Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
File:                     09AA16F8DB0011ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier:          sYHIzhwxwNYZG+D1Pb7NzvPDwd4RlqPZipjIPsfJ8NY=
Subject key identifier:   5C:83:59:6E:AA:74:BC:9F:2F:DC:CB:E6:E8:CB:86:85:8D:9F:D6:0B
Certificate issuer:       /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial:       0392
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
Signing time:             Fri 13 Mar 2026 00:34:31 +0000
ROA not before:           Fri 13 Mar 2026 00:34:31 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133914
IP address blocks:        103.47.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
                          rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
        Validity
            Not Before: Mar 13 00:34:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b35b97-2e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:cf:73:fe:a9:69:c2:7a:28:d2:36:c4:70:
                    ff:b4:d6:75:cd:d3:b5:41:bc:1d:2e:2b:17:b6:67:
                    c8:82:fa:b4:f2:77:7d:8a:fa:bc:a5:ca:72:ce:e0:
                    35:ad:64:03:e0:4e:be:7e:30:ad:fd:3c:d8:ae:a4:
                    f2:ad:c0:93:c1:a9:d9:89:f2:f1:0e:31:b4:4f:f3:
                    0f:20:64:8e:e2:7b:25:6c:0b:48:75:f2:df:9d:85:
                    8d:a2:99:d4:4b:4d:19:59:c1:ad:d0:8d:f2:d1:20:
                    9f:41:de:c2:1c:b7:6e:d5:d2:d6:35:44:b0:06:c1:
                    f2:48:68:3e:f8:d6:09:60:5d:36:fa:48:c5:05:0a:
                    dd:5f:17:48:75:95:ae:c6:37:88:f6:2a:99:d7:0c:
                    c0:1c:2a:f0:7c:c2:32:f3:6f:be:d4:b6:6e:c8:8f:
                    eb:ad:26:c6:b4:aa:de:2c:10:34:d6:a6:2a:d7:a4:
                    9d:5b:b8:f0:03:cc:13:e9:82:2f:a8:43:32:91:a5:
                    cb:8b:9b:46:0a:24:86:52:21:53:95:23:b8:d3:28:
                    e4:ea:67:55:a3:76:ab:ac:66:c6:b6:40:52:2e:06:
                    74:00:36:23:a8:71:6e:2f:b1:7b:13:71:5e:53:27:
                    06:4c:d1:16:bd:b9:64:49:b3:3f:df:fb:61:07:d2:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:59:6E:AA:74:BC:9F:2F:DC:CB:E6:E8:CB:86:85:8D:9F:D6:0B
            X509v3 Authority Key Identifier:
                keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:d9:2b:fc:41:d2:5b:d7:82:20:48:0a:f8:b5:5b:07:92:
         fe:b4:43:8f:75:fd:26:a0:55:ad:7d:e0:4f:bd:2c:2a:aa:da:
         ab:38:fd:4c:61:a2:51:a8:f5:05:5e:af:b2:37:59:b2:7d:4d:
         a2:62:d5:b0:8f:5c:49:7b:35:23:ea:f5:36:e8:49:1d:72:7e:
         bd:92:cc:8b:48:0d:cd:6e:6f:1f:04:db:27:bb:22:39:88:af:
         e8:34:b5:eb:c5:0f:16:56:ce:6f:d0:0e:c9:39:d6:5b:6e:fd:
         e4:34:77:7c:b0:e8:36:16:f9:68:15:80:0e:7d:3b:17:93:bd:
         07:ef:f1:ab:d3:dd:c3:ac:6f:26:9b:4e:f0:cf:3b:05:ac:70:
         81:e8:66:35:3e:a1:69:40:c0:6e:d5:4d:a4:02:fb:42:32:d7:
         55:29:81:3d:31:9c:08:d7:02:fc:b1:76:0d:2f:fe:ec:75:75:
         29:d8:00:f5:0e:1b:c3:36:31:78:38:95:0c:f6:d5:70:00:ba:
         90:5c:24:e0:22:df:64:d5:01:76:df:a8:68:0a:a6:7f:41:6f:
         88:ff:c2:85:4d:39:92:13:2a:91:bb:a1:4a:79:b0:28:95:31:
         60:1e:38:b8:27:e2:fd:b6:11:6a:c5:49:cb:31:f5:0f:cc:58:
         f4:96:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:20 2026 by rpki-client