Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/BCD0C756B3D111F09D2C6B5BC4F9AE02.roa
File:                     BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (raw, json)
Hash identifier:          eDWjFpNbWk+XbLw3lWSx0s46c4JyzqQLsP9ZRkskaaA=
Subject key identifier:   05:CF:C3:A7:DF:7A:DD:3C:B4:42:15:9F:8E:8F:B5:D0:73:43:C3:1B
Certificate issuer:       /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial:       88
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/BCD0C756B3D111F09D2C6B5BC4F9AE02.roa
Signing time:             Fri 03 Jul 2026 08:34:53 +0000
ROA not before:           Fri 03 Jul 2026 08:34:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151190
IP address blocks:        103.147.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
                          rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
        Validity
            Not Before: Jul  3 08:34:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a47742c-2ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:9f:95:14:17:e0:12:21:34:5d:df:9b:de:
                    e7:79:4e:e3:81:fe:bb:89:23:09:d6:3d:9d:30:0a:
                    17:d2:0b:3c:50:3c:58:21:a6:d8:b3:de:ce:0c:fb:
                    ec:1c:b1:1c:8a:7e:80:d0:f4:c8:67:77:90:8f:5c:
                    5e:63:73:ad:24:26:1a:b0:66:84:28:18:d3:65:46:
                    ec:42:02:f1:9f:a1:8c:18:a0:c9:16:e9:74:18:0a:
                    18:a9:47:cb:ee:e1:6d:bd:12:16:ad:1e:0b:8b:9a:
                    95:79:33:e3:ec:a5:13:eb:f2:29:6a:c9:68:01:da:
                    84:78:25:52:72:9f:65:cf:45:21:38:6d:4a:4d:14:
                    00:74:18:b6:5d:4d:74:46:04:bf:ab:66:78:58:82:
                    b6:f6:5c:c2:ed:e8:e0:7d:51:fa:41:f9:2e:5c:b7:
                    87:34:75:3f:fd:f3:a2:6c:59:95:e6:04:99:e4:0b:
                    8f:d2:aa:18:82:03:b5:14:c2:b3:b9:65:e3:ba:42:
                    ae:ea:63:76:74:36:5e:ef:63:a7:e9:6f:59:1f:d4:
                    eb:d4:9d:bb:7c:d0:00:ed:b8:12:d1:d0:54:b9:ed:
                    3b:36:5a:74:5c:f3:d2:b9:d0:e1:c5:0d:4b:a7:7d:
                    3c:a7:8c:ed:8c:45:68:0a:4d:02:37:37:92:be:94:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:C3:A7:DF:7A:DD:3C:B4:42:15:9F:8E:8F:B5:D0:73:43:C3:1B
            X509v3 Authority Key Identifier:
                keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/BCD0C756B3D111F09D2C6B5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:29:46:da:26:e9:42:2f:16:1c:fa:6c:c0:f9:c0:18:8d:a6:
         fc:60:0a:46:a5:6d:4b:67:95:d2:d6:0f:d1:1d:b9:d6:9e:71:
         e6:4a:bc:1a:7a:21:26:9c:d4:70:1e:70:a0:67:07:33:73:94:
         7b:c9:d5:cd:90:20:9c:ae:62:1c:9f:d9:29:57:ab:1b:42:a7:
         5f:e2:70:c0:4f:c0:a9:a7:0d:74:21:1e:e9:66:0e:3e:1b:f2:
         65:95:76:6d:0b:76:40:54:9f:b8:4e:c4:64:86:93:de:86:94:
         3b:07:96:1c:28:31:db:fe:0d:b2:ff:1c:04:13:ff:b0:b1:3c:
         99:81:4b:dd:e0:42:dd:a6:53:ec:e0:b0:c4:92:94:4f:10:7d:
         12:e7:3d:ca:b4:c4:bf:6e:d6:cc:f1:cb:43:bd:d2:72:be:03:
         77:ae:91:6e:c7:2d:5f:9e:bc:d0:78:99:c7:f3:45:1d:ae:83:
         cf:e6:1e:77:fa:e2:04:51:08:d1:c4:b7:52:e4:46:fc:eb:12:
         e6:ab:c6:f7:26:38:fd:8e:3f:a8:5e:e2:1c:14:a6:3c:be:a4:
         0f:75:fb:4c:53:a4:f3:79:0a:0a:88:d2:6a:6b:12:39:0c:5e:
         e0:d2:f8:12:0f:92:44:78:24:0d:f4:37:84:0e:75:b7:69:92:
         ea:84:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:26 2026 by rpki-client