Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
File:                     9CB324BA273111EF9F5B0860C4F9AE02.roa (raw, json)
Hash identifier:          suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=
Subject key identifier:   CB:74:E8:E5:9F:34:12:67:3F:19:7D:BB:D1:B7:6E:11:72:83:68:AD
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       05DF
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:05:47 +0000
ROA not before:           Thu 15 Jan 2026 15:15:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     142647
IP address blocks:        103.173.6.0/24 maxlen: 24
                          103.173.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Jan 15 15:15:49 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a471eb-057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:21:10:98:cf:35:79:77:b4:d6:a7:c6:8e:
                    90:4d:d3:91:f2:e6:99:c6:e7:f7:1a:33:ee:67:45:
                    b5:6b:b4:c1:f9:58:4a:51:2c:aa:02:40:7f:1e:f5:
                    20:6d:c6:e3:d7:95:b7:fb:9e:60:27:ca:bc:fc:37:
                    d7:78:f3:32:2b:fa:a0:9c:26:28:ad:cc:6e:77:de:
                    ab:df:09:f6:9c:45:0f:04:7c:5a:6c:2c:2d:db:8b:
                    be:fd:67:b9:53:83:1a:9e:54:7f:2c:10:58:ac:0a:
                    40:61:be:10:c7:f6:5d:f6:1d:c7:61:4a:ca:6f:78:
                    5d:e6:9c:86:dd:8c:21:3d:74:b3:80:da:0a:d0:5c:
                    71:0b:3f:68:9c:6a:32:30:e1:f2:bb:64:c4:85:86:
                    01:77:20:fe:ef:97:1d:7a:46:d4:96:c4:b5:c2:b3:
                    25:34:0e:11:d9:58:0a:e8:98:bb:f2:91:a0:4d:b8:
                    5a:f5:1c:ff:af:e3:e7:12:58:51:e1:b6:61:61:4d:
                    fd:b9:af:3a:a1:c0:59:17:8a:30:4f:26:c8:ab:6d:
                    40:ae:bb:67:8d:88:66:d8:2c:03:91:2e:b3:f4:9a:
                    9e:3e:0f:48:8a:d6:5d:d8:ba:8b:ce:1a:29:93:ea:
                    0f:ef:ac:50:75:af:f8:cd:88:54:ab:f9:be:ef:89:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:E8:E5:9F:34:12:67:3F:19:7D:BB:D1:B7:6E:11:72:83:68:AD
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:45:cc:05:f3:c2:e7:c9:81:ed:24:63:09:d1:68:bb:d3:
         15:d4:ff:9d:7b:04:b5:e9:6b:1a:e0:bd:9f:f9:d5:e1:d6:83:
         74:19:48:ba:e4:ca:e3:1e:d0:33:53:24:5a:cd:60:0c:6b:97:
         a1:e6:ad:d2:d7:63:e5:dd:f6:f7:57:42:8c:29:0a:5d:75:1c:
         44:52:6a:8f:75:c5:ca:16:91:9c:03:41:56:a1:f0:12:35:2f:
         d6:e8:e6:0c:aa:2c:87:2d:39:c1:d3:49:67:e9:a7:86:56:6b:
         8a:a2:1e:bf:21:f5:5c:20:07:e6:ce:31:e3:20:66:35:51:2f:
         37:50:7a:d0:51:16:e2:66:0f:fc:2c:e5:a4:21:01:4c:3e:87:
         af:96:ee:a8:53:fb:74:09:0a:f9:8b:71:50:69:e9:50:5f:a8:
         ea:76:c4:5c:56:61:5d:85:2d:14:d8:3f:d7:93:c3:38:1c:b1:
         29:0c:cc:93:a0:34:69:57:cf:7e:fb:11:16:a5:89:39:fb:09:
         d4:1d:a2:e5:25:6f:6d:e9:6e:26:df:7d:cf:39:ea:34:be:45:
         77:51:06:15:ae:50:67:1d:c8:f5:31:3f:6b:98:a1:c5:22:45:
         94:98:7b:37:4d:43:8f:8d:92:42:af:e5:2c:11:f2:e7:1f:2f:
         6d:71:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:47 2026 by rpki-client