Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa
File:                     F09C691AEBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier:          Rw8wdhCI/rNZP6FgC9C+qd0EQ9zAMz5LAI5l6VZT91I=
Subject key identifier:   0D:E6:FD:1C:9E:0E:04:57:87:27:A5:2B:2D:7F:81:87:8C:7A:ED:F7
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       036D
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:03:28 +0000
ROA not before:           Fri 11 Apr 2025 01:36:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18188
IP address blocks:        103.134.13.0/24 maxlen: 24
                          202.125.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Apr 11 01:36:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42b10-4e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:78:89:f2:a3:27:a1:7c:67:76:d8:13:26:
                    62:78:64:75:a8:d0:94:a5:e2:3e:0d:e4:7d:da:45:
                    b1:7c:fe:a5:86:69:fc:09:77:2c:80:df:ef:11:1a:
                    08:b3:2b:48:dd:3c:e8:5d:ae:a1:69:c0:55:7e:28:
                    1c:31:e8:d0:6d:83:ce:7b:bd:e3:04:bf:33:e5:fd:
                    d5:09:41:1b:19:00:39:04:41:8a:13:47:1e:ea:66:
                    6a:13:d6:32:b8:08:99:e3:1c:5a:07:0b:d9:d6:04:
                    8c:1c:4d:38:57:de:74:36:c8:66:06:43:05:0f:25:
                    91:67:16:6b:3f:15:9b:ce:ae:6c:75:4c:53:e5:c2:
                    a1:d3:04:e1:13:af:94:b8:17:83:a4:bf:42:10:08:
                    41:9d:d9:91:ba:90:bb:cc:c5:6d:32:57:89:f1:87:
                    c2:a6:a8:74:d1:d4:2b:44:e8:91:34:b1:d4:82:0f:
                    2f:f7:e8:bc:0c:1d:2c:9f:0e:b5:95:21:d3:38:ab:
                    ed:26:62:70:c7:8a:4e:6f:c1:f2:fe:27:95:fd:10:
                    a5:e2:f1:2a:4d:fa:b2:e4:54:c5:37:f5:58:8d:6e:
                    ed:5e:a2:97:0f:5f:11:74:87:9e:1f:0c:fe:58:e6:
                    ba:61:ab:74:f8:90:7d:c2:8f:f5:36:97:66:72:c8:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:FD:1C:9E:0E:04:57:87:27:A5:2B:2D:7F:81:87:8C:7A:ED:F7
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.13.0/24
                  202.125.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:c7:87:7b:be:b2:55:18:69:e0:6d:67:f3:33:96:d1:77:
         ce:8f:89:a6:7c:bc:a1:5e:a2:bc:89:a7:a7:20:f6:c7:0a:ee:
         de:64:33:5b:c6:62:d0:9c:47:07:db:b2:46:74:0c:db:8f:df:
         4f:b1:7f:0b:97:40:95:58:3b:e1:f0:70:70:19:c9:f7:00:b9:
         66:26:35:5f:a0:cc:65:41:2d:09:61:1a:a4:be:26:b1:9e:22:
         cf:44:90:64:c2:96:25:a1:bf:db:6c:c8:6a:1f:61:75:ab:42:
         e7:0b:d3:83:74:d8:6b:3e:05:c2:c8:44:d1:b0:30:be:33:44:
         82:45:1e:08:f5:69:67:9c:82:c4:36:34:89:56:ec:43:c8:5e:
         89:61:16:80:b0:97:3d:37:27:fd:0b:a6:c8:5a:e0:47:7b:9b:
         c7:fb:e0:1e:97:38:0b:b5:93:c7:e6:c3:3c:2c:ae:9e:e9:2e:
         1b:6d:89:07:fe:a7:17:44:99:29:b2:6b:1c:42:e2:bf:bd:4a:
         8d:39:62:04:c2:79:fe:8b:a6:a5:16:96:57:8a:9e:b3:1a:cf:
         b0:92:b4:7f:fc:27:19:1f:8f:1f:5e:21:f6:6a:f7:f0:93:ca:
         2d:64:75:b9:1e:02:65:d3:17:6b:7c:9a:a6:d9:ec:f9:83:85:
         2b:f2:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:25 2026 by rpki-client