Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa
File:                     39952E50C6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=
Subject key identifier:   68:C2:55:07:F5:61:F7:DB:B8:AB:FF:9C:38:1E:FE:D5:38:A6:CB:25
Certificate issuer:       /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial:       03C7
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:24:39 +0000
ROA not before:           Sat 11 Oct 2025 03:27:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.64.0/22 maxlen: 24
                          103.38.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
                          rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
        Validity
            Not Before: Oct 11 03:27:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44c27-d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:19:66:07:9b:8c:2c:82:49:21:c9:ad:99:
                    9a:17:e5:7a:37:ba:f6:7c:dc:67:67:c9:a3:4c:b2:
                    8e:59:03:37:18:06:bc:79:4a:46:63:61:e9:3a:27:
                    29:7f:e3:7e:5c:7e:0b:fe:19:f0:ae:3d:40:3f:18:
                    9c:22:77:0c:cf:43:22:4b:64:dc:29:d7:4f:2b:97:
                    7e:43:9c:9e:42:2e:82:8a:88:9f:c9:37:cd:b6:12:
                    36:4f:64:93:f3:f3:5e:6b:34:d4:35:4b:0d:97:f9:
                    33:35:ca:56:8d:50:1b:49:07:70:1e:f9:0a:7b:0a:
                    ae:49:fc:2e:0d:b1:7c:fe:8c:b5:e6:2c:75:50:5a:
                    67:00:17:ce:d8:89:37:d8:21:81:42:70:37:3d:30:
                    58:f7:3b:51:b7:94:6d:97:0b:83:e6:aa:20:68:0a:
                    f7:43:f2:7c:67:cb:12:ef:a1:13:5d:87:a8:aa:8f:
                    35:06:e7:ff:28:0a:9b:b4:a4:36:f1:d6:a3:27:78:
                    3f:28:ea:19:59:04:66:94:0e:95:f7:0c:01:64:5b:
                    f6:55:1e:f1:b4:65:a6:10:ff:39:63:4f:ed:bf:99:
                    8c:d6:d2:bd:b2:09:cd:0b:2f:bf:af:74:b4:6e:dd:
                    40:7b:5d:45:13:15:3b:54:d1:0e:7c:3c:89:75:21:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:55:07:F5:61:F7:DB:B8:AB:FF:9C:38:1E:FE:D5:38:A6:CB:25
            X509v3 Authority Key Identifier:
                keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.64.0/22
                  103.38.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:47:27:9f:bf:66:a0:10:ad:c8:27:92:4f:4e:88:10:4d:
         ec:1c:12:8c:de:5e:50:2b:c0:cb:60:45:f0:1e:2e:ee:6f:31:
         f8:ae:d7:17:a6:a3:3e:34:2f:03:d7:4b:fe:14:85:23:67:9a:
         f9:c1:2a:7d:f3:a4:89:a7:ba:80:09:c7:72:24:cf:7f:21:e9:
         53:b4:3c:1e:f8:cb:e4:e7:04:0b:fa:1e:a0:e8:fa:5e:ef:df:
         e7:51:4c:e4:dd:50:94:fd:47:f7:af:52:79:15:e4:51:21:bb:
         00:98:f5:6f:31:a3:8d:42:ae:7b:e0:7c:54:10:11:f0:f1:35:
         8e:28:74:1f:e8:42:5a:fc:a4:0e:6d:0f:60:00:58:c4:36:93:
         57:d8:67:9c:8f:f1:35:1b:24:58:ac:7d:0c:b2:59:1c:83:82:
         de:7b:2c:12:97:8a:db:57:f3:8b:6b:a0:81:b8:11:b6:32:72:
         dc:9e:9b:3d:21:c2:8b:b9:ce:e3:c9:5e:58:be:c7:0f:69:bc:
         4c:91:99:ae:6c:e2:7e:61:94:9b:d0:89:4a:e7:88:6a:2b:1c:
         20:10:55:c0:0d:37:70:f1:9a:c4:2b:bf:b9:b0:86:4c:13:96:
         84:e6:03:86:c2:e0:0f:6d:d3:9e:82:9d:1f:f9:7f:8f:f1:0c:
         63:3e:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:18 2026 by rpki-client