Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
File:                     C9836F3A314C11EEB33F3686C4F9AE02.roa (raw, json)
Hash identifier:          QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=
Subject key identifier:   B4:4E:FE:32:2B:0E:62:EB:3A:F8:15:D9:90:53:81:49:4F:25:98:2F
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       01F5
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:17:35 +0000
ROA not before:           Tue 29 Jul 2025 04:41:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142111
IP address blocks:        103.158.74.0/23 maxlen: 24
                          2401:1da0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jul 29 04:41:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4123f-c38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:3e:5b:42:d2:dd:f0:51:10:ce:bf:de:86:
                    14:f7:e9:96:10:9b:30:d9:f7:3d:18:6e:d2:49:75:
                    fa:9b:df:97:de:81:e9:b0:99:49:95:93:36:17:30:
                    1d:7c:b2:e3:e9:6a:bd:3c:0d:48:8b:27:5c:06:5a:
                    d8:e8:9a:be:c6:aa:a4:fb:1c:09:28:82:89:05:98:
                    53:11:76:2f:78:8f:80:63:28:ed:57:6a:ba:02:1f:
                    a8:a9:08:71:56:37:d9:42:2a:b0:ec:18:c7:8b:4e:
                    a5:c8:e8:09:fd:3f:96:44:15:16:e1:9f:a2:51:b9:
                    c9:30:22:3f:ef:dd:42:fb:8e:91:47:94:65:76:6c:
                    f2:f4:85:9d:d0:49:46:23:8a:0a:73:22:ec:bf:9f:
                    90:0c:6b:5e:1f:ce:b4:68:ae:bf:85:ff:54:f8:62:
                    cd:75:9a:d7:35:27:aa:47:a6:3b:8c:da:0e:ca:de:
                    f2:6d:f6:3d:c4:3f:a6:46:a3:a4:c7:d9:a6:87:0e:
                    b1:11:81:ff:59:ff:28:99:a1:84:ee:3c:ce:aa:36:
                    98:6a:8b:49:45:0d:7d:ac:57:12:a0:8e:32:21:9d:
                    e1:5e:3b:67:f3:5e:4f:84:b6:87:27:9f:3a:89:d1:
                    e6:cb:4f:04:46:c6:ea:98:6d:7b:ea:f7:a5:71:cd:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:FE:32:2B:0E:62:EB:3A:F8:15:D9:90:53:81:49:4F:25:98:2F
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.74.0/23
                IPv6:
                  2401:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:7b:87:be:58:ea:87:47:55:b7:5e:8f:2f:a3:e7:10:db:
         99:ff:54:ad:a4:0e:2c:5e:b9:07:36:93:44:77:b1:57:71:3c:
         6c:0d:7d:8c:c0:f3:51:6b:61:fc:07:dc:0a:29:de:93:e0:95:
         f5:e5:7b:46:79:4d:a2:07:97:cd:e3:97:b8:b4:86:6e:28:15:
         5a:c3:42:88:17:b8:55:ae:83:b1:5e:d6:cf:d2:88:85:a5:58:
         a2:75:65:5f:99:c7:82:1c:cc:0f:f2:7a:91:94:d5:5c:d0:2e:
         5d:d5:06:78:64:8f:25:b9:5d:d5:56:65:04:01:c4:de:12:77:
         32:f3:56:04:dc:14:85:26:99:24:a3:69:cc:ad:cd:91:62:31:
         69:58:32:30:de:a0:f9:c1:f9:2c:11:32:f3:92:9f:ff:28:c6:
         93:e0:44:85:61:ef:66:01:1a:d6:3e:01:56:f3:6d:58:e1:2b:
         71:f4:0e:0a:61:ab:a9:5c:3c:5d:1b:4e:52:bc:b7:8b:43:1c:
         bb:93:90:e5:bb:e4:aa:cc:f5:a5:61:9e:7b:38:1b:3b:1e:b5:
         bf:43:a8:89:b5:be:21:59:d1:38:d1:e2:04:94:a0:af:15:24:
         90:b5:23:31:e2:77:7a:9c:d8:e3:75:b3:70:d0:58:a3:7d:f6:
         e6:74:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:24 2026 by rpki-client