Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa
File:                     9B2C760CD89B11EF8D75534EC4F9AE02.roa (raw, json)
Hash identifier:          hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=
Subject key identifier:   10:63:0C:00:78:99:EC:30:45:D5:CC:EE:8E:7E:20:16:11:BB:BC:35
Certificate issuer:       /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial:       01E7
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:37:17 +0000
ROA not before:           Sun 03 Aug 2025 04:41:25 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55734
IP address blocks:        43.245.0.0/22 maxlen: 24
                          103.232.184.0/22 maxlen: 24
                          223.27.120.0/22 maxlen: 24
                          2401:4ce0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
                          rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
        Validity
            Not Before: Aug  3 04:41:25 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ecac-5e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:e1:9f:b8:85:8e:a7:d4:fd:9c:1b:4c:b4:
                    d1:eb:fa:11:04:3a:15:d2:00:fc:e7:2e:14:84:e4:
                    43:35:d4:15:f9:95:f1:28:e8:3c:f0:ec:a4:bb:5f:
                    59:3d:a3:9e:57:d8:cf:95:db:ed:35:b8:00:b8:82:
                    c3:23:75:1c:79:15:46:cf:b0:af:cc:cd:37:59:58:
                    a2:03:e8:5c:a1:d8:c2:69:33:19:34:18:87:4f:d2:
                    34:3a:5f:f7:91:06:0c:26:61:48:fb:df:c7:00:52:
                    2c:68:02:65:86:b7:15:7f:28:36:c8:4c:6c:9f:bd:
                    62:e5:86:d0:6c:a6:e1:db:a3:59:9e:a5:d8:83:9f:
                    4b:89:10:b1:02:ea:fe:a3:00:3c:83:72:a0:16:9a:
                    29:46:80:b8:a3:fa:a0:65:f7:c4:60:a9:79:2b:fe:
                    af:ac:04:c9:f9:8c:68:6d:21:b8:ef:d6:d0:da:bc:
                    29:e7:cf:65:18:7a:43:49:df:47:30:1a:ac:32:a9:
                    38:d9:c9:a1:cd:a7:bf:f0:f5:41:e2:7d:f9:82:ba:
                    f6:39:4c:74:a6:a2:ef:be:b3:b7:1d:38:2f:36:90:
                    b7:58:5d:ec:5f:79:91:5a:31:e9:f3:7c:96:29:e0:
                    28:5f:11:cb:ea:43:f3:74:2d:d1:fa:57:f5:fb:f4:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:63:0C:00:78:99:EC:30:45:D5:CC:EE:8E:7E:20:16:11:BB:BC:35
            X509v3 Authority Key Identifier:
                keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/9B2C760CD89B11EF8D75534EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.0.0/22
                  103.232.184.0/22
                  223.27.120.0/22
                IPv6:
                  2401:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:14:39:b4:f8:7a:54:ec:82:58:73:4f:d8:f6:ba:23:37:
         ef:72:6a:16:08:d8:e4:83:68:b1:c1:ac:58:1e:ad:d7:94:b4:
         25:c0:47:54:16:cf:7e:88:a3:81:27:b8:79:c4:ee:4c:b0:4a:
         3e:ca:43:1d:7f:ac:34:97:3e:da:ce:46:dc:ba:7f:45:ad:d6:
         41:d5:18:54:3b:84:89:97:80:e7:d0:93:29:bb:58:50:ef:35:
         55:1e:6e:dd:c4:a9:15:cb:e8:f2:82:a3:cc:e1:1a:df:63:f2:
         e1:a5:03:2f:90:1d:e8:c5:7c:0a:27:28:e6:7b:28:3b:7f:2b:
         d4:d6:49:6e:80:75:45:d7:45:97:cf:d0:a1:5b:8f:d2:5f:51:
         2e:ff:08:6f:c0:6f:65:32:60:5c:b8:5e:5c:79:b4:2c:d5:cf:
         ff:c9:95:c5:7c:7d:8a:ba:d2:4f:2e:bf:85:29:bc:fe:0f:0e:
         ea:ac:07:28:6b:65:2e:8f:ff:08:00:d5:3d:8d:76:21:0e:b0:
         d0:ce:ea:90:c1:b8:23:42:31:4d:29:e1:de:1e:90:9c:e6:3c:
         c6:4c:2c:cc:9f:7d:fc:2c:33:28:3d:03:ca:fa:aa:91:4a:ac:
         43:ca:db:c9:ab:63:d4:75:de:6c:90:96:d9:68:23:d0:de:ee:
         9d:eb:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:06 2026 by rpki-client