Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/BB90D9FECF4B11F08EB76486C4F9AE02.roa
File:                     BB90D9FECF4B11F08EB76486C4F9AE02.roa (raw, json)
Hash identifier:          rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=
Subject key identifier:   0E:C7:C0:19:5F:6B:08:F0:23:45:EB:13:09:F9:1C:D7:15:10:0A:E8
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       0163
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/BB90D9FECF4B11F08EB76486C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:26:43 +0000
ROA not before:           Tue 02 Dec 2025 06:54:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     31128
IP address blocks:        103.142.152.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: Dec  2 06:54:22 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59013-f3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:8a:5d:93:26:ca:f8:22:a3:a2:d3:eb:cf:
                    92:20:d8:54:30:6b:11:32:eb:33:a3:76:4e:e9:7d:
                    60:d2:70:43:32:a4:e6:6e:2f:f8:c6:07:37:21:6d:
                    98:4c:5e:0b:98:2a:e0:76:e6:d1:30:aa:79:e1:3e:
                    0c:e0:4c:f7:56:82:0a:02:af:a5:f6:db:a1:26:28:
                    8e:6c:7c:41:a3:97:3b:44:a8:cd:5b:e3:ce:b5:50:
                    82:57:e0:c8:d3:44:88:33:8c:cf:f2:14:dc:49:bb:
                    cd:d7:5d:14:bc:18:b7:75:f2:67:ea:f5:73:37:d8:
                    25:34:c5:bd:5c:5e:72:f2:fa:6f:04:b3:2d:86:02:
                    ad:7e:90:7a:45:d3:5e:69:28:e3:76:4d:91:e3:a5:
                    16:5b:30:1e:df:ea:7a:7d:b1:f5:8c:97:97:65:3b:
                    f7:b9:49:e9:a0:8b:7e:4f:10:e5:53:f7:e4:60:60:
                    75:e3:30:29:22:f5:e4:49:b4:bb:71:74:01:ae:53:
                    66:8f:5f:86:3b:1d:2e:7f:84:bb:5b:b6:ec:44:96:
                    2e:5c:b0:bd:bd:7c:14:9d:f1:c6:5f:2a:5c:60:b6:
                    59:a7:c7:3e:56:63:57:f0:2f:98:33:43:c3:52:4e:
                    fd:68:7f:c4:a6:da:82:e3:ed:b4:70:1e:94:8b:61:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:C0:19:5F:6B:08:F0:23:45:EB:13:09:F9:1C:D7:15:10:0A:E8
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/BB90D9FECF4B11F08EB76486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.152.128/27

    Signature Algorithm: sha256WithRSAEncryption
         c5:8d:ad:ab:f8:11:60:5c:be:3c:b1:e2:75:6c:e5:1b:47:33:
         1e:92:b8:59:1a:2e:fd:31:25:a1:97:8a:28:45:2b:e8:af:0d:
         0d:57:12:e6:8d:56:d8:c3:99:6a:db:45:b4:9a:5e:d5:4c:97:
         e1:ac:21:a2:20:cd:2a:73:71:06:37:81:ba:1e:e3:a5:de:a8:
         51:fb:99:0f:d1:22:57:2e:11:c7:7f:3b:8d:eb:8f:d2:4f:e8:
         a7:00:2e:45:9b:ef:c4:d0:e9:34:e6:12:b4:ec:23:f1:ba:8e:
         ad:91:48:73:1a:c9:45:c1:8a:18:35:30:e6:49:06:3c:2b:be:
         3d:78:10:9d:51:3e:a6:be:ac:66:d5:b0:89:62:84:51:f1:05:
         70:09:64:f7:a2:48:3d:49:81:64:c7:ef:93:25:2c:71:96:64:
         04:59:f5:22:de:34:2b:0f:c5:d0:82:b1:74:48:8b:0a:90:28:
         27:0b:7c:c5:2f:be:19:ad:d5:ae:b7:81:0f:1c:35:b3:7f:e2:
         93:5a:39:1b:2f:6f:62:a2:bb:31:e4:db:15:a7:05:da:09:88:
         76:10:f7:90:75:51:6e:5c:d1:6a:98:20:da:96:f0:34:97:2f:
         87:35:6b:37:d8:bd:d2:77:66:8c:5f:a1:e3:e6:a5:04:37:6d:
         28:4e:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:00 2026 by rpki-client