Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/7CBC92D21C7811EEA8F76D7FC4F9AE02.roa
File:                     7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (raw, json)
Hash identifier:          2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=
Subject key identifier:   6F:39:DA:E0:65:74:CE:DB:5B:8C:0C:3B:86:A7:97:2A:E5:6D:B3:1C
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       01F6
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/7CBC92D21C7811EEA8F76D7FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:27:54 +0000
ROA not before:           Sun 29 Jun 2025 03:31:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133500
IP address blocks:        103.232.80.0/22 maxlen: 22
                          103.232.80.0/24 maxlen: 24
                          103.232.81.0/24 maxlen: 24
                          103.232.82.0/24 maxlen: 24
                          103.232.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: Jun 29 03:31:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59059-f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:e6:58:57:68:e9:26:65:1b:9f:93:b5:ab:
                    2d:ed:1c:ce:d7:17:f2:bf:de:13:21:de:b3:81:50:
                    3f:03:81:74:76:71:c4:89:7d:db:c1:23:97:ba:ff:
                    ab:9b:b0:97:34:8e:e8:fe:01:3d:1d:d3:65:ac:f1:
                    25:50:fa:94:2b:7b:c4:23:3f:b1:91:d9:e3:58:54:
                    c3:c2:37:ff:05:d3:0f:0a:15:c7:35:2b:97:e6:b1:
                    bb:06:12:db:01:e0:9f:5f:d1:aa:9d:ef:65:c1:1a:
                    20:60:81:f2:09:24:d0:6f:f8:fa:a1:a8:3f:ea:12:
                    7b:d8:24:7d:a7:34:ae:28:d7:58:af:67:93:53:b9:
                    5b:e1:e9:8c:47:ee:a1:cf:8d:6e:69:e8:de:88:fe:
                    ef:ce:19:2f:b8:13:14:5c:27:7c:22:bd:6d:9d:34:
                    32:16:91:58:6f:92:bd:b2:fa:24:91:05:4b:e4:70:
                    37:6c:d9:05:e3:09:7e:34:e3:16:48:b7:7c:22:f4:
                    7b:3f:f0:cc:eb:44:7a:86:4c:6e:a7:6a:d5:33:af:
                    c8:34:2f:13:0a:f9:04:56:ac:d9:5d:5c:de:32:1f:
                    2f:28:fe:34:4f:a4:66:9e:a1:d6:3a:23:b8:5a:4d:
                    e6:14:d3:f1:37:bb:ce:12:bf:32:af:27:4f:6d:47:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:DA:E0:65:74:CE:DB:5B:8C:0C:3B:86:A7:97:2A:E5:6D:B3:1C
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/7CBC92D21C7811EEA8F76D7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:5c:5d:1b:db:e1:1b:47:71:ec:4f:3d:41:32:db:a8:36:20:
         67:93:bb:b7:d7:61:c2:03:d4:6b:02:6d:f9:d8:d4:01:2b:ad:
         f6:71:bf:02:fe:4a:44:5f:a8:72:aa:cb:51:63:3e:50:97:9d:
         d6:29:4a:b6:c2:cb:1f:38:5f:52:49:c1:65:8f:4a:0a:8b:79:
         58:59:82:4d:67:99:ff:36:51:bb:96:a5:0a:89:38:89:2b:f2:
         9e:4a:6c:14:73:37:a4:11:53:f5:26:08:1e:c9:3b:f0:4d:74:
         23:73:5a:26:fe:94:3e:6a:ed:b9:87:2b:95:bc:f2:7b:77:26:
         a6:d7:29:5d:21:67:04:92:55:06:7f:18:fa:91:b9:1a:e1:1e:
         e9:ee:b5:41:31:a4:d8:0b:6f:d3:36:7f:e8:dc:56:69:9e:8b:
         dd:f3:dc:21:f9:9c:04:13:2f:77:36:0c:a5:51:7a:11:d6:d1:
         37:d9:44:88:ef:7b:ff:37:f4:53:fe:64:c9:ac:b7:61:0c:b7:
         2c:32:1b:8d:47:1b:20:9e:9b:ca:90:f3:ea:17:89:d4:49:31:
         c0:ab:8b:c6:99:22:7f:75:c0:18:43:6e:56:c0:6f:84:a7:82:
         a9:b7:2d:94:eb:88:b9:c1:99:89:eb:c4:5f:ea:b9:bb:63:e3:
         fa:c1:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:53 2026 by rpki-client