Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa
File:                     C73BE8A654F311E7AC64ED3AC4F9AE02.roa (raw, json)
Hash identifier:          X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=
Subject key identifier:   63:A8:57:AE:0A:C5:B1:98:DE:92:B9:5C:9F:13:0D:9A:CC:29:3E:3D
Certificate issuer:       /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial:       23EB
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:39:33 +0000
ROA not before:           Sun 24 Aug 2025 15:53:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58629
IP address blocks:        103.12.72.0/22 maxlen: 24
                          2001:df0:2c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
                          rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9195 (0x23eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
        Validity
            Not Before: Aug 24 15:53:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a44195-1a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:32:60:40:bf:74:c0:e5:46:f4:6c:80:fd:
                    91:70:47:17:38:3c:c9:4f:90:a6:b3:bc:83:a0:a8:
                    bb:cd:f7:7a:8a:10:7c:8f:d4:b4:5d:2e:a0:0e:d3:
                    9b:50:22:bc:62:da:b5:c4:3e:75:f5:e2:ea:08:5a:
                    0b:7e:a7:0e:3a:c1:a7:9c:80:8e:f6:25:db:85:32:
                    8d:a8:72:c7:d8:36:52:48:5e:b4:7b:fb:dc:b6:5c:
                    f8:b8:12:cb:dd:cd:76:40:4d:f8:92:fd:12:47:da:
                    8c:e1:eb:88:aa:d9:ed:f1:2a:33:05:80:d1:35:27:
                    90:39:cb:00:c5:08:1a:cb:27:21:26:ff:8f:e4:1e:
                    18:74:5a:26:3a:43:52:a8:9a:67:9f:6a:27:3d:06:
                    67:7f:64:2c:ee:5c:a6:2a:3a:c7:21:6a:a6:5c:ae:
                    81:ce:84:45:a6:c5:01:96:92:0f:a5:28:33:f0:99:
                    0c:f1:1a:0b:64:5f:2b:b6:09:ce:52:9d:52:22:59:
                    d7:10:47:5d:ff:f9:4a:ff:b3:2b:90:26:b3:c4:b2:
                    4e:57:a7:b7:62:49:e5:ab:45:8b:f1:78:93:c2:7c:
                    3d:1a:1c:40:d7:08:d5:b5:b5:68:a9:7c:d3:6e:33:
                    96:f1:53:ab:e4:c7:00:96:e6:55:51:fb:2a:6e:d5:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:57:AE:0A:C5:B1:98:DE:92:B9:5C:9F:13:0D:9A:CC:29:3E:3D
            X509v3 Authority Key Identifier:
                keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.72.0/22
                IPv6:
                  2001:df0:2c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:99:63:ad:5b:de:26:a3:55:77:40:5e:7d:2e:06:97:14:ee:
         7a:9b:25:d6:1f:55:2e:9a:25:68:ea:e8:39:76:be:b5:0b:22:
         f6:a6:1a:05:fc:c7:5c:03:93:d2:e9:35:ca:09:d5:16:c0:89:
         31:0d:cf:16:4f:4c:42:5c:40:c4:21:51:ef:34:a4:29:2c:ac:
         b8:01:4d:20:0f:9d:75:05:20:e4:a6:32:da:16:4d:88:b4:a7:
         2f:41:5f:10:aa:61:08:cd:12:a4:de:c3:d6:68:80:93:5a:95:
         39:93:49:ce:3d:f2:7a:91:36:38:d5:08:94:e9:16:6f:22:e8:
         ea:f1:74:94:9e:83:61:a0:44:63:ee:0b:a7:f5:0f:e1:d9:5e:
         9a:42:a0:a3:59:4d:49:a8:32:d6:18:43:11:75:93:9c:7d:0d:
         d2:2c:bd:7f:76:59:2b:dd:79:7e:f7:8b:f5:66:e4:6f:65:58:
         60:ac:7b:e9:be:20:07:2c:a8:eb:90:f1:72:c6:14:8a:f0:04:
         9f:51:7d:76:87:5f:62:78:8f:7d:4d:8a:b7:6e:72:d7:5b:53:
         16:a1:b9:6b:a7:97:ce:75:f3:5e:27:06:d5:2d:fb:a6:1d:32:
         ae:c8:b9:b5:48:65:df:79:f4:a5:a0:4f:c8:40:39:2e:1e:de:
         8c:b8:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:50 2026 by rpki-client