Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
File:                     8F8C10F021B511F192BB9899183D8C67.roa (raw, json)
Hash identifier:          0xuvjyrkoEqy2zxPFo6OwWWnDEpntu6AcHZQ20nczcs=
Subject key identifier:   DB:01:79:2F:37:1A:93:EC:86:F9:E4:41:3A:3D:2E:C4:CA:9D:0A:E7
Certificate issuer:       /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial:       49
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
Signing time:             Tue 17 Mar 2026 03:58:31 +0000
ROA not before:           Tue 17 Mar 2026 03:58:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138941
IP address blocks:        103.137.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
                          rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
        Validity
            Not Before: Mar 17 03:58:31 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69b8d166-74a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:e5:ef:96:2a:ff:ee:f8:8d:d0:a7:5f:cb:
                    ff:b9:f3:10:5e:90:c7:bf:3d:9a:de:81:d8:6b:fd:
                    47:ca:aa:ab:e1:aa:3e:a5:f0:75:aa:74:aa:20:34:
                    f0:75:53:01:a1:3c:21:e5:e0:ed:6c:a6:df:f9:f0:
                    95:c7:36:e2:2d:bb:cd:8f:26:7b:b4:6c:6f:8f:72:
                    00:c5:14:3b:07:d0:bd:33:24:30:55:55:6a:e0:d0:
                    08:98:e4:6f:1b:9a:88:68:09:47:dc:d6:6a:db:25:
                    d3:a0:2c:e5:d9:3e:0d:6e:c3:73:f7:49:e1:73:9f:
                    2c:0c:7c:c2:56:02:ff:46:cd:11:ef:e8:25:d6:af:
                    ce:c4:37:e4:10:73:8d:bb:4f:15:d4:b2:59:24:52:
                    d0:2d:5f:c4:5c:d2:35:b3:81:a9:89:0d:fb:fd:01:
                    6d:33:97:d8:fd:70:53:a6:5b:a7:28:e0:d3:ed:49:
                    89:c4:8f:20:19:90:03:48:48:87:40:52:04:25:64:
                    c8:65:c8:bf:03:5d:4a:05:e2:3f:9b:42:bf:83:f4:
                    04:32:e3:b1:86:4e:bf:ba:fe:97:75:9a:6f:4d:b0:
                    51:d9:70:1d:64:96:d6:2f:65:0a:08:ac:18:c3:14:
                    b4:a3:c0:71:f5:ff:65:75:56:7c:a0:c2:02:13:36:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:79:2F:37:1A:93:EC:86:F9:E4:41:3A:3D:2E:C4:CA:9D:0A:E7
            X509v3 Authority Key Identifier:
                keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c7:a2:6f:01:4e:db:20:fe:ea:11:e7:75:b1:bc:de:a0:07:
         80:55:b4:a8:0c:ec:88:d2:ac:6a:7b:57:40:9f:b5:e9:7f:e6:
         5c:9b:ff:78:75:26:5b:ef:db:8e:c3:06:de:f3:32:f9:da:29:
         49:9f:27:e9:ec:22:8f:25:23:90:4b:5c:15:6d:4c:1a:ad:b0:
         84:7c:6a:f2:2f:a4:d4:54:a6:70:f6:99:76:9b:98:e9:35:53:
         fb:31:34:b3:a9:50:46:da:f5:01:0d:ec:5b:cb:b6:32:3d:9b:
         2c:40:84:77:a9:fd:2b:17:90:a7:7f:27:2f:97:1f:cf:28:42:
         c8:12:a0:65:e8:8e:d1:ef:30:fa:cd:b5:22:ba:24:ed:5c:80:
         94:68:ae:93:5a:19:bf:12:df:16:3c:fe:02:4c:fe:2f:c6:22:
         00:a2:93:ef:4b:f6:b2:fe:fc:8c:5b:86:dd:9b:a1:3a:2e:e1:
         b0:b5:4e:45:28:80:71:4a:5f:46:e7:bd:ef:5c:53:2f:8a:eb:
         77:f4:ef:4d:ef:a1:70:5d:17:11:f1:90:ca:e4:78:4e:66:e2:
         1a:c2:7f:54:1c:10:44:70:e5:d9:7d:a1:50:91:cd:93:88:a4:
         50:14:0f:9e:47:5f:f5:b0:7f:ac:84:a3:a5:6c:b5:b6:ae:b7:
         85:a0:61:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:46 2026 by rpki-client