Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
File:                     BC5887A44B6E11EFA3355126C4F9AE02.roa (raw, json)
Hash identifier:          6BeZ+T2YK4xcHE67iF1LQq1UDXWYxRVhMGtHVY4KZKQ=
Subject key identifier:   E6:2C:DA:56:7C:98:D4:5C:E9:A7:67:67:39:92:AF:E1:6B:C8:8D:1C
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05D8
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:40:05 +0000
ROA not before:           Sat 17 May 2025 00:14:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.116.4.0/24 maxlen: 24
                          103.116.5.0/24 maxlen: 24
                          103.116.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: May 17 00:14:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a433a5-afc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:f1:a3:6f:7a:3b:d2:61:51:79:d2:9a:99:
                    58:aa:16:c9:4c:10:99:8c:f8:39:04:3f:8d:06:95:
                    9c:99:c5:5f:5d:77:62:09:4b:06:6c:42:b0:f6:1a:
                    16:21:ab:4f:b7:6f:b3:fa:80:59:69:4a:5f:70:77:
                    10:bb:3f:23:3e:fd:cd:3f:63:62:6a:49:5c:f0:c4:
                    1b:9d:76:3d:13:13:4e:f9:a5:6a:06:2d:e4:c9:29:
                    e0:ce:4a:64:8f:fe:88:bc:e8:81:2a:30:4a:15:fd:
                    06:2b:f5:25:e6:69:fb:4c:ab:5b:c9:86:84:87:77:
                    ed:2d:c5:b7:86:f7:75:4c:5d:ce:15:8c:0a:4e:14:
                    87:ab:47:59:a3:ba:9f:8a:8a:e6:86:ea:c1:31:54:
                    f5:89:50:05:ef:60:20:ef:93:2c:27:fd:b3:80:fa:
                    2e:b9:24:ac:1f:c4:a1:0b:a0:78:4b:17:ca:96:f9:
                    3e:a2:fd:7a:bd:4a:a1:c3:f5:50:c6:88:34:eb:33:
                    5f:aa:a9:95:62:a7:7a:ff:71:fc:e5:47:cc:a7:44:
                    02:50:98:8c:ae:fd:e9:21:b9:e2:72:fb:08:15:71:
                    4c:48:c1:bf:21:c7:30:25:98:10:a6:83:9e:db:5e:
                    e8:80:f9:44:be:18:1b:d4:46:5a:39:ce:59:60:f0:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:DA:56:7C:98:D4:5C:E9:A7:67:67:39:92:AF:E1:6B:C8:8D:1C
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/BC5887A44B6E11EFA3355126C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.4.0-103.116.6.255

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:8e:a5:f1:f7:14:d9:50:08:a0:22:13:17:fe:84:d5:ba:
         c6:3a:f1:d1:2a:fe:41:e7:b6:67:d2:a0:c9:44:e2:45:cf:fd:
         c4:a9:01:da:f3:b9:b1:4b:b7:a9:aa:91:9a:f0:cc:fa:64:32:
         86:55:82:b9:69:ea:1e:d1:09:d4:73:8e:24:61:94:14:c5:21:
         14:7b:69:c1:da:cd:6f:59:e1:b9:03:24:82:1b:e2:d2:4d:fc:
         56:a3:d8:6d:f5:77:04:35:d8:2f:2b:ef:a3:eb:c8:7c:13:63:
         50:da:75:33:ed:ac:0f:52:b9:de:8f:c9:a7:73:7e:14:56:fe:
         c7:8a:26:ec:fa:fe:16:4d:34:95:c1:54:fd:aa:cb:99:d8:2b:
         b6:23:4e:c4:09:1e:d4:82:24:b6:4c:76:5e:f8:53:d2:28:c3:
         9b:81:28:cd:ac:41:9f:00:10:dd:f3:b0:84:c5:1e:6b:44:90:
         42:8d:c4:d0:3b:dc:6c:16:b9:58:20:c5:16:f7:6c:41:36:25:
         2e:80:d1:e7:2e:82:ad:44:69:ab:fe:4f:83:8f:05:73:10:25:
         f3:da:ba:a5:17:d0:ed:d5:46:90:07:89:59:0e:45:9c:be:14:
         05:72:76:39:a6:07:5d:da:d1:24:ed:f6:6a:7f:65:db:f8:c4:
         e8:dd:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:58 2026 by rpki-client