Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa
File:                     334C06CE012C11EBA97D451DC4F9AE02.roa (raw, json)
Hash identifier:          wiNNIp1N5Vf545wsY29J1SdUAKb4DqH1PB6Uru7des4=
Subject key identifier:   9A:40:92:15:48:88:23:62:9D:50:C8:17:5F:47:6B:4B:43:51:27:B1
Certificate issuer:       /CN=A9155374/serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Certificate serial:       0847
Authority key identifier: 9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:18 +0000
ROA not before:           Wed 14 May 2025 21:48:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138973
IP address blocks:        103.137.245.0/24 maxlen: 24
                          103.157.98.0/24 maxlen: 24
                          2001:df0:2780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl
                          rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155374, serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
        Validity
            Not Before: May 14 21:48:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44942-630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:37:08:78:9a:83:82:88:21:80:18:f8:1d:
                    41:a9:9e:ad:af:0e:3f:58:74:58:ba:62:9c:f4:27:
                    0e:31:0c:c7:eb:ad:31:ab:10:80:6d:52:6c:7b:fb:
                    f0:39:04:5b:51:12:f9:db:42:4b:26:1f:b7:dd:91:
                    78:da:25:48:02:bc:36:fa:57:75:3b:42:18:4e:7a:
                    59:3f:b8:9a:f6:a2:e8:fd:22:a2:17:a4:da:d7:2d:
                    27:54:88:3b:5a:f6:06:32:2f:6b:7c:eb:a7:ce:04:
                    22:24:26:29:2a:55:c2:b8:f4:d2:51:9c:84:a8:1f:
                    80:fb:81:04:f2:a3:42:04:af:a8:98:4a:b6:5b:a5:
                    b8:96:c5:70:88:15:ab:61:de:59:d5:2f:d9:b2:3b:
                    0b:de:d8:94:29:0a:af:d3:bd:47:0c:81:89:d8:fd:
                    7e:fb:50:8c:fe:6d:8e:39:c8:dc:4f:4f:83:28:b4:
                    0e:d1:04:a4:e7:32:a9:b1:77:ee:f5:94:c8:5d:f8:
                    ba:cd:74:1e:89:32:12:94:10:d7:cf:55:a7:b5:23:
                    9b:f7:26:ab:b6:47:28:4e:bd:c2:f0:c0:81:cc:f9:
                    84:9b:61:00:d9:88:b7:11:f0:af:75:d7:b5:4d:bd:
                    12:73:1c:71:fc:bc:90:94:0c:9e:7c:88:33:e3:c8:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:92:15:48:88:23:62:9D:50:C8:17:5F:47:6B:4B:43:51:27:B1
            X509v3 Authority Key Identifier:
                keyid:9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/334C06CE012C11EBA97D451DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.245.0/24
                  103.157.98.0/24
                IPv6:
                  2001:df0:2780::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:93:d3:17:ca:b5:25:fb:82:aa:d4:53:dd:21:63:bb:c4:d9:
         1d:20:34:e8:51:d2:f4:5e:b6:a7:57:ba:7f:d8:fe:54:c9:12:
         e0:a1:f3:2a:7e:7c:3b:6f:e1:df:51:a8:da:b5:a9:75:e3:0f:
         79:59:9b:7f:da:a5:ba:27:1c:33:18:94:8f:b6:07:3f:3e:a1:
         21:bf:cd:79:46:d3:e7:33:b1:cd:c7:37:3a:a7:e3:41:2e:78:
         d2:33:0a:9d:8e:35:fc:c6:a7:d2:b2:8e:0b:a8:33:1a:3d:9c:
         0e:7a:b5:d6:15:b4:75:c6:7d:47:de:e3:2d:ea:0c:d5:d4:82:
         33:b9:da:c3:09:c5:cc:d3:a7:c2:fa:af:d9:09:c6:55:d5:53:
         e6:7d:a5:33:55:86:ad:f2:5d:53:c3:f1:c8:dc:17:1e:34:02:
         12:39:17:a9:8c:60:07:4b:b7:67:c4:ef:93:87:e7:c5:5d:34:
         9a:70:52:96:ec:3d:9c:8f:d8:a6:aa:1b:ee:e8:78:d6:90:25:
         d2:d6:18:8d:bf:d5:19:5c:95:da:68:e7:eb:79:cc:83:7d:58:
         b9:ec:d7:fd:c1:d1:cd:da:43:47:4e:c3:21:93:e5:2b:d8:f4:
         50:b3:cb:5f:bb:c2:82:6d:b0:65:99:bb:af:d9:85:b6:d3:b6:
         80:83:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:37 2026 by rpki-client