Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          7BGwnc1IZ6Y0s4DyjIshQ02F7wcLbCIsmweOm/t8S18=
Subject key identifier:   41:5A:B3:43:F1:D5:B1:95:B2:62:9C:4F:06:36:7C:05:0D:D2:0F:A9
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       0717
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 22:28:59 +0000
ROA not before:           Thu 16 Apr 2026 22:28:59 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Apr 16 22:28:59 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e162ab-da6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:54:fc:78:b0:7d:7e:13:af:ba:9a:6e:cb:
                    7e:9f:a9:c0:83:09:b6:11:99:1e:0d:25:fa:af:c4:
                    6b:8f:15:92:d3:12:06:2d:be:21:41:7d:45:41:7b:
                    95:d2:07:3e:00:bb:49:7d:71:b1:b1:8d:78:ca:d4:
                    9a:38:78:88:57:c6:9b:1c:0a:2c:c0:60:4d:e9:dd:
                    7f:57:de:e1:66:1a:69:1b:19:d0:5c:eb:1b:a0:b3:
                    4a:3c:8d:ba:3e:61:17:68:68:26:83:f7:29:2b:07:
                    50:a5:c0:33:4c:4f:02:fb:ea:b7:e9:21:2e:f9:ce:
                    8e:c2:46:b7:dc:66:91:c6:6f:0f:f8:55:41:ba:78:
                    44:eb:fc:dd:db:b4:e1:ca:2a:66:d6:0e:9d:65:7f:
                    b7:ff:bf:4f:ab:78:35:d9:b6:6b:6f:10:84:df:6a:
                    2c:ca:5c:65:10:91:78:db:80:36:72:2a:9d:1f:bb:
                    89:01:a5:65:bb:3f:ac:1a:f3:0d:de:2c:e5:c5:fb:
                    19:0a:52:23:d7:cf:b9:b6:c4:85:6b:cd:71:6a:9f:
                    56:34:3c:37:dd:2c:b8:f4:f9:52:ca:6f:32:69:b5:
                    96:ee:8f:ce:88:4a:7a:c7:66:85:f6:05:a4:46:ea:
                    86:2f:7e:c8:23:10:e0:94:51:dd:8a:a4:6c:bb:bd:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:B3:43:F1:D5:B1:95:B2:62:9C:4F:06:36:7C:05:0D:D2:0F:A9
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c4:f7:d5:b7:fa:54:78:c8:8b:31:e7:76:d2:5d:f2:ca:b7:
         88:0f:b1:e8:49:33:95:84:d3:22:2a:89:4f:58:40:5a:e7:4c:
         a8:45:e8:d4:fd:5d:0e:24:ef:ae:0b:3d:ec:ec:37:6a:8b:66:
         74:b6:0f:c0:2b:b8:76:d9:25:08:14:7e:75:af:20:bf:95:36:
         18:e5:9f:5c:ee:19:20:fb:c3:da:a2:d4:a8:4f:e8:40:58:13:
         68:da:8b:d9:b1:07:31:3f:1f:86:27:96:fa:7d:89:86:fa:0e:
         7d:74:1a:e0:e3:17:71:e3:8d:cc:e4:a8:cf:4c:5b:fa:a2:6c:
         7e:a7:95:b7:4d:8e:97:84:0b:17:c1:0f:92:a7:db:9f:7a:fa:
         6d:40:9c:95:6e:04:60:e1:18:3c:72:4e:4c:68:86:2e:a6:5c:
         28:93:64:71:7b:aa:79:a4:b1:d4:47:fa:c9:33:15:c9:d9:c3:
         e3:8a:0c:56:86:f8:7b:79:de:54:91:b7:de:c4:97:21:87:0c:
         ac:f7:15:f7:c5:b3:78:71:b7:2b:35:ef:a4:00:9f:22:a3:4e:
         92:71:40:7b:b8:75:c1:77:c0:29:04:26:bc:46:6c:c6:8e:f6:
         b1:19:4b:ea:c5:ec:55:41:4b:2d:c6:7f:f0:f7:22:68:a5:04:
         7d:af:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:56:48 2026 by rpki-client