Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
File:                     96BC85E8145711EF8ED9C174C4F9AE02.roa (raw, json)
Hash identifier:          PffbtU+FZwbW+w3qc8kvpp67chydu8DmmwmLQG4kYZY=
Subject key identifier:   3A:B5:5A:61:DB:91:A5:45:F7:A0:0D:20:51:06:D7:0A:7F:17:DA:AC
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       033A
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:03:04 +0000
ROA not before:           Thu 31 Jul 2025 02:08:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38203
IP address blocks:        103.190.204.0/23 maxlen: 24
                          2400:9220::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Jul 31 02:08:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a400c8-1002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:04:d5:5f:37:ff:16:81:92:10:1a:67:31:
                    b5:33:64:35:d3:ff:f8:5a:a7:2f:db:8f:7d:ce:8d:
                    ba:8a:6b:68:21:f5:c7:23:29:29:47:9f:fe:77:e2:
                    81:e7:5e:6a:1a:ca:47:71:63:44:27:07:a1:dc:f9:
                    9d:b5:5d:fa:f0:54:13:00:ef:2d:8b:b6:75:ce:c2:
                    7f:a5:c6:9e:4e:f3:76:5a:1f:7b:7f:d2:a1:91:b5:
                    54:40:9d:b3:81:96:64:79:3d:ac:4d:b1:22:23:ee:
                    60:cd:a1:1c:36:30:e5:b1:88:f1:7a:34:3a:ca:c5:
                    37:02:a3:a8:65:c8:d0:01:71:37:15:e6:da:fa:e3:
                    7d:fb:66:f1:fc:66:62:96:4c:8f:b8:21:d2:98:66:
                    5d:90:d1:e5:ff:c2:0c:7b:88:17:fb:a1:de:4e:3f:
                    63:6d:59:4b:54:31:45:0e:27:15:76:62:af:ce:40:
                    90:4d:8f:5d:87:63:f5:49:4d:f3:18:94:af:fd:54:
                    d9:51:c2:b6:fb:ff:ac:cf:37:24:c2:03:1e:b3:60:
                    5f:a3:49:6a:9c:df:ea:c3:e3:cb:e8:2c:41:07:d0:
                    4a:03:e4:2e:33:46:69:52:8c:10:6a:66:77:e9:f1:
                    99:35:27:f9:d1:23:90:35:96:0b:c4:be:1e:67:31:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B5:5A:61:DB:91:A5:45:F7:A0:0D:20:51:06:D7:0A:7F:17:DA:AC
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.204.0/23
                IPv6:
                  2400:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:1f:91:04:3b:64:8f:1b:78:5d:01:30:2d:dc:08:ef:6f:
         d6:24:a1:74:8a:c0:c8:1a:d5:70:78:34:00:22:9d:e0:6b:ec:
         9d:62:c3:2f:55:fc:12:a7:8d:e6:54:e4:0b:e8:a3:9a:90:8d:
         52:45:8d:4b:34:ce:ff:d6:e3:e1:b5:41:96:65:6c:d6:2f:ca:
         98:d6:5e:ad:fe:78:ab:e6:10:aa:47:2f:35:7f:64:8c:69:b3:
         70:21:94:b0:86:28:5c:9f:b0:47:8b:69:a3:6f:b1:2a:09:bd:
         f1:a7:5d:7c:b4:21:e9:89:9a:8d:5d:39:25:c5:91:82:62:28:
         f3:ec:8f:56:35:6e:22:c0:35:51:61:5e:42:34:30:c9:a5:24:
         0e:11:10:b0:c2:8c:8d:88:ca:af:c0:57:1f:78:05:e3:53:6f:
         e7:46:d1:8c:bb:eb:1c:3c:68:b0:6b:d2:ee:09:52:b7:f3:89:
         62:bc:dd:b7:81:df:d8:24:bd:95:ee:6d:9f:06:39:c3:ff:59:
         2e:a3:68:49:5c:58:56:18:47:07:7f:0a:b0:2e:0f:9f:28:62:
         7c:bb:0a:03:1e:26:31:38:95:f3:a7:a2:76:06:f6:ec:d4:59:
         0a:43:19:8e:8d:13:e5:80:a9:cf:75:12:c4:14:20:b8:a1:04:
         2f:81:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:15 2026 by rpki-client