Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
File:                     7FCFB4745E8411EE89DF693EC4F9AE02.roa (raw, json)
Hash identifier:          eopWrcCTKAsMxcnNdOCRso+7nTOlyhMbbG0+6DVN/mA=
Subject key identifier:   B5:4E:A3:CF:C5:E6:DC:A0:C2:39:F2:BB:22:21:12:17:9A:85:77:4C
Certificate issuer:       /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial:       0603
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:38:40 +0000
ROA not before:           Wed 09 Jul 2025 00:05:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140880
IP address blocks:        103.152.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
        Validity
            Not Before: Jul  9 00:05:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43350-7ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:56:94:55:8d:be:7d:89:05:fa:43:40:44:
                    6a:ba:db:7b:9a:1c:5a:73:10:2e:5a:3a:f4:6f:d3:
                    39:37:bf:a1:ce:3e:44:19:f9:3f:2f:47:93:46:a2:
                    a2:69:c6:42:f9:b2:4a:71:84:73:ef:51:d4:cd:38:
                    20:93:ea:22:a3:96:95:be:5e:1e:e2:5b:e7:40:ed:
                    bb:76:ae:77:10:a4:3c:98:6a:b5:16:82:99:4e:9d:
                    79:f0:7c:f3:b4:a8:68:b0:91:9f:23:82:85:7d:88:
                    37:ab:e2:76:37:65:d7:22:16:94:40:09:55:53:f7:
                    40:20:06:d8:0f:4e:5b:7e:09:57:d5:2b:63:72:c3:
                    61:af:dd:b1:30:98:44:fa:8e:d7:fe:ee:05:05:2d:
                    e5:56:16:d6:4a:64:df:b8:f1:1b:33:84:9c:1b:0b:
                    ef:5b:1b:b1:e5:f2:3c:a7:70:b8:8f:dd:45:65:93:
                    30:7d:f0:25:3c:43:37:48:73:78:ba:4f:1d:c9:ff:
                    93:bb:14:c0:c4:db:41:c9:87:af:83:55:96:25:35:
                    38:d3:f5:55:53:03:b9:d7:45:62:25:60:ed:ef:06:
                    66:57:60:ea:f5:79:7e:a4:1e:4d:a1:9c:8d:19:3b:
                    02:5d:b8:b0:fd:3f:b3:dc:b0:9e:a8:37:5c:2e:39:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:A3:CF:C5:E6:DC:A0:C2:39:F2:BB:22:21:12:17:9A:85:77:4C
            X509v3 Authority Key Identifier:
                keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:32:7f:b1:b0:60:fb:21:e3:6a:60:6f:11:32:62:21:d8:
         88:f7:29:c2:4e:c7:40:bf:bc:dd:32:92:ed:79:09:d0:7f:ae:
         58:98:5b:91:81:c5:c1:5c:da:ae:51:d5:ac:e0:25:2e:ca:e5:
         5d:b6:ad:b4:de:69:ba:27:46:d5:b8:e2:bb:7c:40:42:a1:96:
         e5:b3:33:f1:d9:5b:c0:e8:3c:ab:b0:c0:b9:13:55:3b:c9:fb:
         56:7f:28:da:ad:c0:ae:df:24:08:14:e0:de:a5:3e:e2:e7:5a:
         d2:ec:75:82:3d:29:9c:a8:94:cf:8a:d6:85:da:e4:2f:4c:20:
         f2:7d:b4:b4:1b:24:9f:12:b2:0d:2a:b8:94:74:54:a5:f3:91:
         85:8d:9b:ce:ce:7e:c8:18:e6:65:b6:73:b5:30:2d:d9:c1:48:
         c2:c0:a5:15:53:f7:cf:b6:cf:b0:0c:9a:37:4e:2b:9f:5b:03:
         71:42:36:67:ee:f7:2a:17:74:24:77:75:45:56:52:aa:27:77:
         98:b8:6d:d9:98:e6:cd:e2:90:ee:18:42:91:58:af:c3:c9:9f:
         27:72:c2:0e:ab:0f:1f:b4:38:4b:bd:d4:61:73:d9:9b:20:d5:
         2f:b1:60:46:d1:e5:83:6e:ce:e9:23:c8:80:d0:10:13:95:58:
         84:d4:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:15 2026 by rpki-client