Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa
File:                     9839F630765111EDA744AE3AC4F9AE02.roa (raw, json)
Hash identifier:          FSZHvt0li5V9PrWONUmCstAsGBd4ZV8qfRlket+oLrw=
Subject key identifier:   43:75:B9:A4:98:30:B8:73:34:08:FE:9D:1C:D8:77:E3:D9:23:5D:23
Certificate issuer:       /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial:       0875
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:59:45 +0000
ROA not before:           Sun 20 Jul 2025 18:58:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139294
IP address blocks:        103.140.234.0/23 maxlen: 23
                          103.140.234.0/24 maxlen: 24
                          103.140.235.0/24 maxlen: 24
                          2001:df0:da80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Validity
            Not Before: Jul 20 18:58:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48ca0-0fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:fd:53:61:00:58:2c:55:ce:27:e6:b8:9d:
                    ec:78:36:10:3d:d5:99:81:c7:ea:a0:45:61:b3:2e:
                    94:2d:b5:84:9e:52:a5:fd:81:d5:c5:60:6b:c5:43:
                    18:c5:d7:74:b0:9e:e7:b6:94:d6:96:1f:99:09:6b:
                    b3:56:d9:c4:6f:a3:84:cf:a6:42:a6:ca:af:0f:9f:
                    eb:5d:b4:b9:15:c5:03:d8:05:3c:1c:dc:21:b0:9c:
                    13:ad:98:f5:2f:3a:d9:3e:17:5b:2b:62:01:e2:30:
                    b4:6e:71:70:d9:65:cd:db:a2:72:59:3e:2f:5d:b8:
                    38:79:3e:fb:69:2b:e3:54:35:f5:13:a9:cb:5a:9b:
                    c9:77:c0:3b:dc:fe:5c:3d:89:dc:e4:77:b4:c5:5b:
                    3a:6c:da:de:64:c4:56:32:28:d2:ed:cf:c5:f0:ed:
                    3d:03:31:59:ae:7c:2f:0a:9b:1e:5b:28:76:cc:d6:
                    05:96:27:b3:1b:48:2c:ed:96:d3:ef:48:c6:d1:b2:
                    b5:39:d5:67:b2:5e:1d:47:06:d0:26:3a:e9:51:16:
                    fa:36:51:f5:c9:4a:14:da:84:97:4c:4e:76:63:96:
                    99:46:8c:d0:24:e5:ba:6b:d3:af:e7:4b:4f:48:4b:
                    9d:71:22:78:82:bc:27:29:e0:fd:c5:3a:a6:49:06:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:75:B9:A4:98:30:B8:73:34:08:FE:9D:1C:D8:77:E3:D9:23:5D:23
            X509v3 Authority Key Identifier:
                keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.234.0/23
                IPv6:
                  2001:df0:da80::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:d3:25:47:81:8d:37:36:28:28:20:43:69:7f:90:51:48:
         4f:d5:ca:2e:38:c9:89:bf:4c:cd:d9:3e:36:54:85:91:c6:a0:
         0f:e8:3c:1d:ab:7f:ff:7e:cc:4b:58:0d:13:00:ac:32:4a:64:
         90:1a:3f:94:ed:d4:b3:c8:a1:4a:cd:5f:27:6b:bb:aa:16:79:
         36:81:d5:4d:f7:98:57:03:f5:6b:c9:11:95:70:7c:ba:2d:99:
         ef:98:2f:41:54:0f:13:d2:36:b9:46:ab:c8:6e:72:64:3c:4f:
         39:5a:1d:5b:ab:64:22:69:1b:25:eb:e9:af:0d:27:69:1f:8f:
         0e:30:4f:9e:e9:42:fb:37:6f:7f:2e:37:8a:5e:12:42:52:16:
         a1:cf:f3:59:74:65:ed:8e:dd:73:ac:3e:61:2e:73:ab:00:78:
         e3:45:6f:0c:79:e1:bd:31:1a:b8:a3:b1:2a:b7:f9:ba:2f:31:
         fb:7f:d7:9e:2d:9f:59:da:ac:2d:02:7e:43:bd:88:fd:a7:89:
         2f:eb:e7:ed:da:38:28:22:39:23:b0:4f:4d:a8:a0:5d:47:22:
         df:a0:8e:23:da:77:00:5d:9f:be:39:0a:0c:0a:52:b8:05:01:
         6c:b0:1f:58:b7:cb:75:e8:d5:d0:ba:b8:cd:45:6f:4e:60:c2:
         9e:e8:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:33 2026 by rpki-client