Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa
File:                     00C137A2BE7911E990831772C4F9AE02.roa (raw, json)
Hash identifier:          NQpW4mib0A0ZlUDHn4RXpOEDqbWxC+9qTVrIvrNaOTw=
Subject key identifier:   CB:86:3D:51:5E:B7:D1:3A:C3:C7:63:76:93:04:BE:F5:31:C9:B1:14
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A4A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:22:04 +0000
ROA not before:           Fri 16 Jan 2026 16:13:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136079
IP address blocks:        103.86.100.0/23 maxlen: 24
                          2405:2cc0::/32 maxlen: 32
                          2405:2cc0:600d::/48 maxlen: 48
                          2405:2cc0:600e::/48 maxlen: 48
                          2405:2cc0:600f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14922 (0x3a4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:08 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4adfc-ed32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:8f:7d:91:4c:2e:15:42:dd:83:9c:c1:d2:
                    2d:f8:a3:e8:42:a7:f9:e4:dc:42:5e:1a:af:27:c3:
                    87:57:fc:8f:18:fb:6b:45:87:b9:48:fc:e8:e1:36:
                    bf:ba:94:74:f9:f0:24:43:2a:ca:65:79:43:bf:e0:
                    7d:c4:14:48:f8:8e:7b:ce:38:1f:04:de:5b:d8:b2:
                    c0:09:76:f5:18:9d:04:86:10:a6:70:60:8e:54:cc:
                    5f:51:ec:4e:9f:ea:be:4f:86:47:e2:07:17:70:b8:
                    3a:b2:c0:ca:fd:e7:d1:9b:6b:52:26:5d:a0:b0:2f:
                    e5:32:43:71:b4:1d:a6:ed:22:38:14:22:7d:5a:f3:
                    63:78:36:58:8b:c5:7f:f4:a9:f7:6a:a4:cb:ff:94:
                    8b:af:8c:60:de:09:51:6e:93:f7:2a:7e:d7:7d:02:
                    ab:ea:b7:4f:f5:a6:4a:85:45:27:a1:b3:a7:44:ff:
                    7d:8a:7a:9d:94:fe:ff:1d:3d:89:74:e6:9f:a2:69:
                    82:4a:48:40:87:ab:9b:09:54:2f:ae:8c:bc:c3:b2:
                    8f:18:18:bc:47:99:4e:19:a3:d9:69:7f:7e:4d:49:
                    3e:63:29:f3:fc:17:52:49:7f:f5:1e:b3:15:4a:d6:
                    52:57:a0:77:a8:d1:66:cd:92:5e:dc:d6:f9:1e:ca:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:3D:51:5E:B7:D1:3A:C3:C7:63:76:93:04:BE:F5:31:C9:B1:14
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.100.0/23
                IPv6:
                  2405:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:6a:eb:a8:29:dd:5b:81:52:e9:3d:2b:da:4d:52:d8:bc:
         b6:8a:c5:9a:27:71:77:2e:0f:c2:c0:b8:e5:07:b2:e4:db:0c:
         c8:ec:a0:89:bb:47:0c:b0:15:f1:c3:01:bf:48:ca:36:c9:4b:
         bc:8d:6f:8d:a4:89:30:e2:68:09:58:a7:7e:9c:73:10:76:14:
         d2:32:bb:e4:48:eb:e2:fc:5a:a5:7a:af:b3:5e:40:df:fb:1c:
         38:7e:2c:61:b1:dc:79:c2:8b:3c:65:b5:09:5e:22:a4:f8:5b:
         b9:58:d0:67:cb:33:c9:89:c9:cf:1b:2b:25:34:0c:68:5a:c5:
         df:62:04:38:dc:01:c4:16:b0:f3:9d:47:b9:e6:2e:25:35:a0:
         ac:74:9e:dc:c4:4e:1c:e5:d7:1f:9b:16:49:49:7d:e4:0e:34:
         bb:c5:78:f2:68:2d:f5:b1:8e:1d:a1:a7:05:4d:e2:79:ae:ba:
         c5:40:d4:81:f3:47:af:65:f0:1d:f8:bd:09:b5:37:f6:a2:9a:
         8c:93:17:e8:88:ba:6a:4b:25:41:b2:bf:86:c0:ac:48:9b:e6:
         d0:e0:52:54:90:2a:1a:f2:77:e6:aa:21:38:eb:fa:f6:d5:c9:
         0c:31:a5:0e:bb:aa:71:00:e8:99:5a:cd:10:6b:ac:b5:42:f7:
         cc:3a:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:18 2026 by rpki-client