Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/08C486D0E47311EBB62C361EC4F9AE02.roa
File:                     08C486D0E47311EBB62C361EC4F9AE02.roa (raw, json)
Hash identifier:          Hs6M3Fh7jWKDJILdF9BW0Fb1gb+f3a7k4oNX0ABQRLQ=
Subject key identifier:   7F:70:FC:44:8A:B8:2B:77:83:FD:FC:09:B6:B7:66:29:D2:F1:1C:5F
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       15F4
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/08C486D0E47311EBB62C361EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:15:19 +0000
ROA not before:           Wed 02 Jul 2025 17:24:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137585
IP address blocks:        103.114.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5620 (0x15f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Jul  2 17:24:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42dd6-72c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:f3:ed:76:a6:6a:27:8e:04:6e:00:82:2d:
                    74:03:c0:8a:88:08:1a:0d:93:6a:96:00:11:81:7e:
                    60:13:aa:08:fb:fd:9c:5d:55:8c:78:ff:d8:e2:63:
                    c4:a8:f1:57:b4:96:e7:08:89:21:7a:cd:93:ad:da:
                    69:26:42:82:10:26:9d:b5:68:40:b3:f8:31:b2:4c:
                    ed:84:80:0d:c3:25:41:49:80:de:8d:11:64:40:0d:
                    f4:1f:29:b7:9e:0a:d4:ae:4e:73:13:d7:63:c8:ca:
                    56:4b:26:37:22:2a:a3:8c:4e:a9:1c:35:5e:88:26:
                    f1:90:70:88:02:82:ba:09:b9:3f:e9:1b:44:52:ee:
                    4c:82:5f:ab:5e:bf:e6:b1:ed:52:4c:d6:7f:3c:4a:
                    d8:c6:e5:22:0d:24:a7:f3:f9:79:98:a2:62:1d:e0:
                    03:cd:1f:00:fe:03:f1:a5:77:f2:fc:28:af:33:88:
                    ab:e3:75:8c:98:95:ad:e2:e5:3c:f1:91:9b:a6:0f:
                    e9:ee:a9:81:17:51:6f:b7:b8:3e:33:c5:32:ac:af:
                    0f:70:9a:42:b7:94:a4:f3:02:25:b5:02:51:a4:c5:
                    10:a0:42:c5:2d:2d:13:c4:96:f4:3a:3f:05:2a:07:
                    7c:ce:6f:e1:6d:61:a7:ee:fd:c2:a2:ff:1d:7a:b4:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:FC:44:8A:B8:2B:77:83:FD:FC:09:B6:B7:66:29:D2:F1:1C:5F
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/08C486D0E47311EBB62C361EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6f:6a:ba:72:8f:0b:d2:58:ed:d8:56:0a:99:a3:3b:24:9f:
         e6:54:9b:a3:df:16:07:c1:ca:51:40:7c:36:31:38:ba:b6:18:
         1c:01:56:93:21:b3:da:d1:01:b0:57:cf:8d:a2:1d:ff:aa:ac:
         44:87:e1:8b:8c:67:ca:b1:37:86:d9:b4:5d:48:ad:03:e0:f9:
         69:aa:e0:99:ef:70:10:d2:ef:6f:a3:62:12:62:96:72:81:8a:
         d1:f6:af:bc:bb:ee:ea:bd:bb:ae:6f:9d:ed:63:a8:d6:a9:ae:
         7c:28:42:da:45:86:4b:40:45:67:4a:ed:0f:79:99:f9:79:b2:
         97:ae:84:c6:83:81:70:eb:60:07:b1:ce:94:82:4d:67:66:e9:
         ca:61:c4:63:70:ec:0d:9f:92:6e:2f:7c:61:e1:db:46:73:9d:
         69:0c:b6:02:58:d0:85:20:f9:ac:cc:d0:94:26:e1:c8:95:fc:
         e2:b8:eb:7a:d6:9f:95:f0:53:c2:64:d8:27:72:f0:f4:8a:6f:
         3b:c5:89:d3:fa:04:17:e3:98:7c:1d:61:8c:fa:d1:a2:3d:18:
         33:a4:7d:ba:9c:f6:09:fd:87:35:62:b4:03:c5:72:c7:34:db:
         42:13:b8:6b:0d:34:09:62:95:c8:b1:a8:ac:25:ce:c1:34:94:
         68:30:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:47 2026 by rpki-client