Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa
File:                     9B39DA4A17B611F0949B3513C4F9AE02.roa (raw, json)
Hash identifier:          c8UFaho10sHWq4V66Fx+BVNv/vFU1ajRLCGfXC+In2c=
Subject key identifier:   4F:D7:4D:69:C5:F7:93:47:AA:FD:26:68:9B:86:08:FB:75:57:09:D6
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       043F
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:26 +0000
ROA not before:           Wed 07 May 2025 01:07:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     210110
IP address blocks:        103.91.219.0/24 maxlen: 24
                          103.95.207.0/24 maxlen: 24
                          103.101.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: May  7 01:07:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a464f2-2b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:af:77:2e:05:b8:9e:c7:7b:e0:64:d4:a2:
                    0d:61:7c:2c:cb:d7:95:7c:03:53:37:5d:fa:e9:cc:
                    98:d8:dc:8f:b5:d3:d7:3a:9a:63:0d:e4:31:9d:f8:
                    03:55:f4:90:b8:d2:f6:e9:c8:ef:11:5b:24:57:fa:
                    9c:9e:0c:5e:f2:0e:08:55:8f:2b:c5:20:dc:e9:c7:
                    e8:c7:38:46:59:72:5a:11:5c:5c:da:0a:39:a9:68:
                    f8:1b:aa:95:b1:54:f6:14:ea:a4:7c:34:15:4c:d6:
                    46:37:6f:6a:8d:ba:ab:06:1e:7d:a1:2e:7b:70:ab:
                    fb:dc:13:d0:30:15:10:bf:94:4d:aa:6b:e4:46:00:
                    9e:c1:9c:25:81:3e:1b:cd:84:ab:a1:ce:bd:3a:76:
                    71:31:4b:36:01:d4:aa:4d:ef:4b:e9:8c:34:a9:5e:
                    ea:f0:50:2a:53:32:dd:29:b0:21:de:e0:36:44:a7:
                    a8:89:5d:c0:92:cc:5a:7a:4f:89:02:b5:d5:c7:aa:
                    65:02:a1:f0:8b:b3:94:95:f5:36:6f:ac:fb:84:b1:
                    4b:87:a9:b4:86:a4:e4:20:95:3d:46:92:17:f3:de:
                    9d:49:ac:cf:fc:95:a6:5c:e4:9d:cd:69:ad:66:47:
                    fa:f6:ba:2f:a1:27:3f:eb:9c:56:2a:c0:bb:d8:9f:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D7:4D:69:C5:F7:93:47:AA:FD:26:68:9B:86:08:FB:75:57:09:D6
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.219.0/24
                  103.95.207.0/24
                  103.101.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:64:0f:e2:70:0b:27:b9:27:a9:ee:90:f1:f4:dd:36:28:58:
         bb:bc:39:15:09:6a:cb:06:ff:ef:0c:5b:c5:07:ea:b5:24:b8:
         c0:a6:cd:6e:ea:bf:b4:7f:14:f1:15:d7:03:5c:16:cf:63:08:
         2d:d2:f5:36:4f:68:ee:db:59:ac:a7:c3:b0:f8:f8:2c:e4:23:
         27:fd:a8:7d:4a:32:d6:06:bc:e4:eb:68:1a:fb:38:4c:ce:30:
         ef:78:93:32:45:e1:29:ac:b4:c6:ef:86:6b:4c:cc:35:91:b1:
         7b:a7:ef:7e:60:53:80:87:eb:51:0a:5a:19:e4:48:f7:57:98:
         28:4c:8c:a7:69:8d:68:55:3e:b2:87:de:50:7f:12:7d:2b:7a:
         aa:f3:54:3b:ac:02:a8:a4:4c:f1:fd:af:47:a3:51:d5:a2:53:
         ce:80:48:a5:fa:8c:e8:f5:3a:5d:1d:82:5d:6a:a3:eb:86:aa:
         59:59:58:90:46:05:93:a2:d8:17:d1:c0:59:55:72:bf:7a:76:
         66:17:62:07:f1:d3:1a:0b:0b:56:d6:07:97:40:d4:11:bc:3b:
         4a:05:c9:25:2f:ab:55:6f:3e:97:b0:73:2b:71:c4:72:9b:fe:
         db:cb:01:fd:89:05:e1:3e:af:53:06:b7:e7:f8:43:22:eb:89:
         67:96:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:50 2026 by rpki-client