Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
File:                     B6A436A8411F11EBA45D5857C4F9AE02.roa (raw, json)
Hash identifier:          soUs6aU4N+PLaQ/K803O61w5Xjsco282Yx4UOfZySoA=
Subject key identifier:   EC:64:13:70:7E:D6:73:1C:33:E6:28:BC:38:07:BF:79:16:04:B2:CA
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       07A2
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:57:08 +0000
ROA not before:           Tue 12 Aug 2025 22:34:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131226
IP address blocks:        103.37.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
                          rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: Aug 12 22:34:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42994-8c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:5a:14:1f:3c:73:ae:45:e8:5b:7f:66:90:
                    a7:1b:1b:4b:f8:d2:99:70:f0:bb:72:7a:56:b1:fc:
                    ea:9d:06:de:09:b6:08:f0:94:db:a3:e9:f4:70:4b:
                    70:a6:fe:6f:9c:7c:5c:58:35:89:86:ff:22:1d:cc:
                    d5:09:77:09:3b:98:64:ed:db:f5:2a:84:d4:28:3d:
                    ac:7c:86:da:c2:31:00:7a:77:31:89:c3:82:28:a2:
                    cc:d6:f3:26:a1:5f:04:8b:cb:ac:d3:18:32:67:88:
                    03:31:d3:88:e6:99:27:2f:b9:23:da:26:e2:59:12:
                    f2:22:f9:49:ce:5b:5a:2d:90:71:e1:ee:79:a4:18:
                    1c:87:b0:dc:d2:e6:21:fa:c1:3e:9e:2f:3f:23:94:
                    ff:c1:74:4e:37:2d:d3:ff:ae:2c:27:dd:d9:95:8a:
                    f3:82:93:73:12:ad:87:02:63:21:e9:c5:03:17:3f:
                    61:b3:b0:aa:ef:6c:b6:9c:30:ca:88:eb:af:2c:8c:
                    ee:c6:78:53:46:02:67:83:8e:6b:ca:98:31:47:cf:
                    96:22:64:a5:7e:76:02:4e:47:02:f2:2c:f3:af:9c:
                    c9:45:73:85:d5:e1:ce:4d:29:e5:4c:0e:a8:f9:00:
                    e9:d9:ba:56:39:65:f4:5b:bf:6a:3d:44:f8:d5:66:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:13:70:7E:D6:73:1C:33:E6:28:BC:38:07:BF:79:16:04:B2:CA
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:0e:02:40:26:6a:59:92:71:75:11:69:79:6b:a1:4f:fd:
         f0:24:da:ca:c9:16:0a:62:67:d5:8a:75:c0:ea:cc:b8:5f:c2:
         01:af:e0:1a:1e:0a:e2:ce:1c:2c:12:2c:ba:55:8f:dd:2e:38:
         e1:60:33:16:1f:31:b7:40:90:d3:99:54:e5:5d:b5:f5:09:05:
         98:aa:22:5a:f7:2e:8e:48:79:de:17:1d:1b:26:4e:02:e9:bf:
         05:8f:72:9c:9d:91:b3:17:ac:09:eb:5e:c5:ba:8d:12:e0:ed:
         24:6b:33:05:ae:0d:9f:ca:87:e6:a1:b3:16:7c:c2:0d:d8:91:
         33:b1:46:04:82:49:d8:e1:fa:60:ab:88:30:a4:7a:85:ee:25:
         92:c6:ec:55:12:4e:2d:e0:dd:49:f8:17:42:7c:54:18:9e:fa:
         76:0f:4e:49:9b:15:55:65:7a:60:85:e2:3d:bd:19:47:23:98:
         e6:00:c6:ff:f2:a9:1d:6c:e3:de:b2:91:c3:71:60:6e:32:b1:
         ab:0a:3d:3b:03:f3:0b:26:0b:a3:2c:61:4a:b7:0a:dd:21:12:
         f0:92:ed:0c:c5:b2:d0:ca:10:3a:83:3e:31:58:d5:12:6d:88:
         63:18:4d:17:8c:5d:86:9b:f5:f7:0c:6d:38:9f:b7:fe:b7:2e:
         4f:8c:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:46 2026 by rpki-client