Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa
File:                     9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (raw, json)
Hash identifier:          026Knq2plOiwx6Tgn+z3o0GLCGWM3BV7YvB6QTBoT/c=
Subject key identifier:   AD:9B:E9:49:B2:23:95:80:D1:69:07:EC:18:D2:B9:22:09:D6:12:B4
Certificate issuer:       /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial:       03A7
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:25:26 +0000
ROA not before:           Sun 13 Apr 2025 01:06:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141004
IP address blocks:        103.186.184.0/24 maxlen: 24
                          103.186.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
                          rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
        Validity
            Not Before: Apr 13 01:06:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e9e5-3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:b1:9c:7f:21:ae:16:a5:43:b1:d6:16:d8:
                    f0:94:ff:d0:3b:63:df:47:a1:b9:5c:5c:ec:df:0e:
                    cc:47:f4:9a:94:2a:ad:d6:77:cd:ec:b9:d0:7d:bc:
                    d3:ca:a4:21:b6:68:7d:76:66:cc:e8:0a:ef:3d:39:
                    2b:01:79:f0:d1:93:b7:73:ab:8e:07:46:ab:86:e1:
                    7d:f7:32:bf:b0:1f:81:50:c1:bf:92:bd:bf:e8:df:
                    91:3b:42:30:47:2c:24:ff:3f:b4:3c:45:8a:ff:4b:
                    16:09:8d:f5:12:26:5f:31:91:ad:5b:c9:f7:3a:45:
                    03:1b:c8:24:7e:21:b3:61:31:13:e7:cf:22:6a:0c:
                    f5:be:2e:af:fe:9f:26:19:e5:32:24:4b:05:c1:c4:
                    2b:ac:b6:d1:44:3a:c1:23:50:d0:87:35:1a:d9:8f:
                    72:41:0b:e6:7c:c6:55:21:39:34:22:02:34:c3:0e:
                    e3:a6:af:7f:78:06:8b:ac:3f:3b:56:f5:21:ad:1a:
                    ca:e4:fd:35:c5:4b:1f:c1:95:9f:fe:61:77:fd:08:
                    79:61:af:76:a2:91:a1:7b:8b:2c:31:0f:08:30:aa:
                    5b:fd:08:73:ae:34:52:f9:6d:25:cb:66:b9:6a:29:
                    ae:c6:c8:48:7d:06:12:86:3f:b0:0d:cd:ca:39:d3:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:E9:49:B2:23:95:80:D1:69:07:EC:18:D2:B9:22:09:D6:12:B4
            X509v3 Authority Key Identifier:
                keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:51:3d:72:f7:0b:c5:c4:e8:ff:4c:d0:9a:cd:96:97:43:
         9d:ab:c7:22:eb:af:97:84:34:3e:4d:65:0c:bf:14:5c:fa:12:
         e6:87:fb:8c:08:76:80:48:56:d0:9d:d4:71:df:b7:94:d0:ca:
         dd:38:a4:eb:4a:ea:e8:1a:34:dc:8c:76:63:4e:fe:63:f6:be:
         7c:bb:5d:b1:f0:7f:38:37:98:c2:aa:a6:75:01:d9:cf:8f:51:
         90:6d:39:d5:9e:df:27:43:7a:f1:d6:56:e5:4e:9f:fe:e1:e5:
         d2:a7:08:4b:dc:4a:f6:78:3b:77:81:2e:7e:d5:55:55:21:12:
         51:c7:b8:64:2d:39:dc:20:d8:39:f1:e4:30:9b:47:2c:4e:71:
         27:ef:41:32:4d:1f:1b:23:ef:54:70:3d:fc:d4:1b:4e:dd:a3:
         dc:4e:b9:33:03:d0:4b:bb:00:b8:4b:ed:37:e1:10:ef:2b:d9:
         20:a2:bd:25:55:d3:bc:35:ef:46:4f:72:6f:f6:31:d3:36:1f:
         d4:c5:47:5e:e8:7b:b2:72:14:75:50:64:77:53:9a:c3:d0:ee:
         0c:bf:34:6b:81:fd:fc:2a:c2:99:eb:8a:6e:6d:07:0d:af:2f:
         59:3e:68:5d:3f:2f:67:db:7d:9f:75:4e:d6:1f:b5:b3:dd:be:
         48:15:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:10 2026 by rpki-client