Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
File:                     009E969E885C11EB88A7723DC4F9AE02.roa (raw, json)
Hash identifier:          mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=
Subject key identifier:   47:8A:D7:61:13:B3:97:1F:07:87:9B:0F:DE:BA:44:DA:4B:EF:5B:E4
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       06F1
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:56:27 +0000
ROA not before:           Tue 18 Nov 2025 21:14:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45654
IP address blocks:        103.103.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Nov 18 21:14:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4539b-5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:bd:24:c6:fd:ad:16:b4:7f:45:56:da:67:
                    f2:41:f8:ad:80:85:92:df:04:22:0d:91:bf:a7:58:
                    d0:09:0a:d9:00:c2:af:39:45:a8:bf:4a:9f:a2:db:
                    03:39:e1:28:f8:64:75:7f:9f:ab:9d:fe:36:b4:dc:
                    41:51:c8:4d:d3:01:30:a4:ff:e1:4c:69:de:ae:31:
                    e4:02:d7:2b:7e:4a:49:1d:4e:e8:7a:c2:ea:d6:3c:
                    7a:76:fd:c9:7d:a8:72:40:c4:79:46:53:f5:d6:55:
                    d2:0a:14:ff:73:88:44:61:a8:a4:87:77:81:8b:28:
                    74:1c:ba:7e:1e:55:7b:b6:fb:df:be:cf:01:4b:0f:
                    36:e4:14:04:69:27:d0:55:d7:31:ec:8c:41:31:f0:
                    3f:5d:89:6b:9c:92:01:ed:36:97:1a:0e:ff:3f:6b:
                    01:93:9f:83:94:e0:40:e0:83:49:4a:84:3f:bc:87:
                    67:5e:b2:af:15:45:38:6d:48:cc:ab:fd:a9:27:f2:
                    1c:8c:7c:3e:19:58:58:b5:3a:7c:c6:3e:cb:0a:4b:
                    db:68:a0:49:e4:32:08:15:5a:e3:6b:22:9c:91:18:
                    2f:c3:83:d3:31:51:91:bc:f2:ed:d3:e0:25:c2:9c:
                    8c:df:34:56:05:ed:7f:66:c4:46:65:60:f7:38:14:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:D7:61:13:B3:97:1F:07:87:9B:0F:DE:BA:44:DA:4B:EF:5B:E4
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:93:b7:8d:f8:c1:5d:75:f3:f0:31:18:20:e9:76:c2:b9:d0:
         4a:e9:26:83:44:25:a6:f6:d2:19:a9:b6:87:fa:cf:1c:6a:a8:
         4a:b8:b0:d6:52:df:16:71:65:50:e3:0f:cf:a5:29:7d:2e:a5:
         6a:82:c4:24:c3:ab:df:f0:c8:31:a1:eb:48:ff:84:8c:64:fd:
         4a:b3:7c:45:27:07:41:30:85:56:29:2e:31:78:b8:3f:4c:32:
         b7:c4:c3:b6:06:ae:76:83:80:6d:f2:95:d0:e6:f9:83:0d:fc:
         42:76:b5:b0:d9:70:a0:2c:90:b9:66:ae:4a:9d:62:44:ca:77:
         5e:9e:8f:8f:9e:b9:db:9c:07:aa:a1:fa:9d:09:39:c5:ed:c2:
         58:4c:67:fc:2e:56:47:97:a4:b9:c7:8f:07:39:dc:10:4d:93:
         96:34:e5:3b:a3:f4:5d:0a:84:90:7e:d1:5d:75:94:bf:c4:c2:
         33:01:13:d4:bb:c8:e9:5a:4f:90:86:af:84:88:50:4b:87:38:
         16:5f:5c:de:cd:5e:84:0a:a6:0f:a7:c8:44:61:bb:20:fb:46:
         b7:8f:51:82:ff:aa:fd:f3:03:d0:45:a9:ff:a7:e2:ee:7a:fa:
         c2:e1:d6:f5:67:bb:56:c7:53:ae:94:82:cb:e0:52:6c:00:73:
         20:8f:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:15 2026 by rpki-client