Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/B7F0310EBCB911F08FEDBF33C4F9AE02.roa
File:                     B7F0310EBCB911F08FEDBF33C4F9AE02.roa (raw, json)
Hash identifier:          AnWWiSu/AyXW3zWoSGDHg33nSWzvyHM237MaOeK3Yfs=
Subject key identifier:   82:7A:8E:4F:76:20:BC:31:44:60:C2:32:97:DA:08:CD:6E:11:A6:56
Certificate issuer:       /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial:       0B9D
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/B7F0310EBCB911F08FEDBF33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:03 +0000
ROA not before:           Wed 10 Dec 2025 18:42:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139793
IP address blocks:        103.145.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
                          rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
        Validity
            Not Before: Dec 10 18:42:12 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47dee-6f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:a1:5c:5f:15:a0:66:48:c7:3f:ab:33:65:
                    9c:a8:af:49:f4:92:84:13:74:55:c0:4a:b1:55:ca:
                    90:32:65:7f:b1:8e:a3:58:54:6b:e8:f8:a4:72:1c:
                    1e:0b:40:4e:54:53:bb:e7:7a:e4:26:65:67:c5:0b:
                    46:78:6c:57:b2:13:6f:3e:1d:d7:9e:f6:55:35:fc:
                    c5:f0:a1:07:ff:62:ef:03:6e:02:42:ac:43:33:df:
                    2b:64:85:cc:1c:6a:44:fe:9c:26:71:b3:a0:54:1c:
                    40:cb:e7:2e:98:26:9b:7f:67:12:6c:ec:f7:b9:9f:
                    6b:9d:4a:b5:9e:69:d9:83:b8:6e:bf:75:65:6c:5b:
                    12:2c:3f:ce:ed:e0:c2:1a:b2:b1:e9:9e:d3:e0:38:
                    6d:fe:8a:d1:91:ce:06:73:b5:5e:88:a0:6a:31:4e:
                    76:07:3f:17:be:a5:d2:15:40:6f:e6:f2:48:c7:16:
                    f8:58:98:e1:79:4b:12:97:4e:03:9e:2f:da:3e:8d:
                    65:6d:6e:91:b3:aa:52:7e:d9:f6:da:7b:ed:73:59:
                    2f:99:06:26:d4:3b:e7:0e:8d:2c:c0:e9:cd:d9:3d:
                    e4:20:16:03:ae:38:a4:1b:e6:c2:86:ce:27:97:b0:
                    ba:51:ce:dd:68:00:67:9e:3d:62:29:6a:b6:21:6a:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:8E:4F:76:20:BC:31:44:60:C2:32:97:DA:08:CD:6E:11:A6:56
            X509v3 Authority Key Identifier:
                keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/B7F0310EBCB911F08FEDBF33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:65:fe:4f:c6:f1:30:6c:c8:b5:f7:ce:0d:80:d0:5a:3a:
         cc:7f:f4:05:00:0b:75:0d:d7:3a:22:70:34:dd:e8:2b:b4:06:
         3e:e6:b6:fb:1e:73:dd:29:ea:91:80:7f:07:b5:1c:1c:af:61:
         46:ba:f5:4d:bb:ae:e6:97:be:6c:20:31:ad:24:6e:ee:11:0d:
         8e:80:22:be:0b:94:76:ca:25:fb:02:46:74:1e:be:3d:18:77:
         ae:d7:1f:46:70:59:80:ad:16:46:e9:c8:ce:27:b3:fc:0d:b3:
         a2:d6:ff:a2:7f:b9:bd:70:2b:ac:a2:14:79:e3:d6:88:c0:c0:
         58:46:8f:bd:4a:0a:e7:97:0e:02:d1:69:e2:6e:82:4d:bd:62:
         85:b5:cb:4a:b9:c3:b0:5c:6a:96:bf:56:a4:78:a1:2d:60:c4:
         ec:2c:97:4e:6c:de:e3:86:67:eb:46:f5:83:ec:05:7e:35:2b:
         03:6e:09:9f:97:a1:91:ab:ad:fc:cd:df:9d:70:b3:04:53:9d:
         08:e7:1f:79:2b:b2:4e:59:eb:b7:b5:21:65:71:e4:b7:ba:d1:
         63:24:f1:9e:b9:c5:40:1a:fb:16:e7:ea:ee:d2:6e:56:c1:b3:
         be:fb:69:7c:90:47:92:86:1c:aa:e2:8a:d8:cd:27:b6:e0:2e:
         b7:5e:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:00 2026 by rpki-client