Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa
File:                     B39CC5D0999C11F0B916112DC4F9AE02.roa (raw, json)
Hash identifier:          EtzqLiy1GfOpWQ6NNxaBO4VxmKVupSX7ugnc/ADUBS8=
Subject key identifier:   FA:7B:81:59:6E:8C:62:09:D7:F7:43:D9:DC:E8:21:3E:D8:8F:D7:26
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       81
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa
Signing time:             Sat 25 Apr 2026 00:34:22 +0000
ROA not before:           Sat 25 Apr 2026 00:34:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137964
IP address blocks:        103.183.117.0/24 maxlen: 24
                          2400:62a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Apr 25 00:34:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ec0c0e-a286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:b8:ea:92:e4:bf:ae:f6:5b:bb:24:48:b1:
                    7c:71:a1:db:b1:4b:28:2a:f4:e1:c6:54:b8:4e:b9:
                    46:bc:21:83:09:d0:e7:f7:75:db:04:50:0a:f4:d1:
                    78:dc:36:95:e9:09:f9:e3:c5:40:24:a1:de:6e:5b:
                    c5:05:52:be:37:e4:64:36:87:c1:42:38:d9:05:80:
                    42:7b:78:ab:cd:b2:a8:1a:e0:2d:aa:d1:38:25:3a:
                    7f:8e:45:04:95:a2:91:6e:dd:27:4c:09:f2:62:75:
                    bf:23:ea:9f:03:a8:23:e3:3b:04:c1:bf:4d:4e:af:
                    0b:e7:9a:f2:ad:ca:9a:85:c0:27:ac:6e:7a:4b:04:
                    0d:19:d8:f2:c9:37:31:9e:54:3e:c6:09:b2:81:df:
                    59:a3:74:20:08:5e:b2:51:df:2b:ed:93:92:7e:97:
                    a4:50:73:fd:84:9b:a0:21:69:81:41:4a:d3:65:0a:
                    87:9e:29:7c:72:5c:8a:63:3d:9e:a8:33:ec:9c:1e:
                    76:8a:8a:4f:70:92:58:e9:8a:3a:79:d3:6e:d1:4e:
                    8a:05:9d:bf:2a:59:d0:eb:66:22:c0:e0:78:9e:86:
                    93:a5:55:d3:cd:8e:aa:5a:88:23:f7:e6:8e:9e:bf:
                    d6:87:4a:23:5e:82:da:5c:ea:f5:ef:ce:0a:c2:be:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:81:59:6E:8C:62:09:D7:F7:43:D9:DC:E8:21:3E:D8:8F:D7:26
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.117.0/24
                IPv6:
                  2400:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:cd:f7:7f:d0:d0:f5:2d:55:af:d6:59:d5:f3:1e:ab:29:
         44:1e:0c:ec:9f:29:a2:79:c1:3a:bc:4a:55:71:2f:53:6f:b1:
         e7:4d:4e:e6:eb:a2:ec:f3:92:a2:f5:88:94:87:ed:9d:3d:7d:
         b7:09:ab:2d:4d:da:fd:b0:fb:8d:46:a7:25:c8:fd:a5:b0:a9:
         93:37:43:69:d3:83:1f:a7:49:d4:47:aa:e8:c0:e7:68:0d:46:
         bf:79:47:a4:e5:02:9f:62:e5:0d:67:1e:52:cc:2a:1f:32:c5:
         04:4e:3f:83:f9:e2:7f:00:df:7a:7d:62:34:5a:57:30:71:21:
         91:6b:70:22:35:61:45:23:40:54:20:9a:86:60:08:64:5d:33:
         b6:c8:ff:b1:95:e4:4f:5a:ec:9c:3b:8e:71:45:e3:65:94:94:
         e5:87:26:6b:a2:a0:ce:9c:8e:15:85:9d:cb:fa:03:7b:1e:81:
         3d:a4:20:a8:dc:e8:a3:10:7e:b7:06:54:54:7e:c3:18:18:97:
         57:e5:f0:f9:80:f1:e8:de:04:ea:45:4a:7c:9d:23:33:92:79:
         01:b2:95:50:31:87:79:94:59:54:a7:7c:1e:56:bd:8e:7a:52:
         80:a2:b3:28:74:53:1b:51:76:1b:01:8d:98:dd:73:29:2b:f9:
         63:d1:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:23 2026 by rpki-client