Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
File:                     B47C278021D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier:          YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=
Subject key identifier:   CA:B2:3A:83:21:8E:3B:3F:C7:DA:E7:B8:2A:32:68:62:12:7A:DA:FB
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       1065
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 08:57:58 +0000
ROA not before:           Wed 29 Apr 2026 08:57:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138538
IP address blocks:        103.133.176.0/22 maxlen: 24
                          103.151.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4197 (0x1065)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Apr 29 08:57:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69f1c816-fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:ed:34:a7:d2:b1:91:1e:7f:6e:7e:11:07:
                    90:eb:44:66:d6:f6:8c:5c:23:80:db:7a:30:51:d2:
                    18:39:6e:40:68:9e:20:ae:74:40:f0:fd:b5:af:91:
                    66:65:2c:b0:63:2e:7a:3a:c5:dd:07:45:f6:cf:5c:
                    f0:87:87:a0:21:15:0f:fc:c2:ad:d7:04:36:1b:ac:
                    b4:5d:79:98:29:de:4f:5e:23:29:e4:cd:8e:3a:de:
                    d8:16:12:65:7a:76:d1:25:69:5e:3e:76:15:dd:e0:
                    c1:97:77:47:57:42:35:03:b2:d7:c6:38:68:7c:1b:
                    7f:05:94:b5:dc:1b:98:a9:7f:0d:46:cb:17:01:2f:
                    2a:78:2d:6f:08:b1:21:18:42:8a:0b:05:4d:77:54:
                    3b:b4:9a:9f:53:48:47:43:93:5d:81:0b:9c:28:47:
                    b7:f2:90:7f:fa:75:b3:97:31:55:5b:44:64:30:80:
                    cb:e4:6a:49:dd:22:34:44:6a:ab:a0:89:09:c4:f0:
                    3e:eb:af:d5:ae:90:75:ad:31:13:68:49:3c:fa:fd:
                    7a:48:ae:3b:e2:62:32:bf:21:fb:c7:e6:e3:d7:08:
                    d0:3e:66:81:a5:89:6d:a7:a4:83:fb:8b:c5:fe:1b:
                    c7:41:1c:22:8e:c1:3e:14:e4:f4:f3:e4:a5:f5:c4:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:3A:83:21:8E:3B:3F:C7:DA:E7:B8:2A:32:68:62:12:7A:DA:FB
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:bc:35:95:a6:ae:4e:d0:e2:0e:86:f6:ee:4a:d0:89:bf:85:
         23:3b:fb:db:0a:40:ba:02:63:81:6f:05:df:66:cc:74:05:f3:
         ff:dc:63:56:61:f1:19:14:79:bf:0d:f0:11:a0:ed:78:4f:cc:
         92:30:56:78:9c:99:2a:7e:92:89:96:1f:49:52:0d:6f:b9:30:
         05:9f:d6:d2:aa:8b:6e:eb:fb:43:71:ec:97:39:61:01:0c:78:
         bc:b8:97:8f:9d:cb:a2:48:2d:e4:74:e2:94:58:9e:46:a8:09:
         97:2f:f7:d5:ce:7d:51:4e:56:d1:37:bc:a7:32:60:c5:c4:e6:
         f3:42:29:ff:e3:f0:f4:e4:86:7d:4e:13:f9:6e:11:ed:e0:5e:
         a9:44:ed:e8:31:fa:67:ce:39:f8:01:7f:f2:6a:ff:72:ff:7e:
         d1:f5:39:56:8a:13:d9:4d:6a:20:92:5c:1b:46:c1:77:e0:67:
         91:60:b7:66:0e:41:58:b7:64:a8:47:71:7c:20:83:12:c5:d2:
         72:12:39:00:e7:79:f2:cb:7c:4b:11:83:21:1b:72:38:fc:06:
         c6:1f:a7:bc:f9:d4:eb:c6:29:68:31:0d:c2:9e:4b:f3:38:29:
         ca:eb:78:51:9b:32:12:60:58:1e:09:e9:e1:7d:be:61:2c:eb:
         a1:09:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:50 2026 by rpki-client