Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa
File:                     9BE6554CB72411EF98F7D577C4F9AE02.roa (raw, json)
Hash identifier:          TpOlOMkvGiREuIISjlFyTVVAuVCoOvxydJx/Up02XYA=
Subject key identifier:   EF:56:E5:EB:75:4A:24:89:56:51:9B:32:9C:9B:F5:E5:95:89:66:FB
Certificate issuer:       /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
Certificate serial:       0234
Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:59:15 +0000
ROA not before:           Tue 27 May 2025 03:53:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.131.100.0/23 maxlen: 23
                          103.131.100.0/24 maxlen: 24
                          103.131.101.0/24 maxlen: 24
                          2001:df2:4340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl
                          rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
        Validity
            Not Before: May 27 03:53:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a43823-5afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:8f:22:ee:62:bc:25:90:da:fc:08:33:10:
                    e5:9c:4e:59:5f:aa:75:a9:ff:90:99:fd:15:d3:7f:
                    fa:10:45:6e:38:3d:e5:5b:ba:d5:9a:22:79:0e:40:
                    d9:70:e4:40:ff:f4:94:24:99:dd:61:90:66:ed:b5:
                    65:97:14:38:17:f6:a2:77:5d:b5:67:7d:78:8b:e7:
                    94:46:f7:25:7b:87:ec:7f:d0:d0:dd:4c:5b:e3:a3:
                    eb:de:34:85:35:89:c7:70:dd:3c:33:81:a4:aa:70:
                    a3:9f:c7:3a:a7:49:2a:a0:11:c4:8e:60:e5:1c:f2:
                    be:3d:2b:32:f1:9e:35:97:73:04:e2:ed:85:d7:d6:
                    6b:5e:83:a2:e1:87:60:26:d8:1e:7c:92:02:40:ac:
                    47:9d:21:74:8c:67:0f:22:6b:39:7c:aa:84:9b:20:
                    e9:fa:50:88:4b:16:16:97:24:7e:ce:a4:c3:44:7d:
                    a6:32:38:b0:9f:ee:57:05:24:09:b7:a7:0c:68:26:
                    a0:0b:61:9b:b1:ff:4c:b8:10:65:b0:cc:ea:24:b6:
                    dd:06:d9:06:11:79:ff:fd:d8:a9:05:f0:d3:b2:20:
                    e9:bb:f4:69:41:fa:52:36:2c:38:09:28:54:4e:13:
                    8d:5d:b2:b1:21:c0:af:5f:52:a1:91:cb:53:70:e5:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:E5:EB:75:4A:24:89:56:51:9B:32:9C:9B:F5:E5:95:89:66:FB
            X509v3 Authority Key Identifier:
                keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.100.0/23
                IPv6:
                  2001:df2:4340::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:ac:16:04:65:b6:08:eb:aa:7e:23:f3:05:bb:e1:3d:05:82:
         4a:d0:02:74:87:ee:3c:7f:46:23:5f:5e:e6:2c:1b:73:cc:2c:
         2b:c5:79:87:b7:2c:1a:fb:8c:15:1c:23:c6:d4:02:70:c6:29:
         b5:8a:db:6b:74:92:ca:0d:ad:7a:f3:25:6f:e1:da:92:9e:87:
         6d:fa:39:6b:89:c8:3b:ab:03:02:b6:e3:0f:5e:1a:39:d3:98:
         0d:17:6a:fe:55:38:33:fd:53:0b:1a:62:8b:a0:c0:43:22:52:
         6b:be:f6:09:53:90:d9:e1:17:78:45:1c:c8:11:bc:38:2a:18:
         d1:ab:86:9a:6b:b8:43:cd:54:c9:3a:31:d4:7b:f2:68:86:5f:
         cc:27:cc:85:bd:26:87:68:36:f5:e4:64:36:4f:0e:d4:6f:21:
         04:c2:0a:80:c1:87:45:3f:3b:83:e2:ff:95:d1:46:b7:b5:ad:
         78:2d:2d:14:35:cc:dc:1b:65:ba:e8:52:c8:3a:82:eb:f2:d2:
         c9:5b:ea:61:15:8c:5c:41:26:82:69:e4:f9:59:6a:0c:43:b2:
         7b:6f:b1:ed:db:80:e1:78:2c:80:e4:ed:8e:6a:61:31:b8:e0:
         be:ef:04:c7:07:51:3d:e5:41:01:5a:3d:de:19:09:37:0b:b3:
         e9:04:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:15 2026 by rpki-client