Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa
File:                     2FA6E74C0E0511F0971F7328C4F9AE02.roa (raw, json)
Hash identifier:          IRQ5tUvjSdYBMHXJtMeaFpdBVsbhUU9VeI4w+7YPShY=
Subject key identifier:   71:3F:31:D1:0B:DB:FF:99:32:E8:12:38:C3:65:D7:4D:05:B1:A3:C6
Certificate issuer:       /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial:       0189
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa
Signing time:             Wed 01 Apr 2026 05:38:37 +0000
ROA not before:           Wed 01 Apr 2026 05:38:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        103.14.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
                          rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
        Validity
            Not Before: Apr  1 05:38:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69ccaf5d-1d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:1e:6d:9a:33:9c:14:df:08:02:5b:b3:6e:
                    f7:e4:85:51:8e:dc:c0:7f:78:2a:95:ba:f9:d2:f5:
                    a1:80:63:51:63:1e:84:5e:d9:ce:b1:87:bf:bb:66:
                    fb:06:14:6d:de:0b:2f:75:98:81:e5:a4:3b:2c:d0:
                    86:6a:6c:21:c8:7b:b9:e4:f8:88:65:3b:82:63:59:
                    d7:56:a0:ad:04:64:85:ac:04:7b:b5:e9:96:cb:31:
                    b8:1c:93:58:3a:00:61:2e:a4:b8:6b:41:0f:ff:3d:
                    89:74:59:0e:d6:77:a9:40:f9:8a:85:34:f6:b0:44:
                    6d:54:d3:86:ba:ab:bb:2b:3f:be:1f:5d:9a:0e:d3:
                    c2:d8:3a:c7:fb:2d:9d:29:e0:15:4c:14:9b:b3:4e:
                    64:4d:92:38:40:59:0e:df:25:ab:12:8c:0c:f4:1f:
                    a9:5d:b8:63:f4:46:a4:e8:5c:f0:1f:ea:fa:bd:6c:
                    75:f9:df:02:a6:22:5f:67:a9:d9:dc:b4:40:eb:3b:
                    fa:22:ba:60:1a:88:f1:de:e3:ac:14:1f:c2:eb:54:
                    b4:6a:84:3c:91:17:4a:38:37:de:4d:7d:96:ac:bf:
                    93:5d:99:5b:6b:71:f6:05:02:43:24:dc:c4:45:3d:
                    a7:57:cc:a2:9d:20:35:71:10:ad:72:af:20:0c:85:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:31:D1:0B:DB:FF:99:32:E8:12:38:C3:65:D7:4D:05:B1:A3:C6
            X509v3 Authority Key Identifier:
                keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:50:31:d4:32:97:03:fc:1b:c8:ce:7e:ea:57:d4:e8:55:77:
         12:8c:4b:54:8b:57:ef:3f:eb:ca:77:5e:8b:cb:05:f5:1c:7f:
         51:b3:45:cc:6b:14:f9:bb:86:41:c4:a0:75:e4:ff:11:41:ee:
         46:03:65:d6:a0:09:09:ba:c9:a4:11:8d:9b:5e:d7:94:9e:fc:
         af:f7:d7:22:39:50:58:08:fd:a5:56:7e:a6:3d:e4:3a:a3:fb:
         9c:32:d4:5f:32:c8:3f:c8:d3:68:a2:39:42:94:df:be:d5:b8:
         77:37:59:01:8c:9e:39:42:d3:af:6f:74:f8:71:06:40:b0:0d:
         4f:c7:df:14:79:05:aa:39:7d:fb:64:26:61:32:0d:7e:53:79:
         5f:ea:76:b0:67:d0:f0:e5:b8:21:b5:36:6a:20:51:fc:f5:9d:
         fa:74:e2:20:67:c0:02:b1:42:0a:66:58:5c:03:86:fb:a0:a2:
         8d:91:20:48:c6:b6:ae:e0:cc:2c:ff:cb:fb:49:ad:ab:26:61:
         3d:f0:33:42:1b:a7:ad:50:c6:8c:8d:5d:de:a0:20:d1:c1:4c:
         3f:3e:9e:17:54:ae:8e:58:f1:bb:d7:a2:15:7a:af:72:66:6f:
         b6:09:13:2d:5b:f1:3e:50:04:3a:a6:d4:98:cd:86:47:0d:b2:
         1d:02:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:23 2026 by rpki-client