Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
File:                     39F3DCDABBB711EC8B27B129C4F9AE02.roa (raw, json)
Hash identifier:          CDD/Tcfc9Kjy21BqgGhbMRtGmLglmTTkZnwltnHOeUk=
Subject key identifier:   9A:04:BD:4F:45:12:90:3F:71:35:B8:6E:4C:49:53:C0:DA:CD:F6:47
Certificate issuer:       /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial:       03F6
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:03:03 +0000
ROA not before:           Thu 13 Feb 2025 02:44:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.107.56.0/24 maxlen: 24
                          2001:df3:c300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
                          rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
        Validity
            Not Before: Feb 13 02:44:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a40ed7-33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:2b:52:bf:d7:d8:c3:41:9a:49:8b:66:06:
                    d8:10:d2:69:0f:80:4e:dc:76:61:b6:eb:d4:50:7d:
                    36:cb:53:db:d4:9b:fb:84:bb:15:11:46:8b:a0:0b:
                    5d:f1:a0:43:52:a9:1b:48:9a:3f:0f:1c:95:25:bf:
                    a8:ca:e9:98:95:14:f0:49:48:7e:60:f7:15:f8:13:
                    25:47:6c:2c:b8:73:81:b1:2e:ca:23:1a:ae:a7:42:
                    8b:06:2c:55:df:18:cf:5e:6d:70:00:f1:c8:9c:67:
                    e1:8d:39:2e:d1:43:96:5e:d2:1e:cc:13:ac:b1:8c:
                    1a:f8:20:21:ae:f5:c4:40:5d:58:ff:b6:5b:f7:34:
                    51:fb:cd:04:e3:9f:61:8a:99:62:83:ca:ae:cb:33:
                    88:f9:39:12:af:b7:28:34:8a:7f:28:03:7f:a2:83:
                    ea:a0:65:10:d2:0c:78:0c:03:07:1a:88:7d:72:4d:
                    b0:34:77:89:7b:da:90:5a:5a:3d:37:29:ea:b2:1c:
                    dc:71:8d:34:69:b0:15:28:f9:d2:fa:f5:ba:35:fd:
                    48:5b:5d:a7:f2:ef:1f:cf:d0:f7:b9:2c:d7:92:1d:
                    fa:a5:44:91:c9:0d:76:2b:5f:d5:9f:78:9e:4d:3b:
                    43:a8:b3:29:48:cb:9c:43:f7:8f:d0:58:1c:4d:d5:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:BD:4F:45:12:90:3F:71:35:B8:6E:4C:49:53:C0:DA:CD:F6:47
            X509v3 Authority Key Identifier:
                keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.56.0/24
                IPv6:
                  2001:df3:c300::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:a2:05:79:1e:2d:81:50:09:cf:ba:eb:0d:63:f4:6a:df:
         60:b5:e2:fc:b3:eb:c8:cf:38:0b:11:d1:e3:20:b6:3f:04:a8:
         af:2d:60:ea:f9:36:25:de:7c:05:46:68:38:36:a9:19:63:7f:
         5e:db:ea:38:99:55:45:fa:02:dc:5c:f4:7d:7f:86:a0:b0:87:
         96:75:d0:f3:ec:52:4e:a6:9d:b5:7e:1a:2e:44:31:1e:d6:65:
         2b:9f:44:e8:4c:01:6f:81:f2:c4:5f:93:07:1d:da:1e:11:74:
         bf:0c:18:a8:3c:25:cc:0c:e8:bc:f5:9d:b8:1a:e5:5a:6c:da:
         b3:26:b4:90:5f:4c:3c:79:af:06:7c:78:a6:29:4b:9e:9c:bd:
         b6:b8:5b:35:50:47:98:16:0a:63:7e:ca:96:83:ca:69:d1:c9:
         d9:07:2b:4e:75:07:c0:6a:9e:a9:1f:fc:53:86:38:a3:65:78:
         49:57:25:fd:d4:e3:6e:5a:6e:ed:42:10:80:f3:50:ea:4d:32:
         d7:24:97:aa:cd:25:fe:44:f9:4f:92:55:12:7b:0b:45:ba:c5:
         42:7a:15:5e:91:54:a7:1f:0d:b0:f0:d1:6e:fa:41:fe:b5:82:
         af:ed:b9:89:09:c5:91:f2:ec:1b:15:f2:a0:72:58:65:e6:73:
         19:ce:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:30 2026 by rpki-client