Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa
File:                     E40449BED7A011EFB0DF210CC4F9AE02.roa (raw, json)
Hash identifier:          ZL9r3LkZsZ+yKkIHYt9MrrpLX2zWgZVZa1PQWAZtU/Y=
Subject key identifier:   C9:2B:FD:9A:12:8E:90:DC:5B:C1:5E:C2:87:AD:91:FE:5D:6A:C8:FC
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       068F
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:35:56 +0000
ROA not before:           Sat 22 Nov 2025 21:43:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138685
IP address blocks:        103.44.44.0/24 maxlen: 32
                          2001:df1:6c00::/47 maxlen: 47
                          2001:df1:6c00::/48 maxlen: 48
                          2001:df1:6c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: Nov 22 21:43:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a432ac-89a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:fe:48:dd:aa:26:d0:d9:a5:7d:78:03:a4:
                    c8:6d:61:a9:98:24:3d:5f:4c:be:1a:20:3a:be:e9:
                    a7:c8:18:52:1a:35:64:a8:f6:f9:b3:57:63:63:19:
                    90:ec:bd:60:6d:35:be:0f:3f:7c:46:88:e7:60:81:
                    7d:c2:45:e7:90:a8:50:2e:e5:1b:19:6b:91:1b:0c:
                    c6:53:82:89:b4:a7:21:1f:59:a0:4e:dc:60:b8:a0:
                    af:0d:58:3e:cc:78:b5:e8:c7:9e:09:db:5c:3e:7d:
                    26:c7:8f:4b:fd:42:60:1e:08:71:ff:7a:84:30:d5:
                    a2:d0:bc:d9:cd:5a:2e:cc:74:9f:fc:f6:0d:7a:86:
                    82:69:6b:c4:89:af:ac:b3:0f:ca:e2:f4:3b:b3:01:
                    7c:1a:7e:a0:c2:9f:42:02:f4:c0:79:9f:9e:27:14:
                    93:5e:4e:24:bf:36:da:e2:39:50:93:5f:0c:7c:55:
                    57:b6:65:2a:57:ff:f3:72:08:e4:be:f2:40:02:7b:
                    04:76:8b:7a:ab:f0:62:7a:05:28:5f:ad:c0:30:79:
                    70:51:29:de:bc:da:4f:ae:a5:9f:bc:03:fe:d5:18:
                    bf:4c:1a:35:53:0f:ba:73:0c:3c:83:59:ff:b5:1a:
                    93:9e:9d:81:a6:fd:d3:11:d8:48:5d:98:92:d4:91:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:FD:9A:12:8E:90:DC:5B:C1:5E:C2:87:AD:91:FE:5D:6A:C8:FC
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.44.0/24
                IPv6:
                  2001:df1:6c00::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:0a:c2:be:9e:59:c4:b3:b0:1a:b7:a9:5b:17:41:c5:d8:
         03:7b:bf:d8:0f:dc:a0:25:94:81:b8:af:28:b5:bf:97:3c:4b:
         b1:69:6b:c0:38:79:8e:d8:48:91:01:f5:de:49:30:77:61:fe:
         2a:39:61:38:98:cb:9a:10:ab:37:ea:a9:e4:99:a9:77:01:a8:
         a2:3e:6f:26:37:e3:79:0b:a0:1d:c8:f2:52:fb:69:27:7a:7e:
         9b:2a:d7:52:0c:a2:91:8a:f2:8f:de:fc:d2:4a:c2:db:f1:9d:
         4a:ce:1a:5f:de:6a:35:fb:47:73:4b:86:f3:dd:10:05:22:d8:
         85:33:38:3a:87:a1:89:45:b4:de:cb:fb:e5:36:fc:d9:40:bb:
         e2:05:04:6c:73:1a:a0:8f:a5:ef:7d:52:89:ee:a9:b5:0c:b2:
         54:a1:f4:6a:13:07:38:d6:20:3e:b2:0d:db:84:d1:38:a8:a9:
         03:ea:ff:4c:29:39:e3:99:1a:e1:c6:55:2a:00:e3:9d:9b:ec:
         98:58:ed:15:d5:2f:0f:77:72:e1:ff:78:9b:16:d8:f9:4a:57:
         e5:5b:f9:82:60:c5:1f:49:dd:41:6b:cc:08:dd:30:d1:9f:a2:
         7f:7f:ea:18:24:23:85:f4:4b:95:4e:7c:b9:8c:10:f4:95:dd:
         5f:47:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:49 2026 by rpki-client