Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa
File:                     4735CB9A93EE11E9B1F2926AC4F9AE02.roa (raw, json)
Hash identifier:          QCuDILdrzkvIxZmj1iyxDFhjLdsSBcMetxYoHDCi4D0=
Subject key identifier:   D5:2B:11:22:7F:C9:41:34:99:72:AA:BB:E7:9A:32:0F:A3:39:C5:C5
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1016
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:17:01 +0000
ROA not before:           Fri 02 May 2025 17:57:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55811
IP address blocks:        103.138.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4118 (0x1016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: May  2 17:57:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42e3c-bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:c2:25:c4:0a:dd:04:6e:d4:2c:b5:16:c3:
                    14:2e:e4:de:67:51:75:91:0f:f9:a2:cf:cf:74:0b:
                    f3:e1:bc:f1:a1:c1:b2:a0:d9:40:5c:74:87:c1:e4:
                    53:9c:d9:13:6f:56:99:ca:4b:c9:80:44:b4:51:3a:
                    80:fe:0b:88:6f:1e:f7:98:dd:9a:4e:ec:d0:fe:99:
                    b5:b6:79:3b:e8:c4:28:ac:9a:fe:95:eb:6e:14:ef:
                    f5:9f:95:8e:5f:33:5a:f7:23:f9:0b:be:31:5d:9b:
                    01:d7:1c:b9:18:d4:5c:d8:1c:b2:43:f7:7d:9c:07:
                    46:e4:18:cf:32:6e:b4:5f:20:92:e1:ff:05:cb:04:
                    77:7f:66:16:b2:20:5a:86:c1:ca:e9:d7:88:09:ef:
                    98:36:02:a9:78:d9:ff:42:a4:68:1d:db:56:92:e9:
                    b3:8c:95:99:83:74:49:a4:8c:f2:a1:c5:85:21:65:
                    de:8e:ec:fd:39:db:fe:9d:08:28:4a:a7:93:1e:08:
                    d7:91:9a:bc:fd:28:50:4e:74:1e:c7:6f:ef:3f:da:
                    be:7b:9c:87:ee:7c:b0:94:5c:8e:b4:8d:c0:df:e7:
                    b1:75:3b:eb:9c:cc:31:d0:03:60:74:f5:cd:a9:e1:
                    2d:58:71:02:ca:22:4a:b6:b4:c5:6a:87:ec:95:19:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2B:11:22:7F:C9:41:34:99:72:AA:BB:E7:9A:32:0F:A3:39:C5:C5
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:06:26:dc:96:cb:0a:27:55:60:c2:02:45:5b:e4:42:a6:
         de:c6:c1:9a:a5:a8:31:9b:91:f7:45:ef:20:17:22:8f:35:1a:
         70:3c:a3:16:70:1b:69:50:56:e1:5b:fd:cf:56:a2:77:1b:6a:
         2a:46:4a:6e:90:b8:61:0f:ee:70:c2:b7:c3:1f:9f:90:b5:86:
         d0:20:f8:f8:8b:85:de:a5:b6:a1:89:d2:b5:e2:9d:e9:fd:9f:
         b4:80:63:cb:40:a5:f1:8d:14:69:90:6c:de:3d:01:9c:5d:59:
         f4:42:97:df:1c:f2:d4:11:66:fd:59:ff:8d:92:a3:72:e0:d6:
         58:f9:81:aa:5c:c8:43:68:3e:7f:b2:ce:04:0f:e1:7f:5e:c5:
         35:5a:4b:33:0a:ce:84:cf:13:56:93:45:12:b6:b6:0d:de:4c:
         70:b4:0f:fc:9a:7e:31:1c:a2:5a:2a:eb:d0:12:8d:8e:8d:d1:
         fc:ae:11:eb:97:82:46:a8:9c:08:d8:55:39:c0:ad:a7:ce:51:
         98:d5:4b:7c:b9:15:2a:7d:c3:9d:f9:fe:c2:54:52:63:f3:0b:
         4d:c0:b3:94:de:4d:c3:1b:e0:29:57:de:a5:51:1c:e1:09:94:
         12:82:a3:54:c5:c1:7f:2b:9b:ff:9b:20:6a:ab:8d:99:06:4f:
         ad:96:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:21 2026 by rpki-client