Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
File:                     9F2E362C9B6E11ECA489542DC4F9AE02.roa (raw, json)
Hash identifier:          FAyF1EHDkfSrZaB9JsF96pk4KSSTdNSXhRevgQNdj7Q=
Subject key identifier:   74:E4:F3:39:2F:4B:E2:4C:0F:83:4F:FB:DB:A8:3D:15:24:C5:13:1F
Certificate issuer:       /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial:       044C
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
Signing time:             Wed 15 Apr 2026 00:31:51 +0000
ROA not before:           Wed 15 Apr 2026 00:31:51 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149518
IP address blocks:        103.182.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
                          rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
        Validity
            Not Before: Apr 15 00:31:51 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dedc77-8493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:f2:a6:03:c2:44:c5:6e:e2:1d:cc:f7:31:
                    df:b3:a8:8e:d5:16:35:d4:e5:4a:d6:e6:a5:18:62:
                    1e:04:bd:26:5a:6a:0a:c8:2a:8b:18:2e:6e:00:97:
                    16:43:7c:56:bd:b6:82:17:6d:da:a7:46:be:aa:ab:
                    4d:72:fa:01:1e:dc:67:0f:be:b6:1d:e9:e9:07:88:
                    ac:12:d6:a2:13:fa:b4:6f:8a:82:93:67:9e:5e:28:
                    99:5d:5e:ab:f4:90:d4:88:07:b4:e9:28:8d:44:75:
                    88:88:b7:f2:79:be:56:54:e7:c2:0b:6f:be:93:ea:
                    4a:ae:ee:ef:98:59:ef:6c:d0:e9:c4:65:73:2f:ae:
                    ee:7a:e0:ed:b8:a0:74:22:ce:c9:89:f0:8f:c4:c9:
                    74:90:21:01:b6:d2:a7:2d:76:9d:ce:b7:49:94:72:
                    e1:81:33:51:ca:3f:b3:0d:69:ea:82:43:41:9c:7c:
                    b1:22:ae:4b:ec:35:69:cc:79:19:c8:f4:e4:ce:a4:
                    a8:16:c7:09:67:27:76:a2:ba:85:ce:55:97:52:e3:
                    75:63:22:c5:67:32:6d:ab:7c:53:82:79:87:cd:44:
                    9f:28:60:53:4e:92:c3:b0:78:3b:25:fe:9c:98:0c:
                    c0:ca:12:41:2c:0d:6a:e8:28:3f:f3:c4:4a:10:38:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:F3:39:2F:4B:E2:4C:0F:83:4F:FB:DB:A8:3D:15:24:C5:13:1F
            X509v3 Authority Key Identifier:
                keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:99:1a:9a:ce:63:a1:54:cc:cd:69:59:28:94:0c:4f:09:99:
         82:17:9e:de:62:bb:ad:b9:cf:c4:8b:78:8a:24:6e:1c:be:4e:
         fd:d9:d6:63:aa:aa:8c:c0:b4:62:57:09:d2:cc:6a:8e:c1:32:
         c6:89:67:94:ea:f1:e3:95:5e:a0:6e:45:94:be:c4:db:22:57:
         6a:09:d4:48:0c:ba:4d:c2:62:cf:f8:a1:1b:73:05:7e:ba:3a:
         83:0e:b0:e8:10:02:a0:5d:0f:8d:cc:ef:c8:89:a4:f5:eb:6e:
         8d:67:0d:15:71:86:02:82:9b:c0:e4:94:8d:4c:bd:c5:6c:94:
         b4:56:a8:df:b9:a5:56:ce:04:75:59:1a:96:33:56:0e:95:2f:
         5d:85:e4:e6:01:31:84:91:e5:b7:fa:15:ef:0d:27:51:4b:cb:
         bd:b2:13:ab:78:c7:df:d3:2f:6a:9b:75:1f:76:47:09:81:81:
         2c:8a:1a:e2:0b:e7:a8:c2:77:68:da:90:ed:96:a5:3a:4c:5a:
         f8:b3:6a:b6:65:f4:eb:e4:7e:5d:84:fb:e2:0a:0b:0c:13:ea:
         51:e2:d5:91:bf:2c:d3:dd:79:f7:a8:9d:79:6e:0f:ab:2c:75:
         f7:1a:11:cf:2b:d6:36:7b:b7:84:20:26:b3:97:11:4b:fd:8e:
         2f:b9:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:45 2026 by rpki-client