Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa
File:                     9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (raw, json)
Hash identifier:          fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=
Subject key identifier:   0D:C2:5B:BC:37:F0:CE:17:78:E2:99:1A:42:70:C5:A2:EA:9E:B2:57
Certificate issuer:       /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial:       03C7
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 00:35:03 +0000
ROA not before:           Sat 25 Apr 2026 00:35:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141004
IP address blocks:        103.186.184.0/24 maxlen: 24
                          103.186.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
                          rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
        Validity
            Not Before: Apr 25 00:35:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ec0c36-b663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:ed:15:8c:e9:8d:17:33:3a:5f:2c:00:8e:
                    f1:13:9f:8f:8f:5b:c1:05:85:b8:e0:ba:9f:99:cc:
                    25:59:52:8f:22:b1:6a:d3:95:a0:24:26:ed:dc:c5:
                    f6:ef:ea:a7:5a:b4:a9:35:22:81:2c:e9:8f:4d:83:
                    e4:7c:19:44:ed:8d:09:b6:b4:bc:50:be:ca:1e:b2:
                    3b:bd:2c:d2:15:71:a0:bc:97:31:e4:b8:bc:80:15:
                    a2:bf:40:40:df:7c:b7:f0:fc:af:89:bb:f9:bf:db:
                    ab:55:e1:70:63:2f:36:7c:b5:5e:af:7c:ca:90:0b:
                    72:62:be:a3:67:91:b4:03:c4:1e:b1:55:8f:dd:bc:
                    0e:11:71:48:83:42:34:12:dc:00:15:e6:80:5e:5c:
                    b0:40:ef:09:59:54:2d:ed:6e:ab:e0:73:6d:c9:0b:
                    3c:e2:c9:74:52:13:3d:2d:b4:c8:4e:73:53:28:c9:
                    c8:fe:7a:a8:27:47:ea:59:1c:92:a3:96:1d:f3:02:
                    7f:ce:95:6c:29:75:b2:4d:bf:c4:3e:a6:a2:56:7f:
                    ee:27:3e:19:ca:f1:b1:f7:50:4a:08:be:1c:60:57:
                    45:b5:aa:fd:c6:e3:cc:c9:e5:c5:05:be:9f:2a:52:
                    3d:69:e9:66:96:e1:42:ac:41:fe:11:a0:14:ae:e2:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:5B:BC:37:F0:CE:17:78:E2:99:1A:42:70:C5:A2:EA:9E:B2:57
            X509v3 Authority Key Identifier:
                keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:4a:fa:80:81:13:37:79:ec:42:d4:d6:ac:dd:f2:05:56:
         f7:8c:30:82:76:13:ae:e5:70:72:98:bd:7a:ee:ea:16:2c:e3:
         ff:ec:9e:7a:28:89:93:66:05:92:3f:23:e4:03:d2:be:aa:7c:
         f9:01:f6:c7:67:0f:ae:df:33:42:4a:23:76:a2:57:35:47:80:
         bc:cb:2c:96:da:13:cc:d4:4e:c0:3a:82:c6:fd:9a:62:fb:0a:
         61:60:d2:7a:57:46:f5:20:a5:eb:ed:55:d3:f9:8e:0b:72:c3:
         85:4c:68:f8:f6:23:f1:b4:91:33:7e:70:e3:0e:2e:eb:6b:38:
         9b:c0:de:b3:3c:2c:85:f0:5e:ba:94:52:b1:fe:52:e6:2f:74:
         48:5b:13:09:79:71:24:6e:db:7a:cf:c8:a7:de:6e:24:9d:5e:
         8a:f6:fb:14:ac:16:f2:8c:73:c8:4b:55:88:47:6f:6b:12:e8:
         f3:56:73:f6:d1:44:86:c6:5e:df:b4:4d:42:f7:71:46:31:32:
         52:0e:7e:76:ca:3f:0b:17:e8:42:ac:a3:78:f8:21:46:b8:2c:
         d9:3e:81:bb:bd:d7:76:f0:47:9c:75:a7:a8:41:64:81:f9:24:
         77:69:9f:18:b4:9a:9c:34:95:72:cf:97:b7:ad:3a:01:c9:1c:
         26:c0:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:15 2026 by rpki-client