Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
File:                     B2B24A4221D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier:          UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=
Subject key identifier:   8E:8A:32:1E:51:73:9C:40:87:0F:5D:6C:9B:34:2B:E6:C1:E3:74:9B
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       1062
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 08:57:53 +0000
ROA not before:           Wed 29 Apr 2026 08:57:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.133.176.0/22 maxlen: 24
                          103.151.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4194 (0x1062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Apr 29 08:57:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69f1c810-db70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:6d:15:9c:b3:60:86:c3:97:60:ed:16:4f:
                    0a:7f:b4:02:66:b0:1e:e4:94:f7:a7:57:1a:58:1c:
                    70:11:af:d9:8c:ed:fa:31:dc:d8:07:0f:c1:0b:c6:
                    5e:ed:bf:b0:67:10:59:08:bd:81:5f:48:45:7a:e1:
                    c7:f2:68:4f:26:34:17:1c:52:bd:7d:2a:1c:bd:62:
                    43:35:2c:69:80:48:3a:76:a6:6c:4a:ba:ef:43:e1:
                    1a:b0:86:e0:47:40:e2:c4:02:84:cb:2c:73:c3:e4:
                    f0:1d:83:fa:3e:79:9c:be:fa:aa:97:6a:82:a5:b0:
                    0e:0a:58:b0:89:6a:73:57:28:0e:5d:fc:d6:82:74:
                    7f:bb:70:dc:82:a1:a8:a7:62:91:c2:5e:27:ac:fc:
                    a7:06:bc:0c:29:a1:05:10:f8:c8:d0:49:f3:5f:cb:
                    09:65:ce:2f:a3:d0:0f:e1:29:aa:73:19:78:1d:d6:
                    34:9c:c9:8a:36:a4:59:14:87:77:c0:f0:4c:fe:d8:
                    02:1d:9e:e0:f9:bc:e2:cf:82:8c:b1:06:ec:57:ca:
                    6c:83:d2:73:ff:6f:88:86:1f:0c:86:a5:30:85:10:
                    92:7a:33:42:dd:6b:13:c3:f1:71:95:b6:cb:34:a0:
                    d5:1c:58:dc:a5:91:30:78:8d:c5:b5:34:90:df:e0:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8A:32:1E:51:73:9C:40:87:0F:5D:6C:9B:34:2B:E6:C1:E3:74:9B
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:82:00:bb:b0:70:47:4d:92:ac:f1:b2:46:05:3b:2d:65:cd:
         59:c6:f6:a2:60:a8:9d:ef:42:86:5b:af:94:ed:6e:ec:32:cc:
         45:d6:22:81:a2:d9:c8:98:fd:3b:76:8a:ff:8e:96:f5:d8:6a:
         d9:d8:69:9b:b8:59:d5:3d:c5:0c:92:4c:99:76:01:80:3e:8e:
         d2:62:32:db:f7:a3:83:8b:80:49:97:dd:64:6a:bb:07:25:a1:
         84:c7:b7:fb:49:99:38:5c:0d:68:63:4e:7d:5a:11:82:45:2e:
         91:0c:7c:e8:67:c1:72:fc:39:6e:6d:60:75:7a:47:c2:40:8d:
         8c:18:81:38:ff:d0:1d:74:8a:a1:cf:38:15:dc:40:1e:aa:88:
         ed:85:e7:e0:be:8d:ad:de:18:de:32:57:e3:4a:52:0c:d9:db:
         1f:70:98:9b:0f:ba:cf:78:6d:a3:2d:38:73:c1:b9:8d:9c:3d:
         d6:c1:1d:52:6e:62:7e:0b:fb:ae:52:4e:3b:17:a0:db:ca:c2:
         f1:8f:c5:da:27:55:4b:1c:d8:15:e0:fd:55:4b:40:bd:fb:82:
         6b:40:3c:91:ea:57:d5:53:87:34:f5:10:20:a9:4d:e7:ab:96:
         26:6d:2d:05:2b:33:09:1d:3f:85:2a:26:2b:7c:a8:96:18:44:
         38:68:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:20 2026 by rpki-client