Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
File:                     065143FAB71C11EF9C368D66C4F9AE02.roa (raw, json)
Hash identifier:          +UGzFoOdYB27w2dtyFnblneGu3br9H01b49RD3SBcIk=
Subject key identifier:   76:99:7D:97:69:F5:06:3A:56:9A:06:9E:71:22:59:4D:15:84:D6:80
Certificate issuer:       /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial:       01D1
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:22:25 +0000
ROA not before:           Wed 09 Apr 2025 04:09:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137899
IP address blocks:        103.149.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
                          rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
        Validity
            Not Before: Apr  9 04:09:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a43d91-0fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:50:ad:87:5c:d4:1d:44:24:3a:21:79:9c:
                    b7:87:2a:e8:c2:84:46:0a:a8:f9:28:b5:70:a3:18:
                    b0:60:6b:8c:c7:e9:e2:e1:28:ea:3c:a3:69:ea:a6:
                    f1:44:eb:f1:86:93:23:73:2a:fb:b0:3f:af:9c:d9:
                    ef:69:36:02:8d:bf:7a:e7:28:41:a2:c1:d7:ca:7c:
                    9d:eb:37:1a:58:4e:66:34:78:dc:c0:19:e4:3f:05:
                    bf:83:0c:5b:05:cb:06:36:65:36:3b:c9:da:a9:9e:
                    50:94:f8:d3:c7:56:f7:18:22:2c:6a:3f:75:3b:a1:
                    20:49:fa:77:e3:df:2d:12:e0:1a:71:b6:1c:61:e2:
                    f4:21:da:b4:23:f7:1e:1c:e1:ab:1b:68:9c:07:d3:
                    d1:e9:b2:7c:57:41:f1:04:14:85:40:72:88:eb:40:
                    25:66:73:10:83:27:3c:20:ff:9b:83:6f:dc:a0:57:
                    4c:dc:50:96:2f:25:23:70:05:b3:c4:59:b5:56:33:
                    09:69:6c:b8:82:5b:c9:91:3b:85:c8:96:4e:ab:9c:
                    dc:93:1f:2c:61:fa:32:0d:9a:90:c1:26:65:e3:6b:
                    d6:8e:0c:5b:8d:36:ed:10:ad:24:59:33:9d:c0:fc:
                    f9:b2:b0:e5:7b:4b:7d:8e:63:3a:08:1a:e5:9e:e3:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:7D:97:69:F5:06:3A:56:9A:06:9E:71:22:59:4D:15:84:D6:80
            X509v3 Authority Key Identifier:
                keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:a4:61:38:4a:95:73:58:84:09:5e:b6:97:26:f6:b4:9a:
         0c:05:7b:a8:2c:4d:fb:00:05:d3:4f:21:6b:51:e5:13:6a:26:
         db:77:f4:80:a6:7e:bf:e8:6d:ef:48:6d:84:fa:54:8c:84:b7:
         46:1a:d4:e5:b1:fa:af:d2:d6:88:e3:c6:82:c1:f7:fc:f8:02:
         96:80:c0:92:16:f4:69:a3:a4:a1:ef:34:40:8c:ab:02:25:58:
         29:46:0a:12:61:a1:e0:b7:fc:f5:59:0b:09:87:52:94:1c:cf:
         d6:63:81:07:c3:51:a8:c2:e0:54:c9:60:dc:90:68:f0:8d:b6:
         fa:a7:c7:ca:91:66:dd:aa:5c:38:66:e2:c8:7d:6e:d4:65:fb:
         af:91:b5:5e:cd:a9:dd:1a:ad:b2:2d:1b:5b:02:ef:64:c4:c3:
         9a:ff:b9:b2:4b:48:44:81:a4:fe:3a:3b:4a:9a:99:f8:c9:e9:
         d5:83:23:74:bc:48:9b:c0:d1:9b:72:7c:62:5d:eb:fd:82:e8:
         70:14:4f:d5:66:43:b9:5c:d0:d4:42:71:14:c4:ad:a1:bc:c5:
         be:c0:a0:c8:f6:03:cf:9d:32:94:ec:a3:d5:e9:3b:8d:53:1b:
         35:38:ee:b5:76:01:f0:dc:6c:60:17:b7:ab:25:43:7f:2d:30:
         a0:2a:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:21 2026 by rpki-client