Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/2C23C084A05511F1924EFF964111F970.roa
File:                     2C23C084A05511F1924EFF964111F970.roa (raw, json)
Hash identifier:          +UnNrlvqk9fdI23k97EfwWpG/vnHy/lU/5HBsL5TEvQ=
Subject key identifier:   9C:D9:2F:0F:2B:BE:D4:41:04:DA:1C:C6:81:A7:66:DA:82:C3:9A:A3
Certificate issuer:       /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial:       0C39
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/2C23C084A05511F1924EFF964111F970.roa
Signing time:             Tue 25 Aug 2026 07:18:30 +0000
ROA not before:           Tue 25 Aug 2026 07:18:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138623
IP address blocks:        103.134.242.0/24 maxlen: 24
                          103.134.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
                          rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
        Validity
            Not Before: Aug 25 07:18:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a8d41c6-4c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:37:5b:71:f5:c2:c4:b6:8b:6d:c8:9d:e3:
                    90:b7:eb:7e:ed:f7:23:36:36:f4:b7:42:e8:0d:57:
                    8f:2a:23:a3:de:d3:50:70:af:aa:72:78:aa:32:47:
                    9b:9f:00:7b:6f:43:c4:4b:38:5c:8c:38:47:ec:c1:
                    b0:7e:01:21:d3:87:be:a5:1f:bc:06:f1:b5:55:b7:
                    14:84:95:25:80:64:80:a4:19:44:ec:a2:f9:60:03:
                    3c:90:65:36:39:3a:a6:88:93:67:27:9e:ee:8e:60:
                    5f:06:ad:ca:01:58:e0:d4:02:e8:55:53:a8:1a:4d:
                    ef:71:e6:a4:e9:a0:b5:81:67:2e:a2:3c:15:30:35:
                    d5:cc:e2:e3:e1:da:40:77:f9:be:4d:2d:b4:91:fd:
                    73:e1:a5:ef:c9:ca:5d:12:d8:17:51:c0:91:03:89:
                    e2:f5:8c:09:7f:91:ff:e9:c5:3d:f7:30:7e:91:db:
                    6f:57:4c:17:b3:36:01:10:a7:d1:ba:fd:1a:60:b7:
                    d5:ad:40:da:75:9c:91:e7:df:dc:6e:fb:fb:ef:f2:
                    4c:2b:7d:c7:3b:fe:b4:8d:d6:fe:03:3f:f5:1c:90:
                    c4:0a:03:f7:ad:30:d9:91:05:59:c7:6d:5c:fb:b2:
                    d1:02:08:0f:ff:63:c5:13:ec:b7:75:a5:8d:9f:a4:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:2F:0F:2B:BE:D4:41:04:DA:1C:C6:81:A7:66:DA:82:C3:9A:A3
            X509v3 Authority Key Identifier:
                keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/2C23C084A05511F1924EFF964111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:39:aa:bb:2d:a5:ce:f5:63:14:4b:5d:06:a8:fd:40:1d:
         55:52:64:9f:cf:01:2a:14:8b:f6:c2:c4:1f:bb:32:d0:5b:c5:
         56:77:cc:53:44:14:d7:9c:4b:c6:3a:1f:d2:45:82:0a:1e:09:
         0c:70:ed:79:3d:44:2b:fc:f1:42:58:05:ac:24:02:05:44:b3:
         f4:2f:18:2e:b6:68:66:7e:30:72:35:68:4c:dd:f2:f4:89:48:
         21:af:3c:d2:fc:5b:7f:54:64:0d:0f:2a:ca:4e:8f:97:c1:28:
         4b:90:ac:9f:97:75:19:21:35:1c:c1:dc:02:bb:37:f4:08:37:
         b3:7f:77:e7:5b:7a:7c:b6:83:59:f6:2f:07:0c:fd:92:da:63:
         40:70:3d:19:93:11:91:44:6b:6f:3e:52:1c:74:c2:e1:ad:2d:
         c6:1a:56:90:d5:89:44:1d:52:cf:eb:8b:ad:30:97:cd:8e:a7:
         bb:a8:68:88:c8:54:b3:ee:39:72:36:8e:23:50:4c:4c:7e:fb:
         a7:2f:75:df:8b:40:df:56:ca:fa:81:62:ee:c0:18:d7:61:78:
         e1:56:ed:ca:f5:2d:ce:75:ad:35:22:18:ce:0d:8b:2a:aa:86:
         fd:0b:d4:1b:ef:ed:27:c7:13:60:e5:ab:6b:c7:8f:3d:7c:68:
         7f:95:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:34 2026 by rpki-client