Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa
File:                     1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (raw, json)
Hash identifier:          wiBw1Q4j5CS0vrUgcJpbPls3Qv93cguUP6O6djdQ/yY=
Subject key identifier:   66:DC:B9:93:3E:53:C3:A2:4D:11:E4:21:42:11:5D:E6:DE:E9:28:68
Certificate issuer:       /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial:       07FD
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:39:33 +0000
ROA not before:           Mon 28 Jul 2025 22:02:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133533
IP address blocks:        103.125.186.0/24 maxlen: 24
                          103.233.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
                          rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045 (0x7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
        Validity
            Not Before: Jul 28 22:02:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40955-8a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:d5:01:ef:57:0a:9a:50:2c:e4:40:1e:3a:
                    d5:e6:c5:20:b8:ba:19:39:99:fb:1a:92:f1:02:c9:
                    98:32:05:fa:ec:30:03:87:05:2a:e8:4c:72:84:19:
                    55:2d:8d:e1:e2:8f:9a:bc:e4:f6:68:9c:51:f4:b7:
                    bb:32:6b:61:75:46:0f:47:ad:39:c6:e3:b0:9d:73:
                    27:16:53:f9:03:e5:bd:3d:d0:ca:c4:78:25:30:7e:
                    96:22:be:1e:76:35:65:22:ef:b0:d6:57:c3:49:e8:
                    34:9c:c7:d5:8d:a0:04:9d:2b:6a:c2:21:20:d7:8c:
                    e6:aa:22:a2:16:5a:0e:47:5c:d8:3a:e0:3b:06:16:
                    93:46:80:60:24:b7:f7:91:de:bc:3a:77:f6:25:1a:
                    a1:4b:52:b7:89:dc:3b:af:12:47:aa:27:ca:bb:f1:
                    18:d3:a6:ae:4b:5a:b9:fa:04:ba:30:bd:16:08:ca:
                    57:e9:54:b6:62:55:01:71:99:2b:71:62:65:3f:9d:
                    4f:0a:28:9c:a6:2e:a3:15:df:08:21:8f:fb:85:c9:
                    a1:05:50:25:d0:7a:df:4b:c8:76:8b:d2:57:b9:d6:
                    f6:a1:f9:79:e2:54:de:ec:0a:76:75:30:3a:49:75:
                    03:bb:35:4d:db:0d:97:7d:a6:3e:b9:78:b5:51:3d:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:B9:93:3E:53:C3:A2:4D:11:E4:21:42:11:5D:E6:DE:E9:28:68
            X509v3 Authority Key Identifier:
                keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.186.0/24
                  103.233.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:83:57:e8:e9:7e:67:99:18:1f:51:70:7d:85:e8:31:58:
         76:be:8d:ef:5b:a6:04:aa:88:e8:06:bb:04:32:66:c6:07:98:
         32:10:fa:37:88:5a:54:c0:d0:e5:7e:9d:94:d6:35:33:5b:0f:
         ff:9b:e5:35:c3:b9:da:a2:0d:4e:2b:1b:7c:62:af:c2:a4:88:
         63:7e:c1:19:0a:61:32:1e:8b:d6:7f:29:34:14:22:a5:57:16:
         04:98:04:96:a4:06:0c:64:be:f3:71:69:48:5a:8e:58:06:fd:
         5d:19:1f:7b:64:2d:2c:64:df:2d:08:96:61:68:3a:2d:4a:72:
         27:9a:32:6c:6a:2f:bb:e8:cb:ca:cb:5f:69:99:b5:67:69:f1:
         49:f3:e6:83:a5:b7:35:50:99:96:0d:26:d9:8f:a4:4b:97:4d:
         fe:c0:99:29:0b:43:ea:f6:0c:0a:75:18:06:ac:d6:7d:e9:29:
         ad:e4:1f:cb:3f:96:7e:44:3a:4e:91:18:80:9f:ee:cb:27:b8:
         a3:ed:b9:71:5a:43:27:1b:30:7f:58:0c:61:62:cf:5f:82:37:
         32:d8:10:5d:b5:df:5d:f0:e5:93:9d:d1:ff:14:a1:e0:e9:bc:
         22:40:49:16:e3:ac:c1:c6:fe:c7:82:27:76:f4:c8:bd:58:12:
         68:83:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:16 2026 by rpki-client