Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
File:                     E09D5D9C7F0711F092740742C4F9AE02.roa (raw, json)
Hash identifier:          m7DMA83ij3acsruvbXtzUZGixQ9Vi2li8uh9A40WUy8=
Subject key identifier:   E1:E1:7B:FF:3B:0C:A7:98:3C:45:08:DC:18:64:00:22:5C:28:96:5A
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       6C
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:28:38 +0000
ROA not before:           Sun 01 Mar 2026 09:28:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149014
IP address blocks:        103.147.202.0/24 maxlen: 24
                          103.147.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Mar  1 09:28:38 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a406c6-a9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b3:3e:3e:d9:12:7b:bf:b6:27:b8:0c:8a:2e:
                    c3:c5:53:5d:51:3d:d1:7c:4b:b0:a9:97:d1:9f:b9:
                    c2:49:36:93:27:e5:36:2d:6b:09:db:fb:13:6e:c7:
                    f1:c4:17:b1:1d:76:2b:35:dc:00:1a:b8:1e:45:de:
                    1a:15:42:31:4a:b7:38:8d:89:90:9f:fc:3e:15:58:
                    4f:80:d7:62:f6:8d:f3:ee:fa:14:3a:0b:89:ae:ce:
                    ca:1a:93:50:91:25:68:20:ee:e8:45:4a:5e:2b:fb:
                    49:b0:9f:38:72:59:90:d2:5a:34:12:f6:90:d3:b1:
                    a1:3c:20:e8:ec:c0:f7:41:16:12:83:a3:c8:72:d0:
                    85:c6:ea:1e:d6:95:9e:b3:b7:a0:b3:3f:c8:26:ee:
                    31:c4:23:ce:05:5f:a4:c5:31:d3:c3:c6:0d:37:53:
                    e6:80:b7:48:65:78:99:c5:a6:d8:99:97:f4:93:28:
                    b6:ee:1a:98:ac:8a:79:ee:f5:92:7f:61:f9:e2:e3:
                    6c:65:bf:6d:33:7b:f9:71:8a:9a:fe:55:20:81:40:
                    02:d6:d1:14:8b:e1:79:6d:e9:4c:da:10:67:c7:74:
                    b2:2b:27:49:4f:7c:8c:bf:03:84:78:4f:d2:19:98:
                    6e:5f:31:74:b3:bb:b0:3c:21:29:96:9e:f6:c7:d4:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E1:7B:FF:3B:0C:A7:98:3C:45:08:DC:18:64:00:22:5C:28:96:5A
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:58:60:08:5d:77:af:43:cb:4c:41:2d:3d:4b:19:f7:07:
         29:76:82:16:68:2d:0d:35:bf:f7:df:db:d1:25:b8:6d:6d:7e:
         97:6a:03:46:8e:f4:2e:d2:97:f0:bd:27:84:08:99:b0:32:83:
         7f:53:bb:93:cc:ff:bf:b8:12:fa:66:b7:82:19:3b:5b:9f:c4:
         fe:8a:44:98:4c:18:62:e4:0d:e5:66:fb:33:2b:8c:3f:c4:19:
         1f:49:8b:f6:d3:09:54:da:3e:5f:6c:39:18:40:9f:26:02:02:
         ec:32:4a:fa:70:02:12:44:bd:ef:1c:0e:78:9b:82:60:68:09:
         cf:e2:6c:21:c4:cb:54:56:1e:54:52:64:c8:e4:22:7a:d6:22:
         48:8a:42:3c:19:84:f5:18:dc:f6:d8:03:a5:7e:bd:fc:34:2e:
         4e:93:c8:e6:3a:d8:e8:d7:a3:32:38:4d:ce:9d:b5:dd:9d:15:
         9c:79:e5:18:bc:ab:15:26:65:5f:e4:92:72:cc:0a:32:f7:44:
         2a:3d:71:9c:3b:6b:dd:42:af:12:9f:5c:d9:7c:dc:9e:07:7b:
         d5:0e:d0:9b:28:c4:5e:64:2b:52:d3:cd:2a:69:a4:c2:54:5c:
         1f:a8:b3:8e:3b:e9:a9:51:dd:75:fb:cd:ca:41:a1:36:9f:34:
         e9:53:41:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:17 2026 by rpki-client