Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
File:                     C9836F3A314C11EEB33F3686C4F9AE02.roa (raw, json)
Hash identifier:          wfqgmiYwhfm3vauQpeYyEZQnrqn5J3zQJQ5nfR04nk4=
Subject key identifier:   B2:39:1D:B6:05:54:89:44:95:53:66:E6:5E:06:B6:E0:30:E3:DF:9E
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       023C
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 03:29:23 +0000
ROA not before:           Sat 11 Jul 2026 03:29:23 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142111
IP address blocks:        103.158.74.0/23 maxlen: 24
                          2401:1da0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jul 11 03:29:23 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51b892-54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:3a:8d:4a:c5:1f:e0:35:42:dc:6c:5d:9b:
                    42:72:63:b6:84:a9:44:b0:1a:45:ef:ff:4f:f4:8a:
                    20:23:5a:68:ab:d4:bc:62:0a:c1:f4:ed:c2:b6:9e:
                    e4:bf:37:5d:2c:76:d9:31:9f:c2:66:40:68:3e:09:
                    43:06:ae:53:62:14:c5:17:f0:0f:89:eb:6b:39:59:
                    5a:34:96:bf:8a:56:c0:0e:47:c5:bf:5f:34:b8:95:
                    dd:13:14:b8:65:52:03:e1:1b:c1:45:35:cb:10:6d:
                    51:07:37:6c:72:40:70:47:c2:06:86:cc:86:9f:8c:
                    22:b4:d0:8a:b6:cb:96:6b:92:b5:da:3e:9a:82:fb:
                    3a:e0:18:59:0c:0a:fb:2e:97:f0:93:16:9e:8d:af:
                    9d:cf:95:fb:1c:59:bb:55:7a:ca:cc:75:2d:45:84:
                    60:ef:08:05:d8:7f:4c:e8:5e:9c:b2:ca:c5:cc:a3:
                    ac:14:16:29:25:68:20:e3:a7:5d:8c:08:8d:c6:40:
                    e0:76:ba:bd:7c:c9:d7:d3:72:b2:63:1c:86:49:64:
                    28:18:8a:92:95:1a:a3:e4:5a:f2:76:79:79:a0:68:
                    19:d2:b4:33:5b:62:42:29:8b:f1:5f:76:c3:c7:93:
                    ea:0f:f9:b8:2f:84:3d:26:b5:9f:a8:1a:cb:4d:4f:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:39:1D:B6:05:54:89:44:95:53:66:E6:5E:06:B6:E0:30:E3:DF:9E
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.74.0/23
                IPv6:
                  2401:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:82:67:82:74:5b:0a:15:a2:f0:10:c5:3c:88:29:f3:73:
         4c:d6:1d:1f:59:83:33:9f:da:ee:c7:50:15:a2:61:cc:10:4a:
         6f:2b:91:9c:75:3b:98:c4:5e:a1:f3:b9:e6:75:48:ba:7e:de:
         82:ab:e1:6a:68:a1:35:3b:03:e9:0d:8e:62:69:5e:34:8f:50:
         61:0b:8d:be:67:5c:bd:b9:cf:96:d8:d4:12:b5:bc:37:96:2a:
         86:d9:85:6c:da:7a:69:e8:01:92:52:22:1a:12:46:6e:51:98:
         0e:96:bc:ec:ae:8a:89:3b:34:91:62:7d:ef:86:e2:c8:2f:0d:
         c3:71:fb:c7:61:8a:c7:21:9f:f1:3e:90:c7:69:74:e4:63:27:
         17:e4:10:22:24:54:03:f8:91:2f:5a:01:be:34:07:29:a8:18:
         26:8f:87:f6:80:93:52:ee:6c:4e:ed:45:30:4a:18:c5:73:12:
         ea:77:de:a3:48:48:8e:d4:fb:a3:90:d5:84:17:25:44:01:32:
         35:7d:4d:a9:51:86:de:49:f6:5f:d1:ef:5c:0e:0e:e4:6c:cf:
         16:59:da:66:0c:9f:37:2d:0a:c6:69:86:4a:ce:3d:01:25:38:
         1c:4b:32:67:e3:64:90:f1:e8:91:8f:e2:e0:25:5b:d2:bf:d3:
         9e:b3:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:08 2026 by rpki-client