38:40:74:02:
         b1:80:8e:de:e2:85:ef:1e:89:6e:3b:f8:cb:d2:ac:bc:d8:f6:
         66:26:48:ff:b1:67:07:e8:fd:2d:0b:d7:85:f3:44:b6:7b:8e:
         75:70:9b:04:cc:c6:f4:6a:54:17:df:55:19:8f:d3:3a:af:fd:
         db:7d:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:06 2026 by rpki-client