Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa
File:                     3102D984C7A511F0AB2B8524C4F9AE02.roa (raw, json)
Hash identifier:          Tul75lPWRtkLUQpE4kJeQR++0ieheSLP1KNAU3JiUWA=
Subject key identifier:   59:A0:19:1F:ED:89:73:7D:B1:42:33:1E:74:9D:FB:C5:00:87:0A:29
Certificate issuer:       /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial:       3B
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:04:30 +0000
ROA not before:           Sat 22 Nov 2025 13:14:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     13213
IP address blocks:        103.175.128.0/24 maxlen: 24
                          103.175.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
                          rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
        Validity
            Not Before: Nov 22 13:14:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d6ee-3b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:b9:6b:c5:9f:95:b4:6e:5a:47:a1:fc:6b:
                    1f:2f:89:0b:57:31:24:b1:c8:74:82:a7:71:3f:d5:
                    20:96:82:de:63:ab:e3:11:a0:52:1b:30:ee:83:37:
                    9f:43:55:43:62:ae:18:cd:10:e0:16:ed:9a:9c:fc:
                    d0:cb:38:15:73:ed:78:1a:6c:9c:43:94:02:4d:e0:
                    c9:a4:bb:1a:ba:6d:f2:1c:b2:70:c3:39:1c:f1:93:
                    12:06:17:65:68:a0:d3:2b:78:fb:eb:90:7e:cb:c5:
                    4a:9f:cb:9a:9d:51:f8:5a:d1:08:05:cf:59:3d:b5:
                    31:7c:bc:e7:b4:5e:11:58:31:c4:3e:9b:98:c8:7e:
                    b7:eb:d4:26:37:d6:ff:b5:8a:39:ee:25:3a:dd:9e:
                    7b:e1:75:3b:00:7a:74:dd:da:ba:25:cf:97:4d:ea:
                    9c:63:9f:b8:d5:81:94:43:0e:b9:8e:06:8e:03:3e:
                    fd:65:d7:71:3e:a8:b6:1e:ea:42:59:99:13:f8:a2:
                    2d:1a:a7:b5:54:78:1c:be:99:4f:45:00:37:e0:8b:
                    49:f1:eb:9f:2f:73:16:f3:7e:5a:54:cb:08:e0:5b:
                    54:db:0b:d5:87:ec:55:48:10:94:fd:59:c4:d3:35:
                    69:8a:16:81:7f:d1:62:7e:62:c8:92:34:b7:26:05:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:19:1F:ED:89:73:7D:B1:42:33:1E:74:9D:FB:C5:00:87:0A:29
            X509v3 Authority Key Identifier:
                keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:f7:7a:5d:78:e7:48:dc:33:70:8c:46:79:32:21:56:27:
         c6:83:36:e1:05:97:0d:12:ce:30:a3:7e:33:9c:c2:46:1a:3f:
         4e:26:eb:68:dc:5a:ff:75:20:00:5b:16:5d:da:11:76:03:13:
         db:a0:84:a2:a7:4b:18:c6:a5:b2:ea:a5:ee:dc:07:69:d8:41:
         02:37:03:33:94:7f:5e:50:ba:f4:53:3d:2c:1c:0d:2d:32:70:
         59:08:bd:ca:c4:06:dc:59:7b:4e:5a:0d:15:69:69:8e:74:50:
         a8:6d:0e:e2:c8:d1:80:b7:50:db:f7:69:b4:8d:a4:94:27:b7:
         03:62:c8:cf:49:e0:f8:ef:31:ef:f3:a4:9b:a2:85:1f:fb:94:
         12:e5:1c:c8:ad:77:2e:7d:0c:14:50:a3:8d:73:a6:68:ac:e4:
         d2:b8:b4:df:ba:f4:9d:89:e0:ea:97:3a:d5:42:04:61:84:c8:
         86:3c:cb:8c:6f:51:be:c6:2f:0c:11:ed:a6:67:87:d8:d3:6d:
         c2:9d:06:c0:4b:55:da:6a:e2:8d:49:66:3b:51:d6:f4:7b:00:
         3c:10:80:bb:c9:43:79:aa:a5:4d:5e:5a:81:b8:5c:cd:93:0b:
         ec:90:a9:03:0e:ed:6e:96:3d:5f:ad:cf:45:75:29:95:7d:16:
         7e:52:af:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:04 2026 by rpki-client