Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
File:                     B9FDAFA436D511F09007A616C4F9AE02.roa (raw, json)
Hash identifier:          14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=
Subject key identifier:   2D:48:E9:2C:48:7F:B8:11:18:63:40:B1:22:B6:30:36:34:85:1C:6C
Certificate issuer:       /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial:       05E6
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:16:49 +0000
ROA not before:           Thu 18 Dec 2025 23:18:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55581
IP address blocks:        103.104.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
                          rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
        Validity
            Not Before: Dec 18 23:18:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44a50-5804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:8f:ca:a4:13:ff:2d:31:dc:41:0f:0f:cd:
                    27:d4:5b:99:62:63:a7:f8:38:b2:10:bf:52:1c:6a:
                    db:56:f7:b1:76:4d:4d:bf:35:48:74:7d:ee:0a:5f:
                    2c:d1:9c:b1:c9:ff:24:69:3d:05:99:63:01:0a:78:
                    57:d1:22:5b:09:6f:46:41:f8:cd:17:ba:f8:a2:fa:
                    20:15:04:3c:03:68:d8:a5:42:ca:b1:1d:a2:42:3e:
                    4c:de:9e:84:22:71:02:8c:74:51:71:9f:9c:f8:84:
                    ef:58:0b:cc:af:3d:b7:5b:4f:78:a1:54:39:a8:5f:
                    0a:54:c1:86:1f:3e:80:44:c0:57:27:66:7c:b8:52:
                    1f:e7:93:a6:4e:cb:18:9c:7c:11:6b:4a:48:03:42:
                    5c:49:bb:f2:a3:40:27:f8:00:99:b6:7f:34:0d:0f:
                    5c:cf:f6:92:61:b4:3e:03:42:24:7d:09:73:b7:3c:
                    44:68:42:ca:33:81:db:85:b2:20:1a:6c:80:68:a8:
                    a7:39:ed:3f:1b:fa:69:b2:05:a2:d5:1a:a6:66:c4:
                    76:0e:e1:ec:3a:07:fc:1f:bf:fe:f4:ef:99:98:55:
                    a2:87:b0:99:4b:40:75:a3:db:ee:c5:02:31:79:f0:
                    dd:ec:84:29:bd:af:8e:f1:fd:a8:14:5d:22:1b:e4:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:E9:2C:48:7F:B8:11:18:63:40:B1:22:B6:30:36:34:85:1C:6C
            X509v3 Authority Key Identifier:
                keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:db:c6:f5:8e:a7:94:6a:1b:48:15:20:82:1f:83:0b:5f:
         0d:ac:bd:37:07:6d:07:f9:bf:15:e2:69:40:4d:6b:39:f2:1b:
         5d:b0:c9:14:7b:30:c0:1d:de:69:20:c1:64:b9:f3:ab:5d:11:
         24:d8:eb:e2:4c:11:84:99:e3:23:72:a4:3e:5b:6c:ee:c1:a6:
         12:bd:4d:55:54:9a:ea:ba:2f:21:74:eb:60:ea:c1:0e:02:c3:
         25:a4:1c:cc:a1:96:8a:01:1f:96:c3:dc:cd:f9:0a:5f:ed:a5:
         aa:67:5c:32:02:e0:fb:3f:e7:6a:eb:66:62:a3:50:5d:28:de:
         43:a5:09:2c:5f:1b:97:09:63:3c:67:31:69:d4:62:28:04:ed:
         ac:c0:a5:ab:d7:d3:7a:bd:1b:ab:33:3a:d7:19:4b:7c:d7:71:
         db:09:b0:43:3d:db:e9:56:52:c4:34:78:a5:82:b2:44:a4:d0:
         0f:3f:f5:85:52:ae:66:71:a6:77:c9:38:bb:e8:cd:f3:9a:55:
         5f:50:ec:be:dc:f7:b0:1f:47:19:97:42:19:7a:0f:52:f0:67:
         9f:d2:71:38:6b:3d:9a:25:36:e1:13:23:18:b1:03:c3:81:91:
         01:a9:78:f7:ca:42:bc:35:0b:8a:5f:31:8d:77:29:c1:ab:24:
         5e:c5:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:41 2026 by rpki-client