Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/7036FFF00E9611EF8B4CB827C4F9AE02.roa
File:                     7036FFF00E9611EF8B4CB827C4F9AE02.roa (raw, json)
Hash identifier:          UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=
Subject key identifier:   08:9E:0E:7A:B1:5A:CE:75:4E:3E:AD:AF:35:B4:17:44:B1:5C:A7:3C
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       0162
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/7036FFF00E9611EF8B4CB827C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:26:42 +0000
ROA not before:           Thu 19 Jun 2025 05:24:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152735
IP address blocks:        103.142.152.0/24 maxlen: 24
                          2001:def:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: Jun 19 05:24:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59012-190e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:bf:d3:03:f3:b8:ad:2c:c2:30:ea:5a:ec:
                    4b:67:89:98:39:c2:dd:45:ba:33:8b:21:b3:01:e9:
                    42:8b:d7:0c:de:57:da:9b:40:c7:79:73:15:fc:3a:
                    5a:c3:bb:48:32:69:7a:79:30:3d:05:b5:e5:59:fd:
                    3a:4c:6c:48:59:18:27:bd:e8:21:27:8f:d4:5c:ef:
                    60:fe:a0:7c:de:62:0e:36:e5:7d:9b:ed:1e:12:34:
                    81:b7:56:e3:16:f2:23:c3:d6:4f:23:4d:f8:6e:4e:
                    80:15:88:55:5d:91:fc:12:1a:2b:1f:e6:d0:c6:39:
                    18:65:cb:7b:ce:b0:61:7c:7d:93:50:9d:3a:e2:65:
                    30:db:e7:d6:bb:fa:c2:54:db:bd:b8:83:39:71:63:
                    e4:8f:b1:cd:af:4c:4e:e6:6a:21:a4:a5:0a:a4:3f:
                    ff:0f:50:52:d0:c1:92:fc:d5:c7:64:84:2d:16:3e:
                    4c:2c:32:54:36:5c:93:d2:00:4f:70:06:9b:03:5d:
                    74:eb:a7:7e:4e:3b:75:75:60:67:99:d5:14:0f:64:
                    31:3b:65:13:60:0b:ec:1c:2a:ac:e7:57:7c:3e:e2:
                    41:d2:a3:c3:cd:33:d4:c2:aa:02:e1:bd:fd:6f:7e:
                    30:d5:51:1b:c9:df:ea:2a:3f:dd:78:a7:87:f0:fb:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9E:0E:7A:B1:5A:CE:75:4E:3E:AD:AF:35:B4:17:44:B1:5C:A7:3C
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/7036FFF00E9611EF8B4CB827C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.152.0/24
                IPv6:
                  2001:def:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:8f:b0:57:34:06:34:15:dd:49:b5:d9:42:41:48:73:36:
         5a:bc:d0:f8:cd:8c:15:f6:b4:e9:2c:af:3f:85:18:36:96:f6:
         46:d0:ec:5b:a9:bb:29:02:f2:3f:3a:8b:30:74:55:59:f4:d5:
         bd:d9:38:a9:f4:e5:3a:98:ae:22:e3:87:29:73:40:a5:3b:fe:
         f5:ca:05:5f:76:1e:df:60:13:9e:97:f9:67:7a:49:6f:9e:69:
         e9:ee:4c:73:5a:50:e1:dd:f3:6f:fd:17:56:3b:84:75:0b:5b:
         b5:24:9b:a6:80:73:ff:10:40:0b:70:78:0b:84:bb:a2:94:d7:
         f7:49:45:03:ce:44:3b:e6:2b:86:e9:23:a3:36:05:1f:48:b8:
         d5:23:5d:1d:25:61:9d:0e:ef:22:41:36:6e:a2:1e:e4:be:63:
         14:1b:68:97:1a:36:3d:e6:5b:65:2a:37:e9:fe:25:62:05:27:
         95:1e:cc:cc:48:5d:e3:e0:08:92:2a:ff:42:d8:80:15:90:a1:
         f7:13:3e:82:48:23:52:05:a6:82:d2:66:6d:c6:c8:37:76:85:
         30:44:76:64:e4:1b:42:bd:8b:be:b0:39:0e:c7:06:05:e1:1c:
         26:81:a7:65:ad:27:cc:95:16:0a:c2:b5:79:eb:88:d4:26:fe:
         75:4d:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:12 2026 by rpki-client