Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa
File:                     37BAE214429111F18FB6D217B2833773.roa (raw, json)
Hash identifier:          8DTZONsJGjymgnSZfnxpolvPLsYSk+tNdQgH6HrBSGI=
Subject key identifier:   B3:E4:9F:64:35:A1:43:D5:3D:80:40:13:3D:E3:CC:D4:B3:D7:B8:79
Certificate issuer:       /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial:       2CF7
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa
Signing time:             Sun 31 May 2026 17:59:43 +0000
ROA not before:           Sun 31 May 2026 17:59:42 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133401
IP address blocks:        103.9.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
                          rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11511 (0x2cf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
        Validity
            Not Before: May 31 17:59:42 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1c770e-d8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:7b:c7:e8:7b:c5:51:4d:c4:6f:9a:22:cd:
                    39:68:1c:0b:71:c5:e5:8c:66:92:02:4e:85:54:af:
                    7b:b0:27:c5:78:a1:e8:f4:0d:4a:01:8f:f2:b9:62:
                    e7:45:61:b7:4f:5b:5a:16:47:99:3c:61:8b:d5:07:
                    e9:15:2b:40:ea:13:04:ee:96:22:33:05:20:c6:0b:
                    2b:35:ec:94:d3:8c:5f:73:87:4d:67:2d:55:b4:70:
                    ee:eb:2b:c5:67:ce:6b:4c:2c:c6:de:ad:77:92:2f:
                    d5:e6:18:bb:f7:85:eb:09:dc:18:46:af:41:43:7c:
                    d0:04:cb:c1:71:00:9e:04:a7:97:a8:2a:1d:f1:0e:
                    26:a6:76:77:41:81:5d:ac:0d:85:be:ed:ee:0d:bc:
                    03:44:ba:ea:e3:47:94:c3:6c:da:22:2e:d2:75:60:
                    eb:17:1e:c9:8a:53:c4:4f:dd:7d:44:bf:26:b6:75:
                    e8:a9:85:b5:b8:86:55:a5:2d:d7:6a:c4:2e:1c:02:
                    1a:a5:98:38:8e:3a:aa:cf:4d:83:de:14:5f:e0:87:
                    84:e9:92:61:7d:4e:73:8c:e9:29:9f:38:4e:85:1d:
                    91:b2:01:8f:67:5f:f3:46:2e:56:dc:3c:32:e2:77:
                    5c:95:84:80:e3:d0:52:d2:a6:c9:8b:e4:e5:9b:0a:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:9F:64:35:A1:43:D5:3D:80:40:13:3D:E3:CC:D4:B3:D7:B8:79
            X509v3 Authority Key Identifier:
                keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:f4:fa:e3:bf:ba:fa:15:eb:17:c5:fe:77:09:9d:2d:a4:
         ca:ca:22:4c:ad:f6:35:bf:04:a5:87:38:2a:bf:94:82:09:3d:
         76:fd:07:ad:9e:b8:16:99:61:7c:13:50:fb:1a:f5:ad:1f:9d:
         12:65:64:ff:98:39:d2:62:58:11:a3:ec:dc:b4:ea:a7:a8:9f:
         69:bd:b7:03:7f:02:95:28:0b:c5:b8:0e:8e:90:b5:e4:67:32:
         62:50:b7:68:63:0e:7f:e4:57:c7:aa:ce:d4:05:20:06:f2:06:
         32:d0:5c:91:31:d1:2d:1a:6c:69:bc:a8:2a:63:67:97:9d:49:
         ba:19:45:51:fd:f8:5b:50:31:9f:41:88:4f:e6:6a:df:d7:1a:
         5d:09:47:2c:a6:a0:6b:f7:de:6b:69:d4:f6:a9:10:1a:06:bf:
         20:e0:81:19:e3:0e:1d:f5:1b:0c:ec:b9:01:1b:6d:4c:bf:a1:
         ac:d9:c9:fb:8d:37:24:61:cb:5c:c4:c1:15:61:01:6c:ea:4a:
         fa:99:7e:c0:77:95:9d:22:fb:ac:5c:c4:30:a3:dc:8b:3b:d6:
         f6:53:d6:58:3d:24:64:fa:af:84:b7:65:39:b2:61:d5:88:fc:
         b7:dc:1a:26:39:4f:73:2f:9a:f6:72:cb:e2:0c:45:d7:b5:f5:
         6c:17:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:08:21 2026 by rpki-client