Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
File:                     D2528232D2A011ED86EB1F59C4F9AE02.roa (raw, json)
Hash identifier:          SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=
Subject key identifier:   D8:66:85:7D:CB:75:21:CD:8E:AF:1E:10:67:8F:8D:EC:99:60:FA:2A
Certificate issuer:       /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial:       022A
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:12:52 +0000
ROA not before:           Thu 05 Feb 2026 12:22:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45352
IP address blocks:        103.83.168.0/22 maxlen: 24
                          203.89.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
                          rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
        Validity
            Not Before: Feb  5 12:22:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41124-ab69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:42:a7:95:4e:85:90:c2:0a:32:5d:ce:51:
                    d7:c8:1d:5b:e7:73:7f:f0:1d:84:2c:af:7c:8d:6c:
                    22:de:ac:c3:bf:54:b9:31:ee:79:24:07:97:dc:33:
                    61:a1:91:fd:10:71:70:ba:91:a5:b8:43:30:dd:03:
                    a7:2b:17:04:8a:49:a0:06:1f:71:57:2f:67:19:c6:
                    7a:e2:ec:64:d1:fc:7b:53:1e:61:3a:dd:ef:cd:0e:
                    3b:d6:37:2c:98:10:83:21:c5:ff:c6:ea:9c:e0:0f:
                    af:fa:31:4c:c1:03:3a:10:d7:db:36:74:50:1b:ff:
                    4c:cc:af:39:7f:fd:c5:34:76:43:1d:12:4b:d1:7b:
                    2e:38:2c:6c:93:59:7e:73:4a:f4:af:4c:b4:9b:07:
                    2f:45:21:35:93:bc:9a:e1:70:db:19:c4:1e:00:08:
                    17:7c:dd:6e:1f:8e:1d:bb:d3:37:a6:5d:e6:82:05:
                    69:a8:fa:30:dd:2e:b0:d1:67:7b:f7:53:26:f9:b6:
                    9b:f7:26:29:d3:87:ca:b3:f2:b3:32:ca:45:c2:19:
                    cd:88:c9:f2:4a:48:ad:08:71:01:0a:ec:16:15:75:
                    9c:cb:d7:39:ca:ff:74:2d:c9:58:56:71:35:35:f2:
                    e7:6c:4d:a1:a1:dd:7f:bf:21:04:f8:18:ca:89:74:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:85:7D:CB:75:21:CD:8E:AF:1E:10:67:8F:8D:EC:99:60:FA:2A
            X509v3 Authority Key Identifier:
                keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.168.0/22
                  203.89.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:85:4f:f7:0b:99:0c:db:c6:e6:da:34:3d:e6:55:e7:77:
         c5:01:c5:8c:83:61:cc:cc:5f:7c:6d:c5:a5:d2:23:0e:c5:41:
         44:bd:f7:69:81:af:6c:55:67:f6:73:bb:91:b1:6b:ab:9f:f8:
         a3:73:86:b2:bc:1c:8c:2f:d4:b9:ca:5d:ca:e7:85:53:31:d1:
         4e:24:eb:82:3c:94:24:38:d0:89:de:d7:e0:65:aa:67:e0:04:
         e6:9b:45:49:66:31:b6:61:19:52:72:f4:d9:8f:4b:52:42:70:
         93:a1:b8:af:d3:d0:b8:af:04:c9:88:30:28:d2:d4:30:49:94:
         59:ff:98:85:cb:86:d3:61:15:8e:f6:67:ea:73:c9:6d:05:7b:
         73:cf:3d:ef:a7:7c:39:47:90:04:7b:20:be:4a:fc:bb:9e:21:
         06:c2:42:6f:fe:6d:0b:1f:1e:43:2c:0e:24:45:01:e4:92:f6:
         74:e6:fb:4b:82:5b:2f:bc:9f:f1:dd:b3:fb:41:b0:7c:4a:33:
         51:cf:a4:ee:02:ca:a1:2c:50:0a:a0:05:64:cc:bc:10:bb:b9:
         e0:fb:83:75:90:d8:7f:89:a3:55:48:60:d9:3a:11:fb:43:aa:
         12:a2:d0:b4:7a:20:cb:11:95:f3:28:29:34:20:f2:f2:a9:a6:
         f1:c3:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:35 2026 by rpki-client