Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa
File:                     01A8B084262811EA8269E33EC4F9AE02.roa (raw, json)
Hash identifier:          XTpbQflqD7TFkHQJp5BXjyAKD1uJrQHdMU7baBo5Omg=
Subject key identifier:   2D:1E:17:25:A4:CA:27:31:C3:17:BD:A4:91:E7:CD:F0:CE:15:F8:75
Certificate issuer:       /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Certificate serial:       0C59
Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa
Signing time:             Tue 28 Apr 2026 19:24:26 +0000
ROA not before:           Tue 28 Apr 2026 19:24:26 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     138634
IP address blocks:        103.135.37.0/24 maxlen: 24
                          103.150.58.0/24 maxlen: 24
                          2001:df7:e500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
                          rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3161 (0xc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
        Validity
            Not Before: Apr 28 19:24:26 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f1096a-05b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:0f:33:59:b4:1f:db:5e:78:d0:75:62:af:
                    a7:dd:31:cf:4d:6f:3c:cb:ff:8e:28:28:d1:dd:13:
                    30:aa:54:a6:df:63:c9:05:bc:d3:75:d2:85:92:0e:
                    43:11:74:f3:b7:87:1c:39:cb:2b:25:fc:f4:ea:e1:
                    57:12:44:9e:87:2f:1d:0b:5f:5c:a5:f7:0f:a9:6a:
                    ff:cd:f5:99:bb:f0:fb:6a:5e:85:e9:d8:6c:d6:8a:
                    6c:ae:a5:c4:23:4a:94:ef:3a:6b:0e:d9:c2:7b:2a:
                    c3:fa:69:b3:c6:67:07:a0:6d:9d:02:91:0a:20:22:
                    6d:7b:39:72:23:00:a4:bd:f0:b8:c9:0b:58:33:29:
                    a1:bd:ed:33:51:48:ef:aa:4c:a0:5d:6c:5c:9b:6b:
                    50:17:58:da:08:3b:a8:f2:13:da:b0:e4:5f:57:fd:
                    e8:69:8c:bd:35:9b:cf:1a:f2:f1:9b:22:c2:6a:13:
                    eb:b7:d6:b1:03:46:7d:e3:32:c8:b8:42:d7:b2:1b:
                    07:6e:45:42:5b:1c:c2:d3:8a:ad:98:59:ad:8f:0c:
                    ae:48:d2:da:9f:8b:1b:6d:b2:37:1f:68:f1:45:ff:
                    0b:f5:93:97:4f:25:8f:87:b9:53:a5:98:12:24:14:
                    d6:7e:d3:0b:07:85:0e:d4:ad:d0:93:6a:78:f9:91:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:17:25:A4:CA:27:31:C3:17:BD:A4:91:E7:CD:F0:CE:15:F8:75
            X509v3 Authority Key Identifier:
                keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.37.0/24
                  103.150.58.0/24
                IPv6:
                  2001:df7:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:62:f9:f5:6a:27:b2:12:79:3d:e9:4e:56:27:71:18:ef:b5:
         67:42:3c:e4:26:b6:f4:d4:ce:43:12:d5:41:4d:14:54:4a:b2:
         9b:30:96:e4:12:43:79:17:1c:fa:fe:17:9e:38:2b:4f:8e:f7:
         69:b4:d2:9f:30:78:04:a0:1a:d0:81:a8:1f:0b:eb:42:68:df:
         47:78:51:e9:28:55:b0:8e:12:ba:75:1c:f3:d9:97:7c:25:a5:
         fc:2b:92:78:95:0f:83:87:79:b7:9c:80:82:7f:85:d5:c6:48:
         b2:90:68:e2:e4:ac:f6:29:8e:25:b7:97:b6:0b:0c:01:82:af:
         35:f1:cc:dd:d7:a7:20:e7:d2:f4:6c:e7:89:71:0d:42:26:5a:
         bb:3e:b5:d3:57:af:f5:9f:6b:32:a0:ae:fa:aa:d7:32:9b:bb:
         36:60:e0:90:19:09:44:1e:e0:29:be:fc:1b:14:58:5f:95:05:
         99:bd:08:7d:c0:5a:f9:43:e8:2e:55:97:87:09:4b:66:b0:84:
         5e:cd:1c:78:4d:4c:d1:8d:f2:09:f2:4c:ee:5d:c8:b6:4b:dd:
         73:81:d9:54:9c:80:82:8e:95:97:67:10:4f:c9:f7:ce:87:ce:
         c6:66:7e:fd:a4:09:80:d2:88:06:1b:ac:fe:6a:18:35:d2:0d:
         f9:cc:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:35 2026 by rpki-client