Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
File:                     8D0DD6C2690811EFAC6DE109C4F9AE02.roa (raw, json)
Hash identifier:          XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=
Subject key identifier:   C3:03:2F:93:EF:C9:0E:40:81:70:F1:94:72:B2:0B:11:33:45:1A:E2
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0830
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:41:58 +0000
ROA not before:           Sat 14 Feb 2026 21:18:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140586
IP address blocks:        103.82.230.0/24 maxlen: 24
                          103.82.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Feb 14 21:18:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47a66-6eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:13:53:e9:1d:9f:1b:a8:8c:de:bd:db:f2:ba:
                    0b:b0:ea:ee:91:a7:5d:5b:28:36:56:4e:8e:7d:c5:
                    af:c2:67:dc:ec:8f:8c:53:0f:ae:a5:6a:1b:b8:c3:
                    b3:22:a3:72:46:93:d0:d1:df:88:24:e0:7d:5f:56:
                    6f:5d:9a:02:bb:a5:01:6d:27:09:1f:e1:6e:6e:de:
                    73:49:f4:84:47:0e:25:de:01:d4:37:b3:9f:6e:39:
                    88:55:19:6a:17:f4:b1:38:87:23:42:d4:63:ce:53:
                    46:37:da:0e:11:9f:f4:5f:14:de:e6:26:54:36:dd:
                    5e:3d:65:ff:2e:ee:79:e0:8f:88:8a:32:46:ba:e7:
                    73:9d:7e:9b:a1:03:12:af:f8:1a:58:04:34:45:4d:
                    6f:70:af:37:51:c5:93:fb:a0:38:a1:04:1a:0f:cb:
                    25:bc:60:a6:12:68:f5:25:8f:59:fb:2e:c3:e9:a8:
                    9d:03:6e:a7:5d:0b:d3:2d:9c:10:a6:6b:f6:2d:7f:
                    9c:46:40:ca:e3:a3:56:00:99:89:47:68:53:39:ce:
                    bc:80:40:3d:bc:87:6b:ca:7d:b0:22:63:90:b6:4b:
                    e4:21:e3:97:81:63:4c:80:7f:97:22:3f:d3:73:2b:
                    dc:72:8b:e3:be:72:f9:60:a9:3d:7f:60:2c:51:b0:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:2F:93:EF:C9:0E:40:81:70:F1:94:72:B2:0B:11:33:45:1A:E2
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:3e:98:b2:c8:27:a4:2b:03:99:09:02:26:16:67:ec:b1:
         5f:a4:4b:6e:1a:2b:90:f4:d8:a4:af:86:5c:af:6f:a4:82:7b:
         25:d8:aa:d8:00:68:4e:d7:63:4b:59:c0:b9:f2:b1:37:0d:0e:
         31:3f:50:e9:d5:6d:c5:a4:8f:ba:29:c8:52:ff:df:5e:6d:29:
         31:e4:08:dd:75:0d:6a:26:f8:6e:ba:67:dc:bf:2d:5a:7a:6c:
         a5:67:ed:1a:14:ee:7d:ce:9d:21:00:2c:1c:ab:bf:5b:84:d6:
         ed:61:5b:f3:2f:4f:4a:af:71:67:21:f2:7e:9f:31:5b:b5:76:
         61:5b:a6:1f:2c:12:69:27:fc:f4:ad:bb:c5:75:60:0f:57:3f:
         c9:ab:fd:3e:7e:b7:ae:6f:62:bb:a9:8c:0d:86:5a:bd:b4:97:
         81:eb:19:7e:0b:5d:9a:5d:21:87:c3:e5:86:98:cf:2d:b4:17:
         a8:d4:7d:39:26:dc:aa:43:f4:c9:8b:28:c0:f9:2b:cc:f9:c4:
         35:66:7d:2e:77:9b:24:23:e5:81:83:ae:0a:a8:2b:ed:e2:e1:
         7b:d2:8e:17:c6:13:27:bd:fd:7c:35:d9:2b:2f:77:60:07:45:
         c3:94:74:51:b1:e2:0a:be:53:2e:25:22:4d:dd:27:3d:c9:56:
         a9:8d:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:49 2026 by rpki-client