Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/ED4C74EC5B2911EDAC608856C4F9AE02.roa
File:                     ED4C74EC5B2911EDAC608856C4F9AE02.roa (raw, json)
Hash identifier:          c4KIZ7sVtzVDPX25+FzQ/O+y1BOxGSAb3CkDDL2gT68=
Subject key identifier:   67:B3:67:1C:4A:BB:AE:54:F7:FE:3B:E9:F4:D7:D0:C6:34:54:14:07
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       1113
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/ED4C74EC5B2911EDAC608856C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:12:46 +0000
ROA not before:           Fri 06 Feb 2026 17:15:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     54197
IP address blocks:        103.136.184.0/24 maxlen: 32
                          103.136.186.0/24 maxlen: 32
                          2404:9ec0:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4371 (0x1113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  6 17:15:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4819e-c38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:50:93:e3:f2:29:73:c4:e2:d9:b8:96:70:
                    6c:1f:99:63:b2:a2:c7:b8:33:a8:f3:d9:94:c9:27:
                    85:49:1e:f5:a0:2d:6f:61:62:dd:36:1f:de:30:ff:
                    ac:ff:5f:23:28:32:32:70:db:2b:94:d5:5c:88:5b:
                    67:f3:26:ab:e3:5b:b3:c8:29:02:98:46:8a:25:29:
                    53:6f:42:8a:2e:54:84:49:f1:39:12:f4:b5:74:d0:
                    ba:4a:19:10:60:82:bc:3c:d3:27:b3:22:39:95:e6:
                    78:29:07:39:04:9a:3b:d8:4a:b9:32:12:78:cd:07:
                    37:ac:62:c5:75:51:2d:d8:fb:f1:6c:17:75:21:9a:
                    88:d7:de:ae:9a:1f:29:a8:f3:2f:1a:b2:5f:93:65:
                    dd:6b:c5:d6:04:47:dc:77:10:e8:38:f3:7b:a0:51:
                    1d:a5:5d:12:03:31:ef:f9:38:5e:c0:38:2c:52:86:
                    a8:bc:64:bb:23:3d:7b:7b:eb:08:bd:dd:7b:e1:bd:
                    ff:a3:bd:92:1d:da:67:86:ab:a7:64:c0:cc:81:99:
                    da:47:fe:b8:e9:17:cd:33:1d:13:a5:ab:25:bb:e2:
                    4d:27:67:31:0f:de:9d:3a:f8:c5:b0:b1:4e:0c:b5:
                    61:ea:94:0b:61:65:74:5b:fc:2f:e3:58:67:88:62:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:67:1C:4A:BB:AE:54:F7:FE:3B:E9:F4:D7:D0:C6:34:54:14:07
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/ED4C74EC5B2911EDAC608856C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.184.0/24
                  103.136.186.0/24
                IPv6:
                  2404:9ec0:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:86:0a:66:78:d8:e3:57:44:2d:ec:3d:f1:9e:ac:ec:92:
         58:aa:60:43:a2:ae:b9:43:a9:07:c6:46:f4:6c:ae:82:84:dc:
         b6:e8:d1:a2:30:c7:81:28:9c:82:13:87:d8:4d:c9:3c:16:00:
         1e:89:c5:71:24:99:b7:00:b1:7d:32:0b:85:45:9b:2f:33:3f:
         91:46:73:01:fd:e1:b8:bf:e1:26:5b:cc:81:11:27:b8:55:0d:
         4a:9a:c3:ca:1c:44:16:b3:23:6d:68:73:f9:59:04:c6:c0:9f:
         63:f6:0a:4c:fb:97:4e:ce:00:47:4c:c3:93:ef:df:67:6d:86:
         1b:a7:0b:4f:67:f4:4f:1a:dc:7f:c5:bf:47:9a:3c:a7:86:b9:
         f4:aa:e3:c0:3b:4d:ed:77:74:a3:1d:a2:8c:77:d6:d2:2c:af:
         17:ac:25:70:59:5b:73:5b:04:35:3a:8b:0a:27:52:3c:70:60:
         54:4c:50:c6:e2:eb:26:ba:0e:3c:93:d8:19:7b:9c:b5:78:1a:
         d0:70:2f:8d:82:67:5b:03:22:49:fc:e0:7d:72:cc:1b:ac:44:
         f6:76:b3:ae:34:2e:de:ef:b6:84:b9:04:c9:0b:69:83:81:e2:
         3c:b5:c4:f7:9e:fe:95:81:70:f5:31:8a:a8:c3:2c:e0:60:da:
         55:ec:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:20 2026 by rpki-client