Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa
File:                     DD2DD3489F9111ECB958FF25C4F9AE02.roa (raw, json)
Hash identifier:          EU7Pv67dHPUPsN4Pf/6t9QQbrokUpqyuX1Cdd8unPqM=
Subject key identifier:   C8:64:7C:29:EB:3C:A2:8D:3F:83:E7:E3:CE:45:3D:F4:F4:C9:9A:AE
Certificate issuer:       /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial:       044B
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa
Signing time:             Wed 15 Apr 2026 00:31:49 +0000
ROA not before:           Wed 15 Apr 2026 00:31:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139603
IP address blocks:        103.182.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
                          rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
        Validity
            Not Before: Apr 15 00:31:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dedc75-a668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:c1:53:15:cb:22:13:9d:8e:b3:81:83:8b:
                    be:c2:09:6f:48:3b:2d:e7:c0:29:88:31:7b:6f:47:
                    63:01:66:0f:ac:71:7e:a7:6d:78:34:19:68:81:17:
                    70:1b:21:7c:06:f9:90:3b:6d:1b:07:63:09:4a:02:
                    2e:d2:de:03:2b:c5:bd:d6:0c:0d:6c:2e:5a:0c:5e:
                    c8:4f:f7:ab:7d:31:ce:46:b7:f2:06:d0:ae:d6:22:
                    d4:32:46:30:9a:cb:d2:e0:04:51:ef:c1:a7:17:7e:
                    cb:12:51:66:a8:27:87:9c:e5:26:25:16:c6:84:a5:
                    a1:ca:cc:3e:e0:58:c1:ed:5f:33:3c:ca:6b:65:f5:
                    9b:34:a3:0e:07:57:41:8b:0b:f7:3c:3c:82:af:37:
                    ae:e1:97:b0:cc:6a:e5:b6:38:f3:94:f4:56:53:df:
                    41:b3:97:c0:0c:c1:de:af:92:fc:fd:24:e1:e0:8f:
                    f6:14:a0:f4:10:c5:e3:b1:8b:94:a0:06:f2:e4:30:
                    33:2f:37:8c:27:c3:68:c4:94:ba:8e:73:53:3a:e5:
                    d0:88:a8:7c:41:4c:70:0c:a6:ab:5d:d3:2a:96:cc:
                    42:f7:ff:20:57:e2:97:c4:41:59:e0:63:23:af:43:
                    a3:74:8e:04:8c:75:0e:fe:ba:34:c4:bd:fb:e6:2c:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:64:7C:29:EB:3C:A2:8D:3F:83:E7:E3:CE:45:3D:F4:F4:C9:9A:AE
            X509v3 Authority Key Identifier:
                keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:cc:ce:ff:e4:d9:2e:01:7b:00:55:9d:15:cc:90:fe:13:
         3d:6d:8e:ad:f1:57:31:5c:e2:14:88:08:c7:b2:aa:58:d7:d3:
         ec:7f:02:f3:a5:8c:09:46:30:62:6e:8d:ba:82:4c:bb:7b:03:
         30:b4:fc:57:5a:df:c8:88:9c:99:66:91:d6:70:3d:de:27:a6:
         7f:d1:57:59:66:34:e5:36:e6:6f:e9:33:b5:61:90:78:c9:00:
         ae:5c:6f:bc:51:70:da:95:97:e3:47:f1:e1:4b:6b:6f:f3:a8:
         c4:77:46:ee:af:85:ed:51:5a:1f:84:c5:1a:3a:b2:85:1f:1f:
         96:50:be:6c:f5:43:17:36:96:15:6c:62:4c:56:54:b4:de:ab:
         eb:1a:3a:70:95:ca:20:87:1d:ae:33:5f:dd:2e:33:29:5f:6d:
         b7:eb:5c:90:e2:50:a4:cb:cc:84:62:38:fa:04:7c:45:45:f0:
         db:0d:3c:68:89:39:35:1d:cf:82:04:a1:ab:1e:c4:be:2b:5d:
         81:ad:ba:91:fc:60:b7:1e:11:2c:04:eb:f1:48:bf:2c:cf:ac:
         a0:af:51:a0:5c:ff:93:e2:45:4b:03:9f:ae:df:dd:c8:48:84:
         42:cc:85:e8:0e:f2:21:15:91:ad:70:63:37:5f:a2:9c:99:df:
         e3:c5:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:57 2026 by rpki-client