Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/4C66C2B497F711EF8863DA4BC4F9AE02.roa
File:                     4C66C2B497F711EF8863DA4BC4F9AE02.roa (raw, json)
Hash identifier:          o8q8cpWAFHMejNlyhFKsxJdzn6kYbKz2uPZ6/GcJTlk=
Subject key identifier:   BA:33:C5:42:12:1A:46:8F:31:C9:CE:BC:6B:F0:67:3C:62:6D:8B:EA
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       023F
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/4C66C2B497F711EF8863DA4BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:54 +0000
ROA not before:           Sat 13 Sep 2025 03:09:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139880
IP address blocks:        103.209.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Sep 13 03:09:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4560e-fb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:3f:57:9b:fc:ce:cf:0f:4c:bf:09:a1:21:
                    67:63:e4:47:f2:b6:3a:23:17:30:89:da:a4:64:b9:
                    84:0b:c1:a6:1a:84:1e:fa:09:d4:cc:5e:6e:a9:26:
                    56:32:f8:ff:1a:9f:ab:0e:d8:ae:5d:7d:1d:c3:26:
                    48:5b:a4:4c:12:10:2b:f1:82:a2:9c:cd:6f:5a:49:
                    68:36:79:55:29:cc:f9:f5:3c:a1:35:59:1b:fd:40:
                    21:67:d8:40:29:c7:80:92:6e:75:5f:63:e6:77:52:
                    46:e0:a5:ac:64:c0:f8:e7:ef:56:c4:1a:10:fa:7b:
                    29:27:76:79:86:34:33:eb:44:6c:30:73:59:04:30:
                    20:5d:89:4f:4a:7e:b6:f8:e9:75:fd:14:c4:da:28:
                    24:6c:77:f1:21:2b:a4:87:d9:56:b9:78:f0:f4:ac:
                    4d:29:38:43:06:a1:01:ce:19:6c:b8:ce:85:09:7e:
                    2d:0e:28:fb:40:98:ee:87:5d:f3:3f:da:20:56:94:
                    e6:7a:53:76:b4:dd:50:1f:b3:18:be:3a:eb:6e:30:
                    f4:00:81:03:00:ef:95:93:25:dd:a9:77:12:9c:b6:
                    64:d8:e8:2a:66:3c:e4:25:90:57:ae:5c:aa:14:de:
                    3d:cd:29:bc:c2:aa:1c:37:10:0e:99:06:40:00:5e:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:33:C5:42:12:1A:46:8F:31:C9:CE:BC:6B:F0:67:3C:62:6D:8B:EA
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/4C66C2B497F711EF8863DA4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d8:0b:80:9a:4f:03:43:e0:f7:ad:d6:43:0d:98:9e:3a:b0:
         ee:79:26:e3:98:24:31:49:e3:35:65:48:84:b6:1a:4d:07:c3:
         5d:d8:1d:ec:88:ab:7f:09:87:3d:3b:e2:24:41:93:0c:7b:b9:
         39:67:91:05:e5:ea:41:20:91:4c:84:3a:a8:f5:b8:88:bb:73:
         73:e4:c7:82:a5:eb:30:80:50:4e:70:aa:f2:8b:84:d8:5b:06:
         65:6d:e5:2f:83:87:98:8b:88:58:1b:61:88:e9:5d:b2:b8:ee:
         9d:99:5a:37:bf:8f:c4:74:3f:ad:83:25:ff:b9:7d:58:06:ad:
         c6:91:92:5f:52:c9:82:f2:b2:6d:d7:56:40:f5:eb:ad:f4:f5:
         03:1e:59:5a:ac:f5:73:5f:29:e4:de:3c:e0:9c:cf:61:e0:1a:
         6f:67:d2:e4:18:ba:94:a3:e6:4f:e3:32:76:00:a3:78:31:32:
         ad:8f:30:86:c1:32:28:f1:7e:06:1b:54:29:6c:6b:59:b9:2e:
         79:c5:4c:6e:c8:01:7e:55:24:1a:9b:e5:21:bd:ec:e2:5e:b2:
         fa:88:bf:6d:84:a3:c7:9e:82:69:71:2c:bb:54:6f:61:e0:0e:
         2d:49:f4:82:62:ee:c3:6f:be:d0:f1:d6:f0:2c:0f:39:dd:ba:
         9b:fa:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:42 2026 by rpki-client