Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa
File:                     9222BEB4F42811EB93675638C4F9AE02.roa (raw, json)
Hash identifier:          4nv58WeFwiY1zxyiWfVWrgEuksWPrYq1We1YAcf12uM=
Subject key identifier:   A6:8C:37:6F:60:B4:C9:CB:D7:30:6D:05:9E:09:DA:A7:56:66:09:75
Certificate issuer:       /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial:       05D3
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:53:59 +0000
ROA not before:           Tue 02 Sep 2025 23:44:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142610
IP address blocks:        103.170.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
                          rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
        Validity
            Not Before: Sep  2 23:44:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40cb6-dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:7b:bd:0b:5e:b6:ed:68:7d:2f:05:b9:d7:
                    48:74:b5:30:f4:a7:46:e3:51:d7:16:de:6e:2d:62:
                    21:36:64:a1:02:ff:18:00:4a:0f:58:e6:be:63:ce:
                    45:8c:dd:a0:4e:db:19:73:c7:3e:55:e1:27:24:8f:
                    bb:a0:b6:b3:2f:0b:97:fd:b3:e8:10:c0:73:85:62:
                    4c:74:e4:ec:20:c2:f6:17:04:b4:a7:94:a3:e4:5d:
                    e5:cc:21:1f:c5:a8:64:ce:bc:a8:e5:bb:44:52:db:
                    27:ca:86:ba:fe:9a:26:3d:01:f0:86:67:cd:83:73:
                    ce:be:eb:d1:ae:ca:d0:f4:63:bc:51:b9:f1:01:60:
                    e3:6d:4a:d6:da:55:ad:ae:98:20:c4:84:c8:4d:40:
                    c3:1a:02:13:dc:59:b8:a8:bf:f4:c9:e5:ae:97:c1:
                    f3:8f:5c:6e:4d:1a:7a:e4:63:3d:c3:50:5c:c4:9e:
                    0b:18:a3:ea:ad:e2:af:06:14:26:ef:5a:36:ad:68:
                    16:7d:58:ce:d8:40:0d:74:ca:40:4f:e3:43:c7:dc:
                    50:0e:37:3a:9d:e2:52:77:2f:22:0a:3c:08:c1:28:
                    09:d4:7d:a2:5b:d4:1b:1f:1b:e1:35:24:76:09:41:
                    cc:2b:b2:8e:59:5f:c4:a0:2c:52:e9:5b:9c:e2:d9:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:37:6F:60:B4:C9:CB:D7:30:6D:05:9E:09:DA:A7:56:66:09:75
            X509v3 Authority Key Identifier:
                keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:f6:b0:c1:e3:cb:bf:73:81:31:ae:c3:a6:4e:8b:50:c8:
         f8:79:80:03:73:be:d5:4c:f2:e7:8f:d1:2e:84:67:0d:63:f1:
         31:d9:b4:67:03:ad:fc:80:20:ed:cc:c1:71:13:44:8a:71:f5:
         8a:78:ce:ed:6e:0a:a8:96:b8:f4:97:ef:0a:73:39:17:3b:87:
         74:36:5d:47:f2:0c:b6:27:27:15:d8:03:98:ec:40:b8:9e:fd:
         e2:f1:8f:f0:df:b7:3d:e2:b5:4b:4d:42:aa:a9:f9:bb:8e:5a:
         cc:0e:61:36:06:55:f0:c9:5c:48:f5:64:5b:f4:09:35:07:c4:
         ac:02:ff:e3:59:88:ac:31:07:0f:c6:07:98:bd:95:09:fc:b6:
         97:37:2d:1a:d4:e0:43:17:dc:4f:74:1b:f2:c5:5b:99:ca:65:
         c3:97:2a:90:e0:e8:5e:45:45:54:fa:33:e8:eb:8d:3b:cf:ce:
         38:a2:f1:b3:8d:7b:57:5a:cc:91:5c:89:3a:55:06:6b:09:f7:
         e3:72:c2:72:96:f8:81:4a:de:b9:27:b5:2c:36:b1:c9:a8:0a:
         44:2a:2a:ae:3c:cf:66:8a:6c:b8:79:b7:3e:77:3d:c3:d5:8a:
         6a:87:5b:50:c8:0f:7f:00:66:cf:89:d1:c4:eb:7c:2c:e2:3e:
         67:f1:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:00 2026 by rpki-client