Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa
File:                     373ADDFC1CC411EF90865B7DC4F9AE02.roa (raw, json)
Hash identifier:          BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=
Subject key identifier:   11:AD:44:7F:C0:60:E6:D1:F9:1F:A4:3D:E7:8C:D5:37:C0:16:8C:90
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       1044
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:27:10 +0000
ROA not before:           Thu 04 Dec 2025 17:18:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45447
IP address blocks:        103.131.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4164 (0x1044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Dec  4 17:18:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a468dd-ba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:80:62:5c:69:84:a9:94:41:e0:a7:f9:fb:
                    0f:f4:d4:71:7a:d4:6c:3a:32:26:f3:5f:51:a8:04:
                    f5:38:15:75:24:ca:48:0c:bb:80:b8:45:af:02:2f:
                    43:ce:a8:ec:c4:4b:3a:01:e2:7e:a8:fe:d2:c6:a7:
                    95:6d:e2:f1:f2:ef:41:78:56:f7:84:25:74:01:07:
                    85:a8:ea:13:36:83:85:fe:d3:eb:08:4e:76:d6:40:
                    5c:2e:07:18:14:c4:52:2d:44:79:c7:76:82:f4:ad:
                    b6:13:b5:e3:6c:6d:c2:42:50:8b:5a:aa:30:1c:5e:
                    4f:ac:8a:25:55:46:e2:39:76:df:9f:70:9e:78:77:
                    56:64:bd:dc:cc:94:94:57:c0:6f:0a:c3:63:22:7a:
                    a7:2b:ae:84:5b:ab:3a:0a:07:c5:31:cf:a4:89:01:
                    b9:1c:a9:91:60:cd:3f:88:50:83:f2:54:74:bf:99:
                    0c:95:50:e9:a4:9c:c5:0a:47:74:e3:2f:64:dd:30:
                    cc:fe:58:a6:cb:d0:4c:72:1e:90:6b:50:7c:30:c8:
                    db:cf:07:5f:9d:c8:11:e1:82:ed:c7:39:67:d3:cf:
                    4e:23:f3:86:2e:ee:64:e6:3a:6f:58:ca:e5:84:80:
                    1e:c8:f6:36:f9:27:ea:14:d5:99:3d:76:2b:02:3b:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:44:7F:C0:60:E6:D1:F9:1F:A4:3D:E7:8C:D5:37:C0:16:8C:90
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:6d:c6:4f:10:0e:30:71:3a:a4:9f:ce:27:d3:32:24:4c:
         51:46:6e:ed:db:b8:09:d2:1a:29:e0:87:c9:cc:11:f8:f4:11:
         60:8d:da:0d:e2:49:0f:42:23:a4:ab:34:5f:8a:45:bb:4a:18:
         f5:4b:1e:2b:43:27:5d:ef:74:7e:31:06:d9:fd:45:a5:ea:49:
         26:a6:8a:1f:f1:20:21:d3:b7:4a:73:ef:55:96:d3:63:1c:ba:
         9c:2d:04:1f:df:2d:4a:2b:b0:cd:18:7b:1b:5e:60:ae:ef:ad:
         ae:0f:90:8f:0d:7c:d6:ee:cb:f6:51:47:58:e0:23:1c:cf:19:
         cd:8f:d6:03:b0:4e:c2:8f:4e:3d:11:98:e9:6e:78:aa:53:f4:
         92:77:30:05:c4:06:cf:7a:0f:83:0f:1a:d5:22:07:c0:23:06:
         82:24:19:36:a4:b5:7f:6e:ee:f4:7e:57:73:fb:72:12:cf:0c:
         5f:07:62:62:11:c0:9e:be:87:00:a1:34:32:0a:35:5e:5f:75:
         7f:dc:08:ed:84:74:f1:cd:bc:32:95:4c:e3:11:65:41:72:ef:
         b3:4a:7a:4f:e4:64:b4:dc:a3:fb:39:1c:98:fb:0c:cd:4d:61:
         b9:21:15:c8:4f:c4:3e:55:97:6f:21:f1:04:d2:9e:48:dd:86:
         11:62:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:51 2026 by rpki-client