Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa
File:                     3A51C4061DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier:          S9wcoj+b296y5ZY0Qh+LyMtLbA5mAbavBiIMN9qcung=
Subject key identifier:   25:F7:CE:97:1C:59:E4:0E:71:58:D2:F1:AC:04:EF:F0:DE:0C:A1:16
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       0463
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:49:10 +0000
ROA not before:           Tue 17 Feb 2026 00:20:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.181.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Feb 17 00:20:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45ff6-e819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:0e:49:78:86:c5:ec:17:57:7a:da:2b:80:
                    78:e1:6c:b4:be:ee:2c:57:76:1f:f6:65:7a:3a:2d:
                    72:69:7a:ba:d7:76:9f:87:dc:b6:66:c8:fd:9e:4e:
                    d7:c4:24:f8:55:2b:33:43:01:a2:e3:ed:0e:2a:66:
                    42:2c:50:4e:1b:68:e9:a5:97:bf:ca:dd:bc:e5:6c:
                    48:61:6e:b1:68:54:09:0f:4a:ac:c4:b2:cb:fa:5d:
                    2a:1a:1c:7c:eb:1f:e5:56:dd:74:1a:65:9c:45:0f:
                    b6:f7:eb:16:9e:d0:c8:c3:af:04:ec:bc:f6:22:22:
                    c8:b6:41:d9:c3:fa:20:59:c3:0f:33:f6:40:7b:49:
                    0d:41:ad:87:c9:59:12:e8:8d:ab:03:34:98:42:b3:
                    41:bd:00:39:76:01:72:61:4e:59:93:85:4c:7f:52:
                    ac:23:42:40:c6:c8:c6:58:e6:c4:1a:6a:4c:be:7e:
                    ed:09:64:0c:ba:b0:cd:32:d0:10:39:56:7b:52:e0:
                    da:1f:ac:54:c8:7e:f0:f7:d8:52:4c:de:88:35:50:
                    19:94:fc:b3:78:f4:0f:88:1e:5a:eb:de:d9:ad:99:
                    93:b6:97:50:68:6a:ce:a0:5e:8e:69:1e:6f:7c:83:
                    ee:0a:05:8e:a5:fc:89:9b:84:66:68:ee:d2:77:fe:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:CE:97:1C:59:E4:0E:71:58:D2:F1:AC:04:EF:F0:DE:0C:A1:16
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:2f:e3:46:6e:99:83:86:51:af:f5:69:9f:69:0c:a0:7b:
         6b:38:4a:53:d3:e4:d2:a4:0a:5c:3d:b0:43:10:32:68:00:ec:
         6e:a8:c2:24:55:c4:c6:87:b1:c0:24:4c:c7:ec:a6:79:c2:8e:
         b9:b9:4e:01:eb:de:82:78:a1:c9:5c:ca:d6:ea:4f:bf:bc:d4:
         36:56:17:b3:94:5d:68:ba:73:1f:c3:bb:90:40:31:18:d3:81:
         b1:e2:0b:f7:7f:05:4f:0f:b3:26:af:b5:e9:00:ca:fc:bd:c3:
         c8:79:34:d9:a9:eb:27:9f:c3:82:e7:42:7d:3e:c8:62:d0:f0:
         a8:ae:c3:d9:24:9d:e2:6f:06:df:29:c5:72:4d:6a:a8:a9:19:
         4d:81:23:86:1f:90:fe:35:b8:dc:cf:3f:e0:36:e3:04:9f:63:
         30:08:da:01:56:51:6b:5f:2b:cd:d2:d4:ba:ff:6b:e5:28:bd:
         ab:37:ef:9e:4b:7e:31:78:43:56:44:69:15:fb:cf:1f:df:64:
         22:68:83:5b:46:fe:b5:3e:e7:c6:0d:14:e2:ec:bc:fc:47:4b:
         25:6c:f8:0c:92:47:29:2e:50:86:8e:98:71:46:ce:5d:2d:cb:
         32:42:30:cc:77:d9:c7:bb:3c:ad:27:98:af:45:e3:b0:8d:a1:
         9d:1a:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:43 2026 by rpki-client