Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa
File:                     2C08945405B311F1930B3931093D8C67.roa (raw, json)
Hash identifier:          Ux4o9vfUKYwo/QJewb/lu71Yp9nHgW9svS2rRsxIwOs=
Subject key identifier:   CC:C2:48:A3:71:A7:EE:94:BD:78:6B:B8:E4:A5:48:59:7B:2D:90:07
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       01FB
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa
Signing time:             Sun 01 Mar 2026 16:11:55 +0000
ROA not before:           Mon 09 Feb 2026 12:30:52 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63969
IP address blocks:        103.236.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Feb  9 12:30:52 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4654b-8259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:67:cc:4a:50:48:15:9b:99:c3:63:75:8d:
                    86:19:93:3a:7e:4d:e1:56:d5:1d:f0:21:44:3b:04:
                    c3:ee:65:b5:a6:b0:9e:5c:8e:e8:55:02:9d:44:84:
                    5c:52:c4:e9:8f:4f:14:85:28:85:6e:17:0d:1e:04:
                    71:06:16:85:6d:1d:e7:75:a9:4d:63:4f:2d:17:26:
                    ee:ff:eb:d7:d6:03:52:6c:46:ba:33:7a:17:cd:89:
                    da:ff:9d:a4:6b:7c:e9:37:4d:75:f4:22:05:85:e1:
                    2d:c4:e0:2c:32:e2:49:d4:0c:75:80:bf:4f:08:45:
                    10:c8:80:1a:78:6a:e9:06:7c:44:6a:de:78:91:0f:
                    8f:79:22:43:13:05:24:e0:d0:ba:2b:79:fe:00:00:
                    ac:ec:d8:f3:f1:d0:8a:82:14:b2:29:a8:ab:07:07:
                    94:ab:d5:99:34:3d:ef:e4:e4:8f:76:8e:4c:4c:1d:
                    7c:1a:dc:38:b7:fe:85:69:bb:75:88:32:1f:8b:2d:
                    82:ed:53:c8:df:d4:0e:75:44:36:1e:e1:4d:af:13:
                    88:8f:48:a4:ff:1a:60:68:6c:05:f5:a0:f2:b5:b1:
                    47:64:24:f1:9f:ed:91:e5:9d:ef:f8:30:b0:29:3a:
                    a2:67:d7:e3:c4:bd:0e:e4:45:81:61:ba:11:e7:6d:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C2:48:A3:71:A7:EE:94:BD:78:6B:B8:E4:A5:48:59:7B:2D:90:07
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:b8:4a:b5:c8:7b:96:93:27:99:5a:eb:3e:09:00:79:ef:
         b4:1e:34:0e:43:d6:9f:70:e0:64:0c:8b:21:68:c6:1c:ce:2a:
         5a:d6:8d:73:b2:fb:59:77:5a:f5:da:24:e5:c1:db:12:8e:88:
         73:2c:ef:3c:3a:a0:b4:01:70:65:98:8f:fa:a4:c0:90:97:72:
         d1:84:26:41:d8:f4:73:46:82:cb:13:d8:cb:f0:59:e3:b4:dd:
         7e:bb:89:31:82:a0:70:8e:b6:97:5c:89:5f:32:be:79:91:4e:
         c2:cf:db:6c:13:9d:4f:55:96:fe:07:69:d8:7a:95:46:df:d3:
         62:4d:1b:9f:88:15:d5:af:08:87:a6:0c:8e:d9:60:c8:3b:7b:
         94:ee:17:11:79:c1:5b:a5:54:23:5f:d6:28:b0:d1:0d:c4:df:
         b2:45:b0:7c:7d:52:cd:df:82:36:ac:17:34:e6:d2:ba:76:67:
         ef:2e:d0:a0:8b:b8:57:af:10:d8:6f:f0:aa:ef:c2:5b:d6:33:
         cd:67:37:82:e2:cc:97:14:44:9f:48:41:9a:9c:89:19:90:bb:
         dd:94:8a:3f:00:6d:b1:b4:b7:6e:96:3c:8a:7f:4c:45:29:aa:
         c8:21:eb:bd:89:9f:61:83:bd:9f:36:ec:dd:63:87:b4:44:d9:
         b4:77:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:02:52 2026 by rpki-client