Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa
File:                     8A70FA742B9B11F0BC27D350C4F9AE02.roa (raw, json)
Hash identifier:          hJ6Y24AuQF5PWhieP554nyQFt4XwSF7YSqdXDi5PsdU=
Subject key identifier:   77:1B:D8:76:BC:AE:C0:CC:B4:C9:52:52:4D:52:D9:9D:7B:CD:37:D8
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A76
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:22:42 +0000
ROA not before:           Fri 16 Jan 2026 16:13:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58485
IP address blocks:        103.173.140.0/23 maxlen: 24
                          2407:ed40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14966 (0x3a76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:51 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4ae22-fb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:36:b3:b2:92:fd:ce:85:b3:8e:99:24:ce:a1:
                    bd:f7:a4:06:dd:6f:13:b9:a3:f5:53:41:58:60:b9:
                    48:48:dc:b7:4a:cd:7c:d3:0c:ef:32:4f:e8:c1:25:
                    d0:ab:b8:d7:bc:34:f8:28:1e:d7:9b:b3:cd:61:81:
                    cb:d9:05:fe:75:6b:a6:02:ba:a7:fa:4f:d5:3d:28:
                    10:36:6e:1d:19:e3:33:ce:f6:ff:a5:37:d5:ed:3f:
                    f5:55:97:f1:69:03:46:cf:c2:85:22:64:d9:db:5c:
                    f0:95:85:e0:ae:be:b0:59:d3:d0:36:3c:12:87:9f:
                    67:65:d1:da:62:6c:c0:a4:1b:54:51:34:e4:52:38:
                    d4:7c:01:63:9f:18:65:4e:e1:8a:11:48:75:51:72:
                    b8:9d:98:08:75:3e:87:c7:8e:48:4d:aa:a5:35:9d:
                    59:66:45:c0:cf:1c:5e:77:9b:ec:9f:a0:e6:b3:c7:
                    6d:01:a3:96:5e:b6:a6:ea:6f:be:c7:5d:ef:2a:bb:
                    27:fc:5c:bf:66:cf:4d:bd:9e:f3:95:fc:a9:73:57:
                    31:4f:32:44:5a:4d:82:52:02:5f:be:e2:e9:58:d2:
                    1d:8e:55:48:f7:2f:94:1a:17:23:f2:55:86:27:ca:
                    c0:03:c5:e4:5d:85:34:33:e4:d2:e2:f0:99:e8:f7:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:D8:76:BC:AE:C0:CC:B4:C9:52:52:4D:52:D9:9D:7B:CD:37:D8
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.140.0/23
                IPv6:
                  2407:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:17:d2:68:51:41:9e:80:c4:e2:7e:f1:0f:05:55:ad:58:d5:
         a5:c8:37:69:6a:00:22:27:80:f3:b7:ae:f1:38:4b:99:f3:67:
         40:a2:a1:ff:31:32:52:37:ea:01:31:10:b0:f2:d7:83:85:a8:
         3f:9a:7e:8d:91:cd:2d:cc:4f:8e:4f:98:fc:f6:9d:64:ff:7b:
         19:53:ac:ad:36:fe:76:6c:51:f7:00:5a:4b:9d:54:5d:e0:a9:
         a8:07:28:1b:9d:bf:3c:68:c9:b1:f0:2e:8a:91:42:86:9b:10:
         74:36:40:ba:ac:1f:73:bf:15:ae:97:e1:b6:83:91:05:4d:1b:
         e5:ad:6f:f2:f9:a3:ff:06:79:b5:88:0d:01:b0:d5:3e:ef:fe:
         d9:6b:dd:e6:32:cf:68:4c:2b:88:52:6e:f0:29:6d:db:58:33:
         bd:bd:30:cb:ce:40:bd:2d:4b:db:d7:69:51:56:92:6e:9b:b9:
         35:b3:d5:2e:00:97:0b:8f:9f:83:c9:3c:e9:a4:2c:be:7f:0c:
         e0:25:32:53:f7:65:cc:6e:98:a3:e9:58:d6:6a:b4:aa:22:50:
         66:c8:47:27:4f:f0:89:1f:3a:e3:2d:c5:ff:6a:d0:22:b2:41:
         d7:55:fe:ed:f6:c9:78:bb:78:7a:a4:34:47:e3:91:a4:8f:36:
         8f:de:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:40 2026 by rpki-client