Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa
File:                     B71C4F80253711EFA1D2A943C4F9AE02.roa (raw, json)
Hash identifier:          lrHzUZJC1ea5UuKJEMRgND61h03DeLygnqAeiOXEI94=
Subject key identifier:   DC:CB:79:62:CE:E8:60:EB:3C:B8:90:EF:DF:C8:3B:F6:01:FF:65:0F
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       016D
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa
Signing time:             Tue 05 May 2026 05:36:56 +0000
ROA not before:           Tue 05 May 2026 05:36:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45152
IP address blocks:        103.9.56.0/22 maxlen: 22
                          103.9.56.0/24 maxlen: 24
                          103.9.57.0/24 maxlen: 24
                          103.9.58.0/24 maxlen: 24
                          103.9.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
                          rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: May  5 05:36:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f981f8-5eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:19:25:96:73:df:61:63:b0:2f:fb:72:60:
                    f8:df:33:9b:7e:94:67:c6:db:a9:a0:22:60:54:78:
                    ed:b1:9a:58:a2:65:2e:af:67:08:af:12:0e:81:3f:
                    0a:ab:47:a0:33:a0:35:77:3b:65:84:91:84:8d:23:
                    6c:bb:e6:f8:f2:ec:e6:87:39:cd:f9:f9:2c:c5:88:
                    57:cc:d5:23:d1:cb:e6:83:78:92:7c:ac:44:04:e1:
                    d4:83:eb:0d:02:04:b1:fb:fb:cc:dc:4d:aa:d4:b4:
                    0a:62:41:05:67:ae:02:aa:c2:af:d3:fc:08:46:ae:
                    e6:1b:39:c3:79:13:39:26:c6:93:a9:03:3c:80:39:
                    60:75:02:9a:ab:c4:5a:df:f2:df:91:42:11:05:4c:
                    3c:e1:eb:fe:b2:25:91:de:5a:4a:c6:a7:b3:2d:0a:
                    0e:ad:11:e9:2e:85:42:c1:f0:70:a8:df:9c:79:bb:
                    f4:a7:92:8d:33:23:cd:88:6a:09:ce:07:65:4b:8e:
                    a4:22:23:96:58:17:5c:2a:f7:3b:cf:09:42:d8:94:
                    11:1e:d7:1a:aa:86:d1:55:a9:9f:9c:09:58:aa:d4:
                    cc:3d:d6:9f:c4:48:2d:ac:3a:b4:40:12:7c:3b:bc:
                    67:19:68:ee:59:94:64:d8:e7:54:53:8c:5e:9d:9c:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:79:62:CE:E8:60:EB:3C:B8:90:EF:DF:C8:3B:F6:01:FF:65:0F
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:1d:c8:94:76:22:95:de:95:2f:ae:60:b7:2e:dd:a0:91:
         bc:c9:fc:10:b1:28:7e:69:fa:e4:67:70:33:30:db:c9:86:66:
         fd:81:14:05:db:95:59:51:c7:5d:fa:b1:f4:ae:f9:dd:ad:15:
         78:cd:86:ce:eb:12:57:4d:09:c1:e9:b9:56:be:c5:22:a3:1f:
         76:0d:64:c5:ee:fc:d0:8b:2b:15:28:2d:3a:8c:9e:7a:d2:55:
         b7:91:84:a8:a5:97:15:dd:ee:c7:43:b5:ae:8a:9e:6b:6c:d9:
         4c:b3:61:7d:49:9a:ca:40:c8:b6:21:27:a1:91:6a:4e:78:5e:
         2e:1f:f0:e1:3b:fa:e8:98:fa:dd:5a:6b:85:2a:3b:21:bb:03:
         af:1f:45:c5:ca:fd:31:00:a9:c3:af:c0:22:28:bf:df:89:e3:
         34:a2:a1:1b:ab:42:ee:15:5c:f2:a3:e7:57:4a:57:ed:67:01:
         15:e5:84:a3:24:68:f2:06:26:c8:56:c1:88:15:a4:00:a4:c3:
         d8:f9:09:95:95:fb:d1:0c:e8:84:ce:c1:06:30:20:4b:c1:a5:
         ab:1e:db:26:ec:30:74:3f:4d:f1:6f:fe:5d:a0:6a:6b:33:6a:
         05:dc:c8:1a:2b:d8:d8:0b:73:b5:c3:05:eb:dc:38:fb:0f:f8:
         13:f9:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:42 2026 by rpki-client