Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/367EF0645F9B11EFB904A774C4F9AE02.roa
File:                     367EF0645F9B11EFB904A774C4F9AE02.roa (raw, json)
Hash identifier:          4vNJQxcsfIlM8JrvGlM4evgFRLcduyTRiUIuk3E5qvY=
Subject key identifier:   45:1A:7E:74:88:F7:3A:13:53:99:E9:26:12:16:E6:AD:3D:9A:F3:67
Certificate issuer:       /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial:       013E
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/367EF0645F9B11EFB904A774C4F9AE02.roa
Signing time:             Wed 15 Apr 2026 05:39:46 +0000
ROA not before:           Wed 15 Apr 2026 05:39:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138661
IP address blocks:        103.135.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
                          rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 05:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
        Validity
            Not Before: Apr 15 05:39:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69df24a2-d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:8c:4d:59:31:a7:a7:20:a3:f3:bd:49:3d:
                    84:cc:04:d9:c7:cc:9f:53:2d:e5:75:9e:5f:4b:13:
                    a8:9f:6b:75:fb:ba:5a:05:7f:d5:4e:12:4c:bb:a6:
                    38:ba:a9:5e:c5:d0:6d:b5:1e:9a:26:2b:51:05:e4:
                    55:f4:08:63:21:20:8d:9a:4c:17:94:6b:2f:ac:f2:
                    bc:f7:ba:5b:69:88:f6:bb:31:a6:6d:5d:91:0e:52:
                    e8:37:4b:31:4e:88:32:3f:96:b0:7f:78:72:9e:2d:
                    67:11:21:b8:45:6a:6c:ad:51:c5:4d:b9:56:a9:5f:
                    de:57:cd:33:39:47:d1:63:74:23:71:ad:99:14:f2:
                    9e:fb:fd:b9:b2:2b:df:83:37:26:29:e6:c2:a2:95:
                    ff:fb:f4:e4:7a:34:23:e3:63:04:10:f2:e3:c2:09:
                    e3:1f:dc:6b:b3:1d:d9:86:50:50:5a:a4:4f:39:2a:
                    14:71:93:8c:67:81:d7:8f:0f:61:27:43:84:86:12:
                    f5:d0:f9:2a:65:dd:cf:a5:15:78:50:38:dd:8e:68:
                    3f:52:8f:3d:35:b4:6e:e8:05:65:40:ea:9e:81:c0:
                    0a:81:3b:ca:dd:19:0c:98:bd:a8:b5:7f:ed:6b:c0:
                    28:dc:f9:a6:78:b6:92:0d:00:bb:80:2f:af:6b:a7:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:7E:74:88:F7:3A:13:53:99:E9:26:12:16:E6:AD:3D:9A:F3:67
            X509v3 Authority Key Identifier:
                keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/367EF0645F9B11EFB904A774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:68:99:ad:4c:dd:6d:32:b1:52:7f:46:df:a8:0e:69:39:
         1c:07:73:b0:f7:1f:a6:d5:3c:4f:f3:f5:50:d3:5b:90:74:81:
         07:54:1b:a2:05:e9:88:9c:6f:18:23:97:ee:2c:91:7a:a4:73:
         0f:08:2b:81:a0:7f:99:b2:98:14:3d:15:bf:4e:ba:79:83:bf:
         f5:56:56:81:50:90:95:e3:a0:64:b1:2b:4e:c7:ab:91:1e:19:
         aa:6c:63:e2:bc:c8:7d:fa:f8:4f:b5:d7:d5:87:c8:de:64:e7:
         ca:2f:5f:08:56:bf:f7:db:eb:66:20:21:c8:1d:3a:94:35:17:
         fc:b9:f6:fe:9f:0d:1e:17:44:2c:a3:d1:6c:63:1a:e1:1c:16:
         35:dc:56:12:77:18:27:b4:92:e7:74:74:dd:7b:81:4c:a3:e6:
         3b:2c:47:d5:a4:53:3a:03:bd:15:de:84:a3:3e:b9:48:20:b4:
         47:78:0f:49:2c:7b:44:c4:fd:7e:8f:3b:e4:05:65:4f:9f:55:
         a9:38:b8:10:ef:0e:26:3f:01:2a:4e:80:26:23:3b:30:8d:f6:
         08:4d:87:7d:47:70:f0:1d:d3:5e:23:ec:59:93:4b:63:63:cc:
         79:c3:ad:e2:5d:0f:c6:5a:fb:45:42:52:c9:81:2a:df:fe:b6:
         bd:83:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:59 2026 by rpki-client