Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/C41538940B4711EC99840631C4F9AE02.roa
File:                     C41538940B4711EC99840631C4F9AE02.roa (raw, json)
Hash identifier:          V6JHUzOLGDXoFaxiTUAua6l+IvXzjhCqWaQC1lRJApU=
Subject key identifier:   20:F6:96:E9:E6:B3:37:F4:A6:24:CD:E1:52:49:40:70:CC:6E:36:89
Certificate issuer:       /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Certificate serial:       05E2
Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/C41538940B4711EC99840631C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:53:47 +0000
ROA not before:           Thu 04 Sep 2025 23:35:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142600
IP address blocks:        103.170.174.0/23 maxlen: 24
                          2001:df7:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
                          rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
        Validity
            Not Before: Sep  4 23:35:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40cab-ad8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:0d:85:42:f6:94:30:a7:ef:93:37:eb:a8:
                    cf:de:3b:dc:77:b6:82:03:09:b9:cc:18:46:ca:14:
                    d1:d5:5f:d5:25:a2:ff:7c:aa:f6:1b:11:9d:49:fe:
                    ed:0e:48:29:54:8b:d7:8d:4b:1f:45:9d:c3:f7:d3:
                    86:5d:e0:5b:ed:31:dd:d4:c0:ca:ef:d7:45:a1:25:
                    3d:19:39:76:6f:f1:6f:70:87:67:71:eb:aa:64:88:
                    ec:13:2e:13:ec:c2:40:68:3d:34:e7:e1:8b:14:a8:
                    46:c4:73:46:72:07:35:70:7f:38:93:42:a9:99:a5:
                    7f:32:08:d6:78:10:5c:cc:18:6f:7f:87:23:32:23:
                    aa:4d:24:bb:c5:12:22:8a:bc:c7:33:2b:2f:60:a4:
                    4e:ac:51:74:44:83:4a:83:ec:78:6f:12:57:38:e3:
                    ea:15:4a:88:8f:be:aa:c3:de:54:84:a0:6e:33:37:
                    9a:bb:40:dd:ed:9e:51:1a:5d:99:35:d7:71:b4:4e:
                    8d:2d:76:34:e2:bf:e2:9a:3c:1c:81:13:c7:70:3d:
                    ca:78:e0:be:e0:b6:56:7a:50:dc:23:ef:82:54:cd:
                    36:34:cd:39:e4:84:cd:20:52:46:b8:cf:b7:d5:d0:
                    bc:60:da:e6:b6:2f:27:d7:d6:c9:eb:56:29:32:e8:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:96:E9:E6:B3:37:F4:A6:24:CD:E1:52:49:40:70:CC:6E:36:89
            X509v3 Authority Key Identifier:
                keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/C41538940B4711EC99840631C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.174.0/23
                IPv6:
                  2001:df7:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:42:58:76:0b:2e:f1:17:29:2d:25:f5:04:67:f6:51:da:84:
         68:4d:26:a2:ad:ba:ac:2a:cc:75:7f:8f:12:54:fb:71:e8:7e:
         c4:ce:c4:82:8b:f0:72:79:89:74:15:63:f2:be:e3:b5:f9:1d:
         6b:65:74:7c:2e:f0:96:e6:13:25:f3:68:2b:36:49:1c:7b:94:
         0e:29:25:be:3a:8a:d9:ec:43:3e:1a:5c:82:3f:1a:8b:cc:96:
         fb:cc:e4:4f:4c:8b:e1:5b:ef:52:7e:02:b3:bf:ee:27:7c:ee:
         c2:12:32:f0:05:58:e8:34:f0:b8:11:0e:68:8c:06:f5:d2:60:
         5e:cb:d0:aa:bc:fc:73:63:06:95:5f:44:8f:cf:dc:b2:25:04:
         fe:14:5e:c3:cf:40:9f:0c:ca:c5:b9:18:12:51:a2:ee:af:c9:
         9f:bf:11:e6:90:77:7e:ee:dd:7a:00:59:09:fb:6c:5f:cc:2b:
         93:1a:af:db:49:60:9d:c2:26:eb:be:4d:75:8f:4e:06:8b:9a:
         13:6f:97:68:f4:54:72:4b:40:5f:1b:ba:27:1c:4a:bd:10:5b:
         f9:10:af:30:7c:54:18:c4:a9:fe:02:0e:55:c2:c0:82:22:18:
         92:2c:25:14:5e:06:72:c3:01:cc:b5:93:9c:52:cf:c8:6a:73:
         33:72:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:41 2026 by rpki-client