Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa
File:                     04DFAB682F3011EDBFC72D3FC4F9AE02.roa (raw, json)
Hash identifier:          cNeZai9ZKBIOkqRhV+BIrqQ6BBOfM8ZG6hCyMoJ7w1E=
Subject key identifier:   86:83:A7:AE:7F:30:34:86:60:4D:02:D9:59:A3:E5:0F:5A:F0:F8:89
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0AE3
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:14:20 +0000
ROA not before:           Sat 28 Jun 2025 19:54:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141711
IP address blocks:        103.93.12.0/24 maxlen: 24
                          103.93.13.0/24 maxlen: 24
                          103.93.14.0/24 maxlen: 24
                          103.93.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Jun 28 19:54:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a51cac-4ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:3b:8c:b5:5b:c0:1e:e7:a8:82:8c:6e:44:
                    16:02:72:b9:05:ce:0e:ab:7f:e9:9e:75:4b:5b:e1:
                    3c:4d:7d:1f:4b:25:2c:9d:9d:69:91:17:cb:96:8a:
                    23:01:cb:dc:a8:d6:77:36:b3:1b:d8:20:85:ed:ec:
                    d3:20:1d:3f:f7:17:3d:09:43:24:a9:67:3c:7d:d6:
                    20:38:7a:f6:93:b7:4b:90:23:bb:89:d9:04:57:b0:
                    16:02:15:1c:4b:8e:0a:f3:fd:df:d5:b9:60:c4:3c:
                    b8:c2:b2:71:0c:8d:db:8f:9a:dd:62:d1:36:03:f2:
                    be:e1:aa:9f:f3:f8:5e:95:1a:74:ab:a6:0a:71:32:
                    2d:14:2e:d8:9e:ae:92:69:dd:38:d5:15:ad:56:c1:
                    96:e7:6f:d8:42:fd:9a:01:df:1a:7f:80:d3:99:ff:
                    c5:bd:db:02:3b:2f:db:57:0f:1d:a3:27:b3:55:55:
                    2b:90:41:a1:ea:db:f2:50:47:98:13:4c:d5:df:c4:
                    62:ba:d1:32:b8:f3:48:16:2b:7d:28:c6:eb:40:29:
                    b3:99:ad:44:99:7e:43:8a:f7:04:de:d0:c6:34:73:
                    6c:cf:08:a1:7c:51:c6:3a:71:70:f5:01:4d:7b:86:
                    af:ce:91:30:4e:28:4b:04:73:bd:69:13:4a:19:4f:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:83:A7:AE:7F:30:34:86:60:4D:02:D9:59:A3:E5:0F:5A:F0:F8:89
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/04DFAB682F3011EDBFC72D3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:8e:de:43:aa:09:7f:89:21:ef:97:50:fe:d2:08:da:a1:
         7b:7b:cf:3d:ff:90:4a:fc:3f:fc:7d:b7:40:22:48:cb:55:da:
         5b:60:c9:a4:92:eb:94:40:15:b0:35:43:b4:77:d0:a6:18:11:
         9b:49:4f:12:38:99:42:22:b7:7c:db:a4:b3:92:75:51:b5:d9:
         d1:63:93:36:82:8a:14:c4:82:9b:65:ae:96:9a:45:41:1d:1a:
         ca:60:dd:73:e2:d4:36:54:d8:3a:e0:98:7e:85:23:5f:88:45:
         66:83:c8:32:35:ff:06:b6:eb:21:89:3a:e7:03:e1:98:4c:b0:
         67:2f:72:7c:06:8e:1c:dd:78:48:a2:2e:eb:c9:a3:98:50:1f:
         f3:fc:89:bf:96:57:7d:24:f3:69:2c:d2:d3:02:6d:86:c7:b5:
         c7:d5:8e:e1:00:34:04:a7:85:99:fd:c4:89:16:6d:05:ed:1a:
         66:59:ff:6e:3e:4e:b4:e4:b9:29:c1:b5:90:71:ef:55:88:90:
         47:ef:ba:a2:57:53:96:50:2f:ce:9d:af:6b:b7:86:ac:95:8b:
         97:d8:a6:44:77:28:db:c6:bc:4e:04:00:06:f7:5c:03:54:66:
         25:94:9a:aa:a6:23:c4:c5:ec:95:71:bc:e5:1f:2b:bd:35:b9:
         72:67:19:8a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNFRUIxMTAvBgNVBAUTKEU5Mjg1Q0EyMEY5RjhCRkZBQzdBOTczQjQ5RTA3RUND
NDI1QjUxMTgwHhcNMjUwNjI4MTk1NDI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWNhYy00Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1Q7jLVbwB7nqIKMbkQWAnK5Bc4Oq3/pnnVLW+E8TX0fSyUsnZ1pkRfLlooj
AcvcqNZ3NrMb2CCF7ezTIB0/9xc9CUMkqWc8fdYgOHr2k7dLkCO7idkEV7AWAhUc
S44K8/3f1blgxDy4wrJxDI3bj5rdYtE2A/K+4aqf8/helRp0q6YKcTItFC7Ynq6S
ad041RWtVsGW52/YQv2aAd8af4DTmf/FvdsCOy/bVw8doyezVVUrkEGh6tvyUEeY
E0zV38RiutEyuPNIFit9KMbrQCmzma1EmX5DivcE3tDGNHNszwihfFHGOnFw9QFN
e4avzpEwTihLBHO9aRNKGU8SBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIaDp65/
MDSGYE0C2Vmj5Q9a8PiJMB8GA1UdIwQYMBaAFOkoXKIPn4v/rHqXO0ngfsxCW1EY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0VFQi83MDZEODQyNDY5
QjAxMUVBQTRCMjk5NDJDNEY5QUUwMi82U2hjb2ctZmlfLXNlcGM3U2VCLXpFSmJV
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZTaGNvZy1maV8tc2VwYzdTZUItekVKYlVSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTNFRUIvNzA2RDg0MjQ2OUIwMTFFQUE0QjI5OTQyQzRGOUFFMDIvMDRERkFCNjgy
RjMwMTFFREJGQzcyRDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ10MMA0GCSqGSIb3DQEBCwUAA4IBAQCl747eQ6oJf4kh75dQ/tII
2qF7e889/5BK/D/8fbdAIkjLVdpbYMmkkuuUQBWwNUO0d9CmGBGbSU8SOJlCIrd8
26SzknVRtdnRY5M2gooUxIKbZa6WmkVBHRrKYN1z4tQ2VNg64Jh+hSNfiEVmg8gy
Nf8GtushiTrnA+GYTLBnL3J8Bo4c3XhIoi7ryaOYUB/z/Im/lld9JPNpLNLTAm2G
x7XH1Y7hADQEp4WZ/cSJFm0F7RpmWf9uPk605LkpwbWQce9ViJBH77qiV1OWUC/O
na9rt4aslYuX2KZEdyjbxrxOBAAG91wDVGYllJqqpiPExeyVcbzlHyu9NblyZxmK
-----END CERTIFICATE-----
Generated at Sat Mar 14 06:03:12 2026 by rpki-client