Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
File:                     9EE7FBDA678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier:          i9qFzs4jcopAlys8hXxF83fhftnlVXNWVCgR4foN+vo=
Subject key identifier:   4B:5A:0F:3C:8B:57:D2:8C:C8:F9:78:15:CA:DF:70:3C:A7:AC:A9:F0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       E5
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
Signing time:             Sat 29 Aug 2026 06:57:22 +0000
ROA not before:           Sat 29 Aug 2026 06:57:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Aug 29 06:57:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9282d2-132e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:d8:81:9b:2d:99:0e:7c:3e:a2:d5:62:14:
                    79:8c:e9:6c:b6:90:e6:9c:48:82:34:f5:58:d5:31:
                    f9:d0:1d:0d:dc:e7:7d:17:80:6a:b3:1a:b5:5a:7d:
                    4f:8f:56:cb:97:4d:8d:e2:28:ce:95:4d:4c:84:e5:
                    ab:64:60:29:3b:d4:9e:f1:48:7b:58:21:38:24:7d:
                    9f:7e:e5:1b:8e:c4:c8:6c:d2:80:2c:ba:a0:d1:a6:
                    79:88:a3:b8:ed:7f:8e:98:2d:4b:ba:1c:9f:d0:11:
                    d6:e3:d8:60:3b:51:ad:0c:b6:64:02:2d:42:07:26:
                    4c:c9:18:4d:8a:79:53:f1:3d:9c:fc:52:49:8e:fc:
                    0d:b0:13:40:63:16:80:af:18:10:a5:8e:88:3b:1c:
                    9b:0c:f6:41:6d:5c:2c:08:fb:c9:cb:b2:ec:fe:74:
                    b4:23:a1:0a:3b:0a:63:50:4f:54:e4:8e:a6:40:b6:
                    bc:b6:17:62:fc:a8:77:a4:39:1c:32:f2:96:78:2d:
                    89:5b:33:e5:cf:ce:34:ca:31:22:28:b0:62:ca:79:
                    21:60:4e:81:2f:9f:78:cb:fe:27:c9:ae:7c:11:b8:
                    0f:de:c8:5c:59:3a:0b:ce:7d:67:cb:47:68:33:db:
                    e7:77:66:e4:9e:ad:98:59:9c:9e:05:3b:90:68:a5:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:0F:3C:8B:57:D2:8C:C8:F9:78:15:CA:DF:70:3C:A7:AC:A9:F0
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:8e:7f:29:df:95:bd:4e:61:b3:e8:3a:aa:f4:df:eb:a7:
         09:df:27:fe:85:5a:66:2f:22:bd:28:5e:0d:83:1e:4c:67:3b:
         9c:66:0f:fc:0c:6e:cf:4d:b5:ad:54:2f:53:33:b8:92:ef:56:
         3f:47:17:44:02:64:76:ba:77:4a:08:48:dd:cd:94:cc:ec:9c:
         d3:55:9a:41:90:6a:16:43:b0:72:b5:58:76:ec:34:e9:05:f9:
         a4:38:3b:c4:54:2c:2e:30:62:38:39:ea:97:ba:7f:dd:39:da:
         df:40:b0:2b:19:df:20:de:fa:57:b1:1d:47:03:8a:8c:f4:b7:
         84:0a:ae:fd:f1:b0:46:e2:42:50:53:70:94:c9:2c:d7:05:25:
         37:4b:67:41:f9:aa:e0:91:de:68:39:29:16:24:9b:c6:62:86:
         2f:59:a8:df:19:40:15:f1:f0:29:4a:44:9a:2d:af:71:49:ed:
         36:b8:eb:89:e7:da:b3:0a:cd:da:0a:96:a6:a9:c5:9c:98:a3:
         c7:78:e0:fe:1c:2d:06:46:fa:ee:57:4e:a1:c3:49:ee:47:72:
         e5:e1:90:09:3d:9b:c9:b0:25:52:38:3d:26:8e:f2:d5:75:64:
         c2:c2:a3:d0:68:c6:20:99:58:73:0f:96:d9:e8:2d:d7:5b:ab:
         85:c5:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:58:03 2026 by rpki-client